Privacy Policy

1. Introduction

Welcome to DigiAttend. We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our attendance management platform and related services.

DigiAttend provides digital attendance tracking solutions for educational institutions, tutoring centers, and individual educators. By using our services, you agree to the collection and use of information in accordance with this policy. If you have any questions or concerns about this policy or our practices, please contact us through our contact form.

2. Information We Collect

We collect information that you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources. The types of information we may collect include:

2.1 Personal Information

When you register for an account, we collect information such as your name, email address, phone number when provided, role, and institutional affiliation. We also process authentication and security information, including login history, password-protection records, and optional authenticator-app two-factor authentication information. For students tracked within the system, customers may provide names, student identification numbers, custom fields, class enrollments, schedules, attendance, notes, and parent or guardian contact information. Parent or guardian accounts may provide information used to verify and link them to a student.

2.2 Attendance Data

Our core service involves collecting and processing attendance records, including dates, times, attendance status (present, late, excused absence, unexcused absence), and any notes or comments associated with attendance entries. This data is essential for providing accurate attendance tracking and reporting.

2.3 Usage Information

We automatically collect certain information when you access or use our platform, including your IP address, browser type, operating system, device identifiers, pages viewed, features used, approximate location derived from network information, and the date and time of your visits. We use this information for security, fraud prevention, performance measurement, and service improvement.

2.4 Billing and Communications

For paid plans, Stripe processes payment details and provides us with transaction, customer, subscription, and invoice information. DigiAttend does not store full payment-card numbers. We also process messages submitted through the contact form and records of operational communications, including account, warning, suspension, deletion, schedule, and report notices.

3. How We Use Your Information

We use the information we collect for various purposes essential to providing and improving our services:

• To provide, maintain, and improve our attendance management platform
• To process and complete transactions, including subscription management
• To send administrative information, such as updates, security alerts, and support messages
• To generate attendance reports and analytics for authorized users
• To respond to your comments, questions, and customer service requests
• To monitor and analyze trends, usage, and activities in connection with our services
• To detect, investigate, and prevent fraudulent transactions and other illegal activities
• To personalize and improve your experience with our platform
• To comply with legal obligations and enforce our terms of service
• To generate Smart Insights from class-level attendance summaries and identify attendance trends
• To prevent abuse and verify that forms are submitted by people rather than automated systems

Smart Insights uses automated processing to create informational summaries and suggestions. The service receives class names, date ranges, weekly attendance totals and rates, and detected changes; it is not intended to receive student names. Outputs may be inaccurate and should be reviewed against the underlying records before use.

4. Information Sharing and Disclosure

We take your privacy seriously and do not sell your personal information to third parties. We may share your information in the following circumstances:

4.1 With Your Consent

We may share your information when you give us explicit permission to do so, such as when parents access their children's attendance records or when administrators share reports with authorized personnel.

4.2 Within Your Organization

Attendance data is shared with authorized users within your educational institution or organization, including teachers, administrators, and parents with verified accounts linked to specific students.

4.3 Service Providers

We use service providers to operate DigiAttend, including Supabase for application hosting, authentication, database, and server functions; Stripe for billing and payment processing; Google Analytics for site measurement; Google reCAPTCHA for abuse prevention; Lovable's gateway and its model providers for Smart Insights; and an email delivery provider for operational messages. These providers process information under their own terms and privacy commitments and only for the services they provide to us.

4.4 Support and Authorized Access

Authorized DigiAttend administrators may access or preview an account when reasonably necessary to provide support, investigate security or service issues, enforce these terms, or administer the service. Administrative actions and account previews may be logged and are limited through role-based access controls.

4.5 Legal Requirements

We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

5. Data Security

We implement appropriate technical and organizational security measures to protect personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, role-based access controls, security monitoring, and optional authenticator-app two-factor authentication. Users are responsible for protecting passwords, authenticator devices, downloaded reports, and exported files.

However, no method of transmission over the Internet or electronic storage is completely secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security. We encourage users to take steps to protect their account credentials and report any suspected security incidents immediately.

6. Data Retention

We retain information while an account is active and as needed to provide the services, meet the subscribing institution's instructions, resolve disputes, prevent fraud, and comply with legal obligations. Schools and educators control how long active student and attendance records remain in their accounts and should apply their own legally required retention schedules.

When an account deletion is processed, its active account data is permanently deleted and cannot be restored or exported afterward. Limited transaction, security, or legal records may be retained where required by law or reasonably necessary to establish or defend legal claims. A suspended account remains stored but inaccessible until it is restored or deleted.

7. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: You can request a copy of the personal information we hold about you
• Correction: You can request that we correct inaccurate or incomplete information
• Deletion: You can request that we delete your personal information, subject to certain exceptions
• Portability: You can request a copy of your data in a structured, machine-readable format
• Objection: You can object to certain processing of your personal information
• Restriction: You can request that we restrict processing of your information in certain circumstances

To exercise any of these rights, please contact us through our contact form. We will respond to your request within the timeframe required by applicable law.

If your information was entered by a school, tutor, or other organization, that organization controls the record. We may direct your request to it so it can verify your identity and determine the appropriate response. Authorized users can also export certain attendance records and reports directly from DigiAttend.

8. Children's Privacy

DigiAttend is designed for educational institutions and educators rather than for children to use independently. Schools, tutors, and authorized educators provide and control student information and are responsible for obtaining any consent or other legal authority required by applicable education and children's privacy laws, including FERPA and COPPA where applicable.

Student information is managed by authorized educators and administrators. Parents and guardians may access records only after being linked to the relevant student through the platform's verification process. Requests to correct or delete school-controlled student information should ordinarily be directed to the school, tutor, or educator that manages the account.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. When we transfer your information internationally, we implement appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy and applicable data protection laws.

10. Cookies and Tracking Technologies

We use cookies and similar technologies for authentication, security, preferences, and site measurement. Google Analytics helps us understand pages viewed, device and browser information, approximate location, and usage patterns. Google reCAPTCHA analyzes device and interaction signals on protected forms to prevent spam and abuse; its use is subject to Google's Privacy Policy and Terms of Service.

You can control cookies through your browser settings and use the Google Analytics browser opt-out. Blocking essential authentication or security storage may prevent parts of DigiAttend from working.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, provide additional notice such as via email or through our platform. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at: