Cambridge Global School, Madurai

The following table shows what data is collected by each app:

• To verify your identity via OTP and grant app access
• To personalise your experience with your assigned classes, subjects, and schedule
• To maintain a secure audit trail of all staff actions for school administration
• To detect and prevent unauthorised access, rooted devices, and tampered APKs
• To send push notifications for school events, notices, exam results, and bus alerts
• To enable teachers to submit leave, mark attendance, and manage academic activities
• To allow students to view their timetable, results, homework, and school notices
• To provide real-time bus location updates for safety and punctuality

All data is stored securely on Google Firebase (Firestore Database and Firebase Storage), hosted on Google's cloud infrastructure in the Asia Southeast region. The following security measures are implemented:

• AES-256 GCM encryption for all locally stored data on your device
• HTTPS-only communication — cleartext traffic is completely disabled
• APK signature verification to detect and block tampered app versions
• Root and emulator detection to prevent use on compromised devices
• Salted SHA-256 hashing for PIN storage — PINs are never stored in plain text

We do not sell, rent, or trade your personal information to any third party. Data is shared only with:

• Google Firebase — our cloud provider for authentication, database, storage, and push notifications
• School Administration — audit logs and activity records accessible only to authorised administrators

No advertising networks, data brokers, or external analytics platforms receive your data.

The CGS Bus Tracking App collects real-time GPS location data from the device installed on the school bus. This data is used exclusively for:

• Displaying the live bus location to parents and authorised staff
• Estimating arrival times at bus stops
• Safety monitoring during school trips

• Teacher & Admin accounts — data retained for the duration of employment. Access revoked immediately upon leaving the school.
• Student accounts — academic records retained for the duration of enrolment plus one year for transcript purposes.
• Audit logs — retained for a minimum of 2 years for compliance purposes.
• Bus location data — retained for 30 days, then automatically deleted.

• Request access to the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal and compliance requirements)
• Opt out of biometric authentication at any time in app settings
• Withdraw consent for push notifications through your device settings

To exercise any of these rights, contact the school administration at the details below.

The CGS Student App is designed for school-enrolled students, some of whom may be under 18. All student accounts are created and managed by the school administration — students do not self-register. Parent or guardian consent is obtained by the school during the enrolment process. We handle all student data with the highest level of care and in accordance with applicable educational data protection regulations.

We may update this Privacy Policy from time to time. Significant changes will be communicated through an in-app notification. The effective date at the top of this page will always reflect the latest version. Continued use of our apps after changes are posted constitutes your acceptance of the updated policy.