GuardianPD Privacy Policy

Effective and last updated: August 27, 2026

GuardianPD ("GuardianPD", "we", "us") provides a school pickup/drop-off attendance system used by schools, school staff, and parents/guardians ("Guardians"). This policy explains what information the GuardianPD mobile app and backend collect, how it is used, who it is shared with, and the choices available to you.

GuardianPD is provided to a school as its customer. Within a school's account, that school's administrators control which staff and guardians are enrolled and what child records exist — see "Our Role vs. the School's Role" below.

Information We Collect

Guardian (parent) account information

Name, email address, and phone number, provided by the school when enrolling a guardian.
A password, if the guardian activates their own login (stored only as a salted hash — we never store or can recover the plaintext password).
An optional photo, if the school uploads one for identification purposes.

Child information

Name, date of birth, and grade, provided by the school.
An optional photo, if the school uploads one for identification purposes.
Which guardian(s) are authorized to pick up or drop off each child.

Child records are created and managed by school staff, not by children themselves. GuardianPD is not directed at children and does not knowingly collect information directly from children — see "Children's Privacy" below.

School staff account information

Name, email or username, and a password (stored as a salted hash) for staff and school-admin accounts used to log into the app.

Attendance and QR credential data

A unique, signed QR code is issued per guardian and used to identify them at scan time. The QR code itself does not contain personal information — it is a signed reference token.
Each scan creates an attendance record: which child, which guardian, drop-off or pick-up, the time, and which staff member performed the scan.
If a scan doesn't match an expected pattern (e.g. no drop-off recorded for a child by a school-configured cutoff time), the system may flag the event and, if the school has enabled it, notify guardians by email.

Device and notification data

If a guardian enables push notifications, we store a device push token (via Firebase Cloud Messaging) so we can notify them when their child is scanned in or out.

Billing and payment data

Schools are billed based on the number of enrolled children. We store invoice records (amount, billing period, payment status) and a school's billing contact email.
Payments are processed by Paystack. GuardianPD does not collect or store card numbers or other raw payment credentials — those are handled entirely by Paystack's own systems.

How We Use Information

To operate the core attendance/pickup feature: verifying a guardian's QR credential, recording drop-off/pick-up events, and showing that history to authorized school staff and to the guardian involved.
To send notifications: push notifications and/or emails to guardians when their child is scanned, and welfare-check emails if a school has enabled cutoff-time monitoring.
To authenticate accounts and secure the system (password hashing, signed tokens).
To bill schools for their subscription based on enrolled child count, and to send billing-related emails to a school's billing contact.
To operate and improve the service, including diagnosing technical issues.

We do not sell personal information, and we do not use guardian or child data for advertising.

Our Role vs. the School's Role

Each school's data (guardians, children, staff, attendance records) is kept in a separate, isolated database for that school. The school itself decides which children and guardians are enrolled, uploads any photos, and controls which of its own staff can access the system. GuardianPD acts as the technology provider that stores and processes this data on the school's behalf. Requests to correct or remove a specific child's or guardian's record are generally handled by the school directly through their admin account; you can also contact us (below) and we will route the request appropriately.

How Information Is Shared

Recipient	What is shared and why
The enrolling school	All information described above, since the school is the account holder responsible for its students and staff.
Paystack	Billing contact email and invoice amount, to process a school's subscription payment. Paystack's own privacy policy governs their handling of payment details.
Firebase Cloud Messaging (Google)	A device push token, solely to deliver pickup/drop-off push notifications to a guardian's device.
Email delivery provider	Recipient email address and message content, solely to deliver activation, notification, and billing emails.

We do not otherwise share personal information with third parties, except where required by law.

Data Retention

We retain guardian, child, and attendance records for as long as a school's account remains active, so that attendance history stays available to the school and to guardians. If a school's account is deactivated, its records are retained for a reasonable period in case of reactivation or a legal obligation to retain them, after which they are deleted on request or per our standard retention schedule.

Children's Privacy

GuardianPD is intended for use by parents/guardians and school staff, not by children directly. Child information (name, date of birth, grade, optional photo) is entered and managed by school staff or guardians acting as the child's parent/legal guardian, not collected directly from the child through the app. If you are a parent or school administrator and believe a child's information was provided to us in error or without appropriate authorization, contact us at the address below and we will address it promptly.

Security

Passwords are stored only as salted hashes. QR credentials are signed tokens rather than raw identifiers. Access to a school's data is restricted to that school's own authenticated staff and guardian accounts. No method of transmission or storage is 100% secure, but we take reasonable technical measures to protect the information we hold.

Your Rights and Choices

Guardians may request access to, correction of, or deletion of their own account information and their child's records by contacting the enrolling school or by emailing us directly.
Guardians can disable push notifications at any time from their device's notification settings.
Guardians can decline to activate a self-service login; the school can still use the QR credential without it.

Changes to This Policy

If we make material changes to this policy, we will update the "last updated" date above and, where appropriate, notify schools through the app or by email.

Contact Us

Questions about this policy, or requests regarding your personal information, can be sent to info@de-ronimak.com.