Softscraft School

Last updated: 12 October 2026

This Privacy Policy explains how Demo School (“we”, “us”, “the Institution”) collects, uses, shares and protects personal information when you use:

the SoftsCraft Students App Android application (package com.codefixit.softscraftstudentapp, “the Student App”),
the SoftsCraft Teachers App Android application (package com.codefixit.softscraftteacherapp, “the Teacher App”), and
this website,

together, “our Services”. “the Apps” means the Student App and the Teacher App.

The Apps are private, login-only portals for students enrolled with, and teachers employed by, the Institution. They are not public social networks and they do not display advertising. By using our Services you agree to this Policy. If you do not agree, please do not use the Apps.

Want to delete your account? See How to delete your account and data (section 12).

1. Who is responsible for your data

Demo School is the data controller for the information described here. You can reach us at:

Address: Naogaon,Bangladesh
Phone: 01780163105
E-mail: mizan32cse@gmail.com
Support desk: https://www.sch.softscraft.com/support

2. Information we collect

Accounts in both Apps are created by the Institution — there is no public sign-up. What we hold about you depends on whether you use the Student App or the Teacher App.

2.1 Student account and profile information (Student App)

Your student profile record, entered by the Institution during admission, may include:

Full name, admission / system ID and account status
Father’s and mother’s name
Date of birth, gender and blood group
Mobile number and home address
Student photograph (used on your profile and digital ID card)
Academic session, class, section and group
Documents uploaded to your student file by the Institution (available on the student web portal; the Student App does not display them)

2.2 Student academic information (Student App)

Attendance records
Exam schedules, seat plans, marks, letter grades, GPA and transcripts
Homework assigned to your class
Promotion and academic history
Online (MCQ) exam attempts: your answers, timing, score and review data

2.3 Examination integrity information (Student App)

While an online exam attempt is in progress, the Student App records exam-integrity signals such as the number of times the exam screen is left or the app is switched away from, together with the start, save and submit timestamps of your attempt. This is used only to protect the fairness of the examination and is visible to authorised Institution staff. The Student App does not take screenshots, record your screen, use the camera or microphone, or monitor any other app.

2.4 Student financial information (Student App)

Fee heads, dues, discounts and waivers applicable to you
Payment receipts recorded by the Institution’s accounts office (amount, date, method, receipt number)

The Student App displays these records for viewing only. It does not process payments and does not collect card, bank or mobile-wallet credentials.

2.5 Teacher account, employment and payroll information (Teacher App)

Your teacher profile record, maintained by the Institution’s administration, may include:

Full name, system ID, employee ID, e-index number, designation, joining date and account status
Father’s and mother’s name
Contact details (mobile number, e-mail, address)
National ID (NID) number
Photograph, date of birth, gender and blood group
Qualifications, subjects and class / section assignments
Employment documents uploaded to your staff file by the Institution, which you can view and download in the Teacher App
Payslips and salary records (allowances, deductions, net pay) prepared by the Institution’s payroll — the Teacher App displays these for viewing only and does not process any payment

2.6 Content teachers create in the Teacher App

When you use the Teacher App to do your job, the records you create are stored on the Institution’s servers and attributed to your account:

Attendance you take for your classes
Exam marks you enter for your students
Homework you assign, including any attachment you upload
Notices you publish on the notice board
Question-bank and e-library files you upload
Edits you make to student records you are authorised to manage (these changes are logged)

2.7 Information you submit (both Apps)

Support tickets: the category, priority, subject and description you write, plus any file you choose to attach (JPG, PNG, PDF, DOC or DOCX, up to 5 MB).
Password changes: your current and new password, which are stored only in irreversible hashed form.

A file is read only when you pick it yourself from the device file picker — for a support attachment, or (in the Teacher App) a homework, question-bank or library upload. The Apps do not scan, index or upload your gallery, documents or any other file in the background.

2.8 Technical information (both Apps and the website)

Like any internet service, our servers automatically record limited technical data when an App communicates with them: IP address, request date and time, the endpoint requested, HTTP status and a basic user-agent string identifying the App’s network library. This is used for security, abuse prevention and troubleshooting.

2.9 Information stored on your device (both Apps)

Your login token, kept in the operating system’s encrypted storage (Android EncryptedSharedPreferences).
A cached copy of your basic profile and app preferences, so the App opens quickly.
Cached copies of images shown in the App, such as profile photographs.
Files you choose to open (for example a receipt, result card, payslip, homework attachment or library document), which are saved to the App’s private temporary storage and opened in a viewer app of your choice.

Your login token and cached profile are erased when you log out. Everything the App stores, including cached images and temporary files, is erased when you uninstall it. If you save or share a copy of a file from the viewer app, that copy is outside the App’s control.

3. What we do not collect

This applies to both the Student App and the Teacher App:

We do not collect your precise or approximate location.
We do not access your contacts, SMS, call logs, camera, microphone or photo library (other than a single file you pick yourself — see section 4).
We do not collect device identifiers such as the IMEI, serial number or Android ID.
We do not collect advertising identifiers and the Apps contain no ads and no third-party advertising, analytics or crash-reporting SDKs.
We do not build advertising or behavioural profiles.
We never sell or rent personal information to anyone.

4. Device permissions the Apps request

Internet / network access — required to communicate with the Institution’s servers. This is the only permission declared by either App.
File access via the system picker — when you attach a file to a support ticket, upload a homework, question-bank or library file (Teacher App), or save a downloaded document, the App uses the Android system file picker, which gives it access only to the specific file you choose. You may decline; only those specific features will be unavailable.
Phone dialer — tapping a phone number (for example a teacher’s number in the Student App) opens your phone’s dialer with the number filled in. The App does not place calls itself and needs no phone permission to do this.

5. How we use your information

To authenticate you and keep your account secure
To show students their profile, digital ID card, attendance, results, transcripts, seat plans, homework, fees and receipts
To show students a directory of their teachers, so they can contact staff about school matters
To show teachers their profile, employment documents, class lists and payslips
To let teachers take attendance, enter marks, assign homework, publish notices and share teaching material
To deliver notices, e-library material and question banks published by the Institution
To conduct and grade online examinations and to safeguard their integrity
To receive, route and answer support tickets
To carry out account deletion requests
To maintain the Institution’s statutory academic, employment and financial records
To detect, investigate and prevent misuse, fraud or security incidents
To fix bugs and improve the reliability of the Services

We process this data to perform the educational, administrative and employment relationship between you (and, for students, your guardian) and the Institution, to meet our legal and record-keeping obligations, and for our legitimate interest in operating a secure service. We do not use your data for automated decision-making that produces legal effects on you.

6. What teachers and students can see about each other

6.1 Teachers’ access to student data

Teachers use the Teacher App as staff of the Institution. Through it, an authorised teacher can see and manage the records of students in the classes assigned to them — profiles, attendance, marks and result cards — strictly for teaching and administration. This access is limited by role-based permissions and class assignment, changes made to student records are logged, and teachers are bound by the Institution’s confidentiality rules. Teachers must not copy, share or use student data for any purpose outside their duties.

6.2 Students’ view of teacher information

The Student App has a Teachers directory listing the teachers assigned to the student’s class and section, with each teacher’s name, designation, the subjects they teach, photograph and the mobile number held by the Institution. It is shown only to logged-in students of the Institution, so they can contact staff about school matters. Teachers who do not want their number listed can ask the Institution to remove it. Students must use these details only for school matters and must not share them (see our Terms of Use).

We share personal information only in these limited situations:

Within the Institution — with authorised teachers, administrative, accounts and IT staff, strictly on a need-to-know basis for their role.
With parents or legal guardians — the Institution may disclose a student’s academic, attendance and fee information to the student’s parent or guardian.
With students — a teacher’s name, designation, photograph and mobile number, through the Student App’s Teachers directory (see section 6.2).
With service providers — the software provider that develops and maintains the Apps and the school management system, and our web hosting and e-mail providers. They process data only on our instructions, under confidentiality obligations, and solely to run and support the Services.
With education authorities — where required for board registration, examinations or statutory reporting.
Where the law requires it — to comply with a valid legal process, or to protect the rights, safety or property of the Institution, our students, our staff or the public.

We do not share your information with advertisers, data brokers or any third party for their own marketing.

8. How long we keep your data

Academic records (enrolment, attendance, results, transcripts, promotion history) are retained for as long as the Institution is required to maintain student records, including after you leave, so that certificates and transcripts can be re-issued.
Employment and payroll records (teacher service records, payslips) are retained for the period required by applicable labour, accounting and tax rules.
Financial records (fee collections and receipts) are retained for the period required by applicable accounting and tax rules.
Teaching content (homework, notices, question banks, library files) is retained while it is in use by the Institution and removed when it is withdrawn.
Support tickets and attachments are retained while the matter is open and for a reasonable period afterwards for reference.
Server logs are retained for a short period for security and troubleshooting.
Login tokens are deleted immediately when you log out or your account is deactivated.
Deleted accounts are handled as described in section 12.

9. How we protect your data

All traffic between the Apps and our servers is encrypted in transit over HTTPS.
Passwords are stored only as salted, irreversible hashes — nobody, including our staff, can read them.
Your login token is held in the device’s encrypted storage, not in plain text.
Access to data inside the administrative system is restricted by role-based permissions — a student can see only their own records, and a teacher only the classes assigned to them.
Sensitive actions, downloads and document access are ownership-checked, and login attempts are rate-limited.
When an account is deactivated or deleted, every session it has — on the website and in the Apps, on every device — is revoked immediately.

No system can be guaranteed perfectly secure. Please keep your password confidential, never share your account, and tell us at once if you suspect unauthorised use.

10. Children’s privacy

The Student App is intended for students enrolled with the Institution, many of whom are minors. It is designed as an education tool: there is no public profile, no chat with strangers, no advertising, no in-app purchase and no third-party ad or analytics SDK. The Teacher App is intended for adult staff only.

Accounts for minors are created by the Institution as part of the admission process, with the knowledge and consent of the parent or legal guardian, who may at any time review the student’s information, ask for it to be corrected, or ask us to stop processing it by contacting the Institution. We collect from children only the information necessary to deliver the educational service described in this Policy.

11. Your rights and choices

Access: view your profile and records at any time inside your App — attendance, results, fees and academic history for students (documents on your student file are on the student web portal); profile, documents, classes and payslips for teachers.
Correction: if any detail is wrong, raise a support ticket in the App or contact the office; the Institution maintains the authoritative record and will correct verified errors.
Objection / restriction: you (or, for a student, your guardian) may ask us to limit certain processing, subject to the Institution’s legal record-keeping duties.
Withdraw device permissions: review or revoke permissions at any time in Android Settings → Apps → SoftsCraft Students App / SoftsCraft Teachers App → Permissions.
Stop using an App: uninstalling it removes all locally stored data from your device.
Deletion: delete your account yourself, or ask us to, as described in section 12.

12. How to delete your account and data

This section applies to the SoftsCraft Students App and SoftsCraft Teachers App apps. Your App account and your account on this website are the same account. You can delete it yourself, or ask us to delete it.

12.1 Delete your account yourself

Sign in to the web portal with the same System ID and password you use in the App: student login or teacher login.
Open Delete Account from the side menu. Students will find it under My Info.
Enter your password and confirm.

Your account is deactivated straight away. You are signed out of the website and the App on every device, and you can no longer sign in.

12.2 Ask us to delete it

In the App, open Support and create a ticket in the category “IT / System Issues” with the subject “Account deletion request”; or
Submit the form on our Support Desk page; or
E-mail mizan32cse@gmail.com from your registered contact, stating your full name and system ID.

We verify every request with the account holder and, for a minor, with the parent or guardian. We then deactivate the account as described in 12.1.

12.3 What we delete

Within 30 days of your account being deactivated by either route, we:

delete your login tokens and session data (this happens immediately);
delete your photograph, the documents uploaded to your file and your support-ticket attachments;
delete or irreversibly anonymise your contact details (mobile number, e-mail and address) and any other personal details that are not needed for the records listed in 12.4.

12.4 What we keep, and for how long

The Institution is legally required to keep some records after an account is deleted. These records stay in the Institution’s administrative system only. They can no longer be accessed through the Apps or the website, and they are deleted or anonymised when their retention period ends.

Academic records (enrolment, attendance, examination results, transcripts and certificates) are kept for as long as the Institution must maintain student records, so that certificates and transcripts can be re-issued.
Financial records (fee collections and receipts) are kept for the period required by accounting and tax rules.
Employment and payroll records for teachers, including the identity details they require, are kept for the period required by labour, accounting and tax rules.
Teaching material a teacher has published (homework, notices, question banks and library files) is kept as the Institution’s material while it is in use.
The change log of edits to student records is kept with the academic record for audit purposes.
Server backups containing your data are overwritten in the normal backup rotation.

Deleting an account does not clear any outstanding fees. If you change your mind, you can ask the office to restore your access before the deletion in 12.3 is complete.

13. Cookies (website only)

This website uses strictly necessary cookies to keep your session and to protect forms against cross-site request forgery. Where the Institution has enabled a web analytics or tag-manager service on the website, that service may set its own cookies to produce aggregate visit statistics; you can block or delete cookies in your browser settings. The mobile Apps do not use cookies or any tracking technology.

14. Hosting and international transfers

Our data is stored on servers operated by our hosting provider, which may be located outside the People's Republic of Bangladesh. Wherever the data is processed, we require the same standard of protection described in this Policy.

15. Third-party links and files

The Apps may open external links, or documents hosted elsewhere, that the Institution has published (for example a library resource). We are not responsible for the privacy practices of those third parties; please read their policies before providing information to them.

16. Changes to this Policy

We may update this Policy as the Services or the law change. The revised version will be posted on this page with a new “Last updated” date, and material changes will be announced through the Apps’ notice board. Continued use of the Services after a change means you accept the revised Policy.

17. Contact us

Questions, concerns or complaints about this Policy or your data:

Demo School
Naogaon,Bangladesh
Phone: 01780163105
E-mail: mizan32cse@gmail.com
Online: Contact form · Support desk

Privacy Policy