Bina Bangsa School Parent & Staff Communication App

Privacy Policy

Last updated: 6 July 2026

This Privacy Policy explains how the Bina Bangsa School communication app (the “App”) handles information. The App is a private tool used by the Bina Bangsa School community to share classroom photos, weekly logs, menus, and to enable direct messaging between parents and teaching staff.

1. Who is responsible for your data

The school is the controller of the information processed through the App. For any privacy questions or requests, contact the school at the address in the Contact section below.

2. Information we process

We only process information necessary to run the school communication service:

• Account information — the name and email address of the account holder, and the role assigned by the school (parent or staff). Passwords are stored in hashed form by our authentication provider and are never visible to the school or to us.
• Child & classroom information — a child’s first name, class/level, an optional profile photo, and the association between a child and their parent(s), as entered by school staff.
• Content shared by staff — classroom photos, weekly log PDFs, and weekly menu PDFs uploaded by teachers.
• Messages — the text and any photo/video attachments you send or receive in one-to-one chats between a parent and a teacher, together with reactions (like/love) on photos.
• Basic technical data — information needed to keep you signed in and to deliver content and messages securely.

The App does not use third-party advertising, and does not collect location data, contacts, or device identifiers for tracking. We do not sell personal information.

3. Information about children

Content in the App may relate to children (for example classroom photos and weekly progress logs). This information is uploaded by school staff and is visible only to the child’s own parent(s) and the relevant teaching staff. Parents do not create child records; these are managed by the school. If you believe information about your child should be corrected or removed, please contact the school.

4. How information is used

• To let parents view photos, weekly logs, and menus for their own child’s class.
• To enable secure one-to-one messaging between parents and teachers.
• To let authorised staff upload and manage classroom content.
• To authenticate users and keep accounts secure.

Access is strictly role-based and enforced on our servers: parents can only access content for their own child’s class; staff access is limited to their assigned classes; and oversight roles are read-only. Users cannot see other families’ private content.

5. How information is stored and shared

Data is stored securely using Supabase, our backend and hosting provider, which processes data on the school’s behalf. Files (photos, PDFs, and chat attachments) are kept in private storage and are served only through short-lived, access-controlled links to users who are permitted to view them.

We do not share personal information with third parties for their own purposes. Information may be disclosed only where required by law, or to the service providers that operate the App’s infrastructure under confidentiality obligations.

6. Data retention

Information is retained for as long as an account is active and the family or staff member is associated with the school, and as needed to provide the service. When an account is deactivated, associated personal content is removed or anonymised in accordance with the school’s records policy.

7. Your choices and rights

• You may request access to, correction of, or deletion of your personal information.
• You may ask that content relating to your child be reviewed or removed.
• You may delete individual messages you have sent within the App.
• You may request that your account be deactivated.

To exercise any of these, contact the school using the details below.

8. Security

Connections are encrypted in transit, content is held in private storage, and access is enforced by server-side, row-level security so that each user can only reach the content they are authorised to see. No system is perfectly secure, but we take reasonable measures to protect your information.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected here with a revised “Last updated” date.

10. Contact