About this policy
This Privacy Policy explains how Al-Huda International School collects, uses, shares and protects personal information when you use our website at https://www.alhudais.in and our mobile app, the AHIS-Student App, which is available on Google Play and the Apple App Store. The Website and the App together are the "Services".
The Services are used by students, their parents or guardians, teachers and school staff, and by visitors who enquire about admissions, careers or the school in general. We have written this in plain language. If something is unclear, please contact us using the details at the end.
Who is responsible for your information: AL-HUDA INTERNATIONAL SCHOOL, Soleh Colony, Kralpora.
Effective date: 1st-September, 2026.
Information we collect
Student and parent/guardian information
A student account is created by the school office, or through the registration form on our Website (which the school office must approve before the account can be used). For each student we hold:
- Admission number, Full name and Date of birth;
- Class, Section and Roll number;
- Father's or Guardian's name and Mother's name;
- Contact numbers (student and parent/guardian), email address and Home address;
- A profile photo, if one is provided;
- A password, which we store only in scrambled, one-way form (we cannot read it).
Teachers and school staff
Name, staff ID, parents' names, address, email address, phone number, emergency contact, subject taught, profile photo and login details.
School activity records
- Attendance and Class Holidays;
- Homework and diary entries posted for a class, and whether each student has opened them;
- Class test marks;
- Library records: books issued, fines and book suggestions;
- School-bag checklist and notebook records;
- Registrations for school events, including any details or files the event form asks for.
Fees and payments
The school's fee records (as loaded by the school office) are shown to the student's family in the Services. When a fee is paid online we keep the payment order ID, payment ID, amount, status, date and a note of which student it was for. Payments are processed by Razorpay (see "Third-party services and SDKs"). We do not receive or store your card, UPI or bank account details.
Things you write or upload
- Contact form: name, email address, subject and message.
- Admission enquiry: the details the form asks for (such as student name, grade applying for, parent name, email, phone and message) and any files uploaded.
- Career application: name, email, phone, cover note and CV/resume.
- Feedback: your message and, unless you choose to send it anonymously, your name, email and contact number.
- Messages and chats with teachers or school staff, including attachments.
- Students' blog posts, artwork, comments, likes and ratings.
Device and technical information
- Your IP address and browser or device details (the "user agent"), recorded in our security and activity log when you sign in and when certain actions are taken.
- Sign-in attempt records (the username or admission number used, and times), used to lock an account after repeated wrong passwords.
- In the App: the name of the device you signed in from, and a push notification address (token) for that device so we can send you alerts.
- For school staff using the Website: a web-push subscription for the browser they choose to enable notifications in.
- A random visitor key kept in your session (or, if that is unavailable, a scrambled form of your IP address) used only to stop the same visitor liking or rating a post more than once.
On your phone (the App)
- Your sign-in token is kept in your phone's secure storage. On our server only a scrambled form of it is stored.
- The optional app lock uses your phone's own fingerprint or face unlock. Your biometric data stays on your phone and never reaches us.
- The App asks for permission to use the camera and photo library only when you choose to take or pick a photo (for example a profile picture, artwork or message attachment), and for permission to send notifications.
- Files you open, such as PDF or Word attachments, are downloaded to temporary storage on your phone so they can be opened.
- We do not collect your location, contacts, microphone recordings or advertising ID.
Information from others
School staff enter and update student, staff, attendance, marks and fee information. Razorpay tells us whether a payment succeeded.
How we collect information
- From you or your parent/guardian when an account is set up or you fill in a form, send a message, make a payment or upload something.
- From the school when teachers and office staff record attendance, homework, marks, library activity or fees.
- Automatically from your browser or device when you use the Services (IP address, device details, notification token), and through cookies described below.
- From our service providers, such as Razorpay's payment confirmation.
How we use information
- to create and run accounts, and to sign you in securely;
- to give students and families their school information: attendance, homework, results, timetable, syllabus, library, downloads, events and fees;
- to collect and record fee payments;
- to send notices and notifications inside the Services, by push notification and, where staff choose, by email or WhatsApp;
- to handle admissions, job applications, feedback and messages sent to us;
- to keep the Services safe: preventing misuse, locking accounts after repeated failed sign-ins and keeping an activity log;
- to publish students' approved blog posts and artwork (see "Who we share information with");
- to meet our legal and record-keeping duties.
We do not use personal information for advertising, we do not track you across other websites or apps, and we do not sell or rent personal information.
Legal basis for using information
We use personal information on these grounds:
- Consent - given by a parent or guardian for a child's information when they enrol or register the child, and by you for optional features such as notifications or uploading a photo. You can withdraw consent at any time (see "Your privacy rights and choices").
- Running the school relationship - we need certain information to provide education-related services to enrolled students.
- Legal obligations - keeping fee and school records.
- Legitimate interests - keeping the Services secure and working.
We handle personal information in line with the Indian laws that apply to us, including the Information Technology Act, 2000 and its rules and, to the extent it applies, the Digital Personal Data Protection Act, 2023.
Who we share information with
- Inside the school. Teachers can see the records of the classes they teach. Office and administrative staff can see the information needed to run the school. Students and their parents or guardians can see the student's own records. Admins also have an overview of communication between the teachers and students through an overview module.
- Published content. A student's blog posts and artwork appear on the Website, with the student's name, class and photo, only after the school approves them. Photos and videos from school events may appear in the Gallery.
- Service providers that help us run the Services, listed in the next section. They may only use the information to provide their service to us.
- WhatsApp. Staff can open a WhatsApp chat with a phone number from the admin area, and we keep a record of when that was done. Blog and artwork pages have a button that opens WhatsApp so you can share a link. WhatsApp's own privacy policy applies to anything sent through it.
- Embedded videos. Some pages show videos or posts from YouTube, Vimeo, Facebook or Instagram. These companies may collect information, including through cookies, when you load or play their content.
- Legal and safety. We may disclose information if the law requires it, to respond to a valid legal request, or to protect the safety of students, staff or others.
- Other organisations. None
The App is built with Expo libraries and does not contain advertising, analytics or crash-reporting SDKs. These outside services are involved in running the Services:
| Service | What we use it for | Information involved | Privacy policy |
|---|---|---|---|
| Razorpay | Online fee payments | Payer details and payment information you enter on Razorpay's secure screen; order and payment IDs | razorpay.com/privacy |
| Expo (Expo Push Service and Expo Updates) | Sending push notifications to the App and delivering app updates | Push token, notification text, device type and app version | expo.dev/privacy |
| Google (Firebase Cloud Messaging) | Delivering push notifications to Android phones | Push token and notification content | policies.google.com/privacy |
| Apple (Push Notification service) | Delivering push notifications to iPhones and iPads | Push token and notification content | apple.com/legal/privacy |
| Browser push services (Google, Mozilla, Apple, Microsoft) | Notifications to staff browsers that have turned them on | Browser subscription details and notification content | Depends on your browser |
| WhatsApp (Meta) | Staff chats and "share" buttons | A phone number or the link you choose to share | whatsapp.com/legal/privacy-policy |
| YouTube (Google) | Embedded videos | Technical data and cookies when a video loads or plays | policies.google.com/privacy |
| Vimeo | Embedded videos | Technical data and cookies when a video loads or plays | vimeo.com/privacy |
| Facebook and Instagram (Meta) | Embedded posts and videos; links to our pages | Technical data and cookies when content loads | facebook.com/privacy/policy and instagram.com |
| Razorhost | Hosting the Website, database and uploaded files | All information stored on the Website | https://razorhost.in/privacy-policy/ |
| Razorhost | Sending and receiving school email | Names, email addresses and message content | info@alhudais.in |
How long we keep information
We keep information only as long as we need it for the purposes above. Some periods can be changed by the school in the admin settings; the figures below are the defaults.
| Information | How long |
|---|---|
| Student and parent profile and school records | While the student is enrolled, and afterwards, because student records are often required throughout a students life and particularly at the time of employment. School records must be preserved for a long period of time often for decades. |
| Activity and security log (including IP address and device details) | 180 days |
| In-app and push notifications | 15 days |
| Class test marks | 90 days |
| "Keep me signed in" login | 30 days, or until you sign out |
| App sign-in on a device | Until you sign out, or the school removes the device or account. |
| Fee and payment records | For a minimum of two academic sessions, or as required by tax and accounting rules. |
| Admission enquiries, career applications, contact messages and feedback | 1 Academic Session. (1 Year) |
When information is no longer needed we delete it or remove what identifies you.
How we protect information
- Passwords are stored only as one-way scrambled values.
- Access is limited by role: students and parents see their own records, teachers see their classes, and administrative tools are for authorised staff only.
- App sign-in tokens are stored securely on your phone and only as scrambled values on our server.
- Repeated wrong passwords temporarily lock the account, forms are protected against forged requests, and important actions are written to an activity log.
- Session cookies are marked "HttpOnly" and "SameSite" so scripts on other sites cannot read or use them, and "Secure" when the Website is used over HTTPS.
No online service can be completely secure. Please keep your password private and tell us straight away if you think your account has been used by someone else.
International transfers
Our own systems are hosted in India. Some of the services listed above, such as Expo, Google, Apple and Meta, may process information on servers in other countries, including outside India. We use these providers only for the purposes described, and their own policies explain how they protect information.
Your privacy rights and choices
You (or, for a child, the parent or guardian) can:
- Ask to see the personal information we hold about you or your child.
- Correct it. You can change some details yourself in Edit Profile (the school decides which fields students may change); for anything else, ask us.
- Ask us to delete it - see "Deleting your account and data".
- Withdraw consent for optional things: turn off notifications in your phone or browser settings, remove a profile photo, or switch off the app lock inside the App.
- Object to or ask us to limit how we use information, and complain to us or to the relevant authority.
To make a request, contact us as described under "Contact us". We may need to confirm who you are first. We aim to reply within 7 working days.
Grievance Officer: Moomin Nissar Sheikh, Chairman, moomin.sgr@gmail.com, 9018288801.
Deleting your account and data
Student, parent and staff accounts are created and managed by the school. You can ask us to delete an account and the personal information linked to it in any of these ways:
- By email: write to info@allhudais.in from the email address registered with the school. Use the subject "Delete my account" and include the student's full name and admission number.
- On the Website: send us a message through our Contact page with the same details.
- At the school office, by asking in person.
We will confirm who you are, then delete the account and the information linked to it, or remove what identifies you, within 30 days. Some records may have to be kept for legal or accounting reasons (for example fee and payment records).
Signing out of the App removes that device's sign-in. Uninstalling the App does not delete your account or data held by the school.
Cookies and tracking
We use only the cookies the Services need to work. We do not use advertising or analytics cookies, and we do not use any tracking technology to follow you across other sites or apps.
| Cookie | Purpose | How long |
|---|---|---|
| Session cookie (PHPSESSID) | Keeps you signed in while you browse, and holds security tokens and a random visitor key | Until you close your browser or sign out |
| remember_student, remember_staff | Keeps you signed in on that device, only if you tick "Remember me" | 30 days |
| Cookies from YouTube, Vimeo, Facebook and Instagram | Set by those companies when you load or play their embedded content | Set by the provider |
You can block or delete cookies in your browser settings, but sign-in will not work without the session cookie. Parts of the Website are also shown inside the App, where the same rules apply.
Children's privacy
Our students are children, so we take extra care. The Services are for enrolled students, their parents or guardians, and staff. We collect a child's information only for school purposes, from the parent or guardian, the school, or the child's own use of their account, and we rely on the parent or guardian's consent for this.
- We do not show advertising to children, do not build advertising profiles, and do not sell their information.
- A child's blog posts or artwork are published publicly only after the school approves them.
- A parent or guardian can ask to see, correct or delete their child's information at any time (see "Your privacy rights and choices").
If you believe a child's information has been given to us without proper consent, please contact us and we will deal with it promptly.
Google Play Data safety and Apple App Privacy summary
This summary matches the sections above and is provided for the App Store and Google Play listings. It describes the App as it works today.
Google Play - Data safety
| Data type | Collected | Why | Optional |
|---|---|---|---|
| Personal info: name, email address, user ID (admission number), address, phone number, date of birth, parent names | Yes | App functionality, account management | No, needed for an account |
| Photos: profile picture and attached images | Yes | App functionality | Yes |
| Files and documents: message attachments | Yes | App functionality | Yes |
| Messages: in-app messages and teacher chats | Yes | App functionality | Yes |
| Financial info: fee payment status and amounts (card, UPI and bank details go only to Razorpay) | Yes | App functionality | Yes |
| App activity: which homework entries you opened; posts, artwork and comments you create | Yes | App functionality | Partly |
| Device or other IDs: push notification token and device name | Yes | App functionality, security | Notifications can be turned off |
| Location, contacts, audio, health, web browsing history, advertising ID | No | - | - |
- Sold or shared for advertising: No. Information is passed only to service providers who process it for us (see "Who we share information with").
- Encrypted in transit: Yes.
- You can ask for your data to be deleted: Yes - see "Deleting your account and data".
Apple App Store - App Privacy
| Category | Data | Linked to you | Used to track you |
|---|---|---|---|
| Contact info | Name, email address, phone number, physical address | Yes | No |
| Identifiers | User ID (admission number), push notification token | Yes | No |
| User content | Photos, messages, blog posts, artwork, other content you submit | Yes | No |
| Financial info | Fee payment status and amounts (other financial info) | Yes | No |
| Usage data | Which homework entries you opened (product interaction) | Yes | No |
| Other data | Date of birth, parent names, class details | Yes | No |
All data is used for app functionality only. The App does not track you across other companies' apps and websites. The App does not collect location, contacts, browsing history, search history, diagnostics or advertising data.
Changes to this policy
We may update this policy from time to time, for example when we add a feature or the law changes. When we do, we will change the "Last updated" date at the top of this page and, for important changes, tell you in the App or on the Website. Please check this page now and then. The version on this page is always the current one.
Contact us
For any question about this policy or your information, or to make a request:
- School: Al-Huda International School,
- Privacy email: info@alhudais.in
- Phone: +919018288801
- Address: Soleh Colony, Kralpora, Tehsil: B K Pora, Budgam, Jammu & Kashmir.
- Website: https://www.alhudais.in
- Grievance Officer: Moomin Nissar Sheikh, Contact: 9018288801
Disclaimer
This policy describes how we handle personal information in general terms. It is not legal advice and does not create any rights beyond those given by law.
↑ Back to top