The information we collect depends on your role and how you use EduCode.
Information used to identify and authenticate authorised users, including:
- Full name
- Email address
- Phone number
- Username or account identifier
- User role
- School or branch affiliation
- Account status and access permissions
Depending on the services enabled by the school, EduCode may process information such as:
- Student name and identification information
- Class and grade information
- Academic year
- Attendance and absence records
- Academic information
- Timetable information
- Assignments and educational activities
- School notices and communications
- Student-related requests and records
We may process information relating to parents or guardians, including:
- Name
- Contact information
- Relationship to the student
- Linked student accounts
- School communications
Basic technical information necessary to operate, secure, and improve EduCode, such as:
- Device type
- Operating system
- App version
- Device language
- Login and session information
- Technical logs
- Error and diagnostic information
- Security-related information
For teachers and authorised school employees, EduCode may process information including:
- Employee name
- Employee identifier
- School role
- Classes and subjects
- Work-related communications
- Information necessary to provide authorised school services
Information You Provide: We may collect information that you voluntarily submit when using EduCode, including information provided through forms, requests, messages, support requests, school communications, and other App features.
We use personal information only when necessary for legitimate educational, administrative, security, or operational purposes. Information may be used to:
Provide and operate EduCode.
Authenticate authorised users.
Manage user accounts and permissions.
Display school, student, academic, and administrative information.
Provide communication between schools, students, parents, teachers, and staff.
Process requests submitted through the App.
Deliver notifications and school announcements.
Maintain the security and integrity of the Service.
Detect and prevent misuse or unauthorised access.
Provide technical support.
Diagnose technical problems.
Maintain and improve the App.
Maintain required school records.
Comply with applicable legal and regulatory requirements.
EduCode does not sell or rent users' personal information to third parties.
Personal information is shared only when necessary to provide EduCode or when required by law. Information may be shared with:
Riyadh Najed Schools
Authorised employees, teachers, administrators, and other school personnel may access information according to their assigned responsibilities and permissions.
Service Providers
We may use authorised technology and infrastructure providers that assist with services such as:
- Application hosting & Data storage
- Security & Notifications
- Technical support & Monitoring
Such providers process information strictly as necessary to provide their services under appropriate protections.
Legal & Authorities
Information may be disclosed when required to comply with:
- Applicable laws & Court orders
- Regulatory requirements
- Government requests & Legal obligations
Zero-Sale Policy: We do not sell personal information to advertisers, data brokers, or other third parties.
We use reasonable technical and organisational safeguards designed to protect personal information from:
Unauthorised access
Unauthorised disclosure
Loss
Misuse
Alteration
Destruction
Security measures may include access controls, authentication mechanisms, system monitoring, secure communications, permission management, and other appropriate safeguards.
However, no electronic transmission or storage system can be guaranteed to be completely secure. Users are also responsible for maintaining the confidentiality of their login credentials and should not share their account information with unauthorised persons.
We retain personal information only for as long as reasonably necessary to:
Provide EduCode services.
Maintain educational and school records.
Fulfil administrative requirements.
Meet legal or regulatory obligations.
Maintain security and audit records.
Resolve disputes & enforce policies.
Retention periods may vary depending on the type of information, applicable legal requirements, and school record-keeping obligations. When information is no longer required, it may be securely deleted or anonymised where appropriate.
Users, parents, guardians, or other authorised persons may request correction or deletion of personal information where applicable.
Requests may be submitted by contacting us using the details provided in the Contact Us section below. Before processing a request, we may need to verify the identity and authority of the person making the request.
Retention Exceptions: Certain information may not be deleted immediately when retention is required for legal obligations, regulatory requirements, educational record requirements, security purposes, fraud prevention, or legitimate school record-keeping purposes. Where retained, access will remain limited strictly to authorised purposes.
If EduCode provides users with the ability to create their own account within the App, eligible users may request deletion of their EduCode account and associated personal information.
Account deletion requests may be submitted through the available account deletion feature or through the official deletion request method published by Riyadh Najed Schools.
When an account deletion request is approved, associated personal information will be deleted unless certain information must be retained for legitimate legal, regulatory, security, or school record purposes. Disabling or deactivating an account does not necessarily mean that legally required records will be deleted.
EduCode is intended for use within school communities and may be used by children and students under the supervision and authority of their school, parents, or guardians.
Student information is processed only for legitimate educational, administrative, communication, security, and school-related purposes. Access to student information is restricted according to authorised roles and permissions.
Where parental or guardian involvement or consent is required by applicable law, the school is responsible for applying the appropriate procedures. EduCode does not knowingly use children's personal information for behavioural advertising or sell children's personal information.
EduCode does not collect, store, or share face images, facial templates, fingerprints, or other biometric identifiers unless a specific biometric feature is separately introduced, clearly disclosed to users, and implemented in accordance with applicable requirements.
Device-Level Biometric Authentication
If users use device-level biometric authentication, such as fingerprint or face authentication, the biometric verification process is performed exclusively by the device operating system. EduCode does not receive or store the user's fingerprint, facial template, or other device biometric credentials as part of standard device biometric authentication.
EduCode may send notifications relating to school and educational services, including:
School announcements
Academic information
Attendance updates
Requests & communications
Important account & security alerts
Users may be able to manage certain notification permissions through their mobile device settings. Some important communications may still be made available within the App.
EduCode may rely on trusted third-party technology services required to operate certain App functions. These services may process limited information where necessary to provide their functionality.
Where third-party services process personal information on behalf of EduCode or Riyadh Najed Schools, appropriate safeguards are expected to be applied in accordance with applicable requirements.
Where technical service providers or infrastructure are located outside the user's country, information may be processed in other jurisdictions. Where applicable, appropriate measures will be taken to protect personal information in accordance with relevant legal and contractual requirements.
Subject to applicable laws and school policies, users or authorised parents and guardians may have the right to:
Request access to personal information.
Request correction of inaccurate information.
Request deletion of eligible personal information.
Ask questions about how personal information is used.
Raise concerns regarding privacy or data protection.
Some requests may be subject to legal, regulatory, educational, or identity-verification requirements.
We may update this Privacy Policy from time to time to reflect:
Changes to EduCode features.
Changes to data-processing practices.
Security improvements.
Legal or regulatory requirements.
Operational changes.
When this Privacy Policy is updated, the Last Updated date shown at the top of this page will be revised. Users are encouraged to review this Privacy Policy periodically.
If you have questions about this Privacy Policy, how personal information is handled, or wish to submit a privacy-related request, please contact:
Important Privacy Notice
Your privacy matters to us. EduCode uses personal information only to provide authorised educational, administrative, communication, security, and school-related services.
EduCode does not sell personal information to third parties.