Privacy Policy

This Privacy Policy explains how the Baptist HSS Android application (the “App”) and the school’s result portal at portal.baptisthss.in (the “Portal”) handle information. Both are published by Baptist Higher Secondary School, Serkawn (“we”, “us”, the “School”). Please read this before signing in.

The short version

• You can use the App without signing in. Choose “Continue without login” and nothing personal is collected at all.
• Signing in is optional and uses your existing Google account. We receive your email address and name, and use them for one purpose: to check whether you are a member of staff, a student, or a parent of a student on the school roster.
• No ads, no analytics, no tracking. The App contains no advertising, no analytics or tracking tools, and no advertising ID. We do not sell personal information or share it for advertising.
• Notifications are optional too. If you allow them, the App registers a token so the School can reach this device with announcements. Android asks first, and signing out stops them.
• You can delete your account. See Delete your account.

What the App is

The App opens on a choice: Log in or Continue without login. Either way it leads to a home screen with the school’s services — Admission Application, School Website and Results — which open the school’s web pages in your phone’s own browser. Signing in adds one thing: a card leading to whatever your account gives you, which is the staff portal for a teacher and the student’s own page for a student or parent.

Information we handle

If you continue without logging in

Nothing. The App collects no personal information, creates no profile, and requests no device permission other than internet access.

If you sign in with Google

Google’s sign-in screen asks you to choose an account and returns a short-lived, signed proof of that choice (an “ID token”) containing your email address and name. The App sends that proof to the School’s result system, which verifies it with Google and then looks your address up in records the School already keeps:

• the staff list, which decides a teacher’s or administrator’s access; and
• the student roster, where a student’s own email address or a parent’s/guardian’s may have been entered — by the office, or by the student themselves (see below).

Adding a parent or guardian. A signed-in student, or a guardian already linked to them, may add a guardian’s email address to their own record from their profile page in the App. Anyone signed in with that address can then see that student’s results, profile and behaviour records, and receives notifications about them — so it should be a parent’s or guardian’s own address. Whoever adds an address may correct or remove it for 24 hours; after that, and for any address the office entered, only the school office can change it. Every such change is recorded, and the student and their linked guardians are notified of it. Ask the office to remove a guardian address at any time.

The answer is one of staff, student/parent, or guest — an address we do not recognise is still signed in, and simply lands on the same public home screen as everyone else.

Stored on your phone: your email address, your name, the label shown on screen (“Teacher”, “Student”, “Guardian”, “Guest”) and, for a parent, the names and classes of the linked children. This lives in the App’s private storage, which other apps cannot read, and is excluded from Android’s automatic cloud backup. The Google sign-in token itself is not stored.

Stored on our side: no new account is created. Signing in reads existing records; it does not add you to anything. The result of the check is held in a temporary cache for a few minutes so repeated taps are fast, and then expires by itself.

Opening the Portal from the App. So that you are not asked to sign in a second time, the App passes the Portal a one-time pass that is valid for a few minutes and can be used once. To manage those, we record your email address with the time the pass was issued and the time it stops working. Nothing else is recorded — not what you looked at, and not what you did. Signing out cancels it immediately, and expired entries are deleted.

On the Portal (in your browser)

What you do	What is handled
Look up a result publicly	Roll number, class, section and date of birth, used only to find and show that one result. No account is needed.
Sign in as a student or parent	Your Google email address, matched against the roster as described above, which then replaces the date-of-birth step.
Sign in as staff	Your Google email address, matched against the staff list, which decides which tools you may open.

Two supporting services are involved, both acting for us and neither given information for its own purposes:

• Google. The School runs on Google Workspace: sign-in is verified by Google, and the records and result documents live in Google Sheets, Docs and Drive.
• Cloudflare. The public lookup is protected by a bot check (Cloudflare Turnstile), which examines your IP address and browser signals to tell a person from an automated script. On results day, already-prepared result files may also be delivered from Cloudflare’s network so the site stays fast under load.

Notifications

Once you sign in, the App can receive notifications from the School — announcements, and news about your own result. To make that possible, Google Firebase Cloud Messaging issues the App a registration token: an identifier for this installation on this device. The App sends that token to the School’s result system, which records it so it knows where to deliver a notification, and registers it for the groups your account belongs to (for example “students”, or your class).

A registration token identifies an installation, not a person. It is not your phone’s serial number or advertising ID, it changes if you reinstall the App, and it is used for nothing but delivering these notifications. Notifications are kept deliberately brief — a heading and a line of text. Anything private stays behind the sign-in, so the message tells you to look rather than carrying the detail itself.

They are entirely optional. Android asks your permission before any notification can be shown, and refusing changes nothing else about the App. You can turn them off at any time in Android Settings → Apps → Baptist HSS → Notifications. Signing out removes this device from the School’s records and unsubscribes it, so it stops receiving anything.

What we do not do

• No advertising, and no advertising ID.
• No analytics or tracking tools in the App.
• No access to your contacts, location, camera, microphone, photos or files. The App asks for only two permissions: internet access, and — if you allow it — permission to show notifications.
• No selling of personal information, and no sharing of it for advertising or marketing by anyone.

Children’s privacy

The App is for students, parents and staff of the School, and most students are under 18. Their details are on the roster because they are enrolled here — the School holds them as school records, not because of this App, and the App does not ask a child for any information.

Signing in is optional at every age, and a parent or guardian may use their own address instead. A parent or guardian may ask us at any time what we hold for their child, or ask us to remove an address — see Delete your account.

How long information is kept

• On your phone: until you sign out or uninstall the App, which erases it immediately.
• Email addresses in our records: until the office removes them, or you ask us to.
• The notification registration token: until you sign out or uninstall — signing out removes it from our records.
• The temporary sign-in cache: a few minutes.
• The one-time pass used to open the Portal from the App: minutes. The signed-in session it becomes lasts about an hour. Signing out cancels both at once.
• Academic records (name, roll number, class, date of birth, marks, certificates): kept as school records, so that marksheets and certificates can be issued years later. They exist independently of the App.

Deleting your account

Signing out of the App erases everything it stored on your device. To also remove the email address that links you to the School’s records, write to us — the full instructions, and what is deleted versus kept, are on the Delete your account page.

Security

Everything the App and the Portal send travels over an encrypted (HTTPS) connection. The signed-in copy on your phone sits in the App’s private storage. The Google sign-in token is never written to disk and never appears in a web address. The one-time pass described above does travel in a web address, which is why it is valid only for minutes, works only once, is removed from the address bar the moment the Portal reads it, and is never sent to the website’s own servers. Every request for real data is re-checked on the server against the staff list and roster, so what is stored on a phone can only decide what the App shows you, never what it is allowed to fetch.

Changes to this policy

We update this policy when the App’s features change — for example when the Admission Application goes live, or when notifications are added. The “Last updated” date above changes with it, and the current version is always at this address.

Contact us

Questions about this policy, or about what we hold for you or your child:
principalbhss@baptisthss.in
Baptist Higher Secondary School, Near BCM Headquarters, Serkawn, P.O. Zotlang · PIN 796691
Phone: 0372-2323160