In short: EduGate Cloud holds information about children, so we protect it more carefully than anything else — only the right people at the school can see it, and we never use it for anything other than running the school.
1. Our commitments
- Children's information is used only to provide school services — never for advertising, profiling or sale.
- Children do not sign up for EduGate Cloud. All student records are created by their school.
- Every person sees only what their role needs. Parents see only their own children.
2. Who can see what
- Parents and guardians: only the children linked to their account by the school.
- Teachers: only the classes and subjects assigned to them.
- Drivers: only the names, stops and pickup status of students on their route for the current trip — never grades, fees or welfare notes.
- School office staff: only the modules and campuses their role allows, as set by the principal.
- EduGate Cloud staff: only when the school asks for support, with access logged and limited to what is needed.
3. Photos and the event gallery
Schools decide whether to use photos. Gallery albums are visible only to parents of the school, can be limited to a class, and cannot be downloaded in bulk by parents. Schools should record parents' photo consent and can hide any child from published albums.
4. Location
Location is shared only by the Driver app during an active trip, so parents can see the school vehicle. We do not track the location of children or parents' phones. Trip history is kept for the school's safety reviews.
5. Sensitive information
Welfare, medical and safeguarding notes are visible only to the roles the principal chooses, and every view or change is recorded in the audit log.
6. Security measures
- Encryption of data in transit (HTTPS/TLS) and at rest.
- Strong password rules, optional two-step verification for school office users, and automatic sign-out on shared devices.
- Role-based access and a full audit log of sensitive actions.
- Daily encrypted backups, kept for 30 days.
- CNIC and phone numbers are masked on screen wherever full values are not needed.
- Background checks and confidentiality agreements for EduGate Cloud staff with system access.
7. If something goes wrong
If we become aware of a security incident affecting a school's data, we will inform the school's principal or registered contact within 72 hours, explain what happened and what we are doing about it, and help the school inform families where needed.
8. Rights of parents, students and staff
People can ask to see, correct or delete their information through their school. We support schools in responding within 30 days. Schools can export or delete any record at any time.
9. Reporting a concern
If you see something in EduGate Cloud that worries you about a child's safety, contact the school immediately. To report a concern about how EduGate Cloud handles data, email [email protected] — we treat every report seriously and respond within one working day.