Privacy Policy
Last updated: 21 September 2026
1. Who this policy covers
JCABS (“the app”) is a mobile application published by Jcabs (“we”, “us”). It gives students, parents and guardians, teachers and school office staff access to records held in the JCABS school-management system operated for JCABS School.
The app has no public sign-up. You can only use it with a username and password issued by your school.
2. Your school decides what is collected; we process it
JCABS School is the data fiduciary (controller) for the records you see in the app. The school decides which student information is recorded, who may see it, and how long it is kept. We provide the software and operate the servers on the school’s instructions, as its data processor.
This matters in practice: if you want a record corrected or erased, the school is the right place to start. We will act on the school’s instruction, and we will help you reach the right person — see section 9.
3. What the app handles
The app shows you records your school already holds, and it sends back the things you enter in it.
Identity and profile. Name, username and internal student or staff ID, date of birth, gender, photograph, email address, postal address, and phone numbers for the student, parents and guardian. Where the school has recorded them, the profile also shows blood group, religion, social category and Aadhaar number. We treat these last four as sensitive: they are shown only to the account holder and to staff whose school role grants access, and they are never used for anything other than displaying the record.
Academic records. Attendance marks, homework and your submissions, exam datesheets, marks, grades and report cards, online-exam answers and scores, syllabus progress, timetable, library issues and course enrolments.
Fee records. Amounts due, amounts paid, fines, discounts and receipts. The app does not take payments. It has no payment gateway and never asks for card, UPI or bank details. Payments are taken by the school office and recorded there.
Things you create in the app. Chat messages between students, parents and teachers; leave applications and their attachments; homework file submissions; notices and marks entered by staff; tasks; and teacher ratings.
Files and photos you choose. When you attach a file or photo, the app reads only the specific item you pick and uploads it to your school’s system. It does not scan or index your gallery or storage.
Session data. A session token, your user ID and your role accompany every request so the server knows who is asking.
Push notification token. If you allow notifications, Google’s Firebase Cloud Messaging issues this installation of the app a registration token, and the app sends it to your school’s server so notices can reach your phone. It identifies this app on this device — not you personally, and not the device for any other purpose. It is used only to deliver notifications, and the server deletes it when you sign out or uninstall. Declining notifications means no token is created.
4. What the app does not do
- No advertising. There is no ad SDK in the app and no advertising identifier is read.
- No analytics or crash-reporting SDK. We do not track how you move around the app.
- No sale of personal data, ever, to anyone.
- No location. The app requests no location permission and cannot see where you are.
- No access to your contacts, calendar, call log, SMS or microphone.
- No profiling and no automated decision-making.
5. Why we handle this data
Only to run the service: to sign you in, to show you your school records, to carry what you enter back to the school’s system, and to keep the account secure. There is no secondary purpose.
6. Permissions the app asks for, and why
| Permission | Why |
|---|---|
| Internet, Network state | To reach your school’s server, and to tell you when you are offline |
| Camera | Only when you choose to take a photo for a profile picture or an attachment |
| Photos | Only when you choose an existing image to attach |
| Notifications | To alert you to notices, homework and results |
| Vibrate | To accompany a notification |
That is the complete list. The app asks for no other permission — no location, no contacts, no microphone, and no access to your storage beyond the single file you pick.
The camera and photo permissions are requested at the moment you use them, never at launch, and declining them only disables attachments. Notification permission is asked for after you sign in, and declining it only means you will not be alerted — everything else in the app keeps working.
7. What is stored on your phone
The app keeps your session token, user ID, role, the child currently selected (for parent accounts), and your theme and language preference in the app’s own private storage. This is standard app storage that other apps cannot read.
Signing out clears it. So does uninstalling the app.
8. Sharing and disclosure
We share your data with:
- JCABS School, which is where it comes from and where it belongs.
- Our hosting provider, which stores the school’s data on our instruction and may not use it for anything else.
- A public authority, where we are legally obliged to disclose it, and only to the extent required.
- Google (Firebase Cloud Messaging), which carries push notifications to your phone. It receives the notification’s title and text and this app’s registration token, and nothing else about you. It is not used for advertising or analytics. See Google’s Firebase privacy terms.
That is the whole list. We do not share data with advertisers, data brokers, analytics companies, or any other third party.
9. Your rights
You can ask to see the personal data held about you, to have it corrected, to have it erased, and to withdraw consent where consent is the basis for handling it.
Start with your school, because the school holds and controls the records. If the school does not resolve it, or you would rather come to us directly, write to info@jcabs.in. We will respond within 30 days, and we will consult your school before changing or deleting anything it is required to keep.
JCABS School
Bokaro
Email: info@jcabs.in
Phone: 9876543210
Grievance Officer
In line with the Digital Personal Data Protection Act, 2023, you may raise any complaint about how your personal data is handled with our Grievance Officer at Jcabs:
Email: info@jcabs.in
We acknowledge grievances within 30 days.
10. Deleting your account
Accounts are created and removed by your school, not from inside the app. The procedure — including how to request deletion if you no longer have access to the school — is set out on the Account & Data Deletion page, as Google Play requires.
Schools are generally required to keep academic and fee records for a period fixed by their board or by law, so some records may survive an account deletion. That retention obligation is the school’s, and the deletion page explains what is removed and what is kept.
11. How long data is kept
Your school sets the retention period for its records, in line with its board’s rules and applicable law. Session tokens expire when you sign out or when the server invalidates them. Uploaded files stay for as long as the related record does.
12. Children’s data
JCABS is intended for students aged 13 and over, for parents and guardians, and for school staff. Every account is issued by a school; there is no public sign-up.
Where a student is under 13, the school issues access to a parent or guardian rather than to the child, and the school obtains parental consent before recording that child’s personal data. We do not knowingly create accounts directly for children under 13.
If you believe a child under 13 holds an account of their own, tell your school or write to us at info@jcabs.in and we will have it corrected.
13. Security
Traffic between the app and the server uses HTTPS. Access inside the app is limited by your school role: staff see only the modules their role permits, and parents see only their own children. Passwords are held by the school’s system, not by the app.
No system is perfectly secure. If we become aware of a breach affecting your data we will notify your school and, where the law requires it, you and the relevant authority.
14. Where data is stored
Your school’s data is stored on servers located in India.
15. Changes to this policy
If we change this policy we will update the date at the top and post the new version at the same address. Material changes will be notified in the app or through your school.
16. Contact
Developer: Jcabs
Email: info@jcabs.in
For anything about your own records, contact JCABS School using the details in section 9.