Privacy Policy

Effective date: September 12, 2026 (previous version: June 8, 2026 — updated to describe face-based attendance)

This Privacy Policy describes how Senmmar ("we", "us") collects, uses, and protects information when you use the Senmmar School mobile application (com.senmmar.attendance) and the web service at schoolmanger.com (together, the "Service"). The Service is provided to schools so that staff, students, and parents can manage attendance, homework, grades, and related school activities.

Each school that uses the Service is the data controller for its own users' data. Senmmar acts as the data processor on behalf of the school.

1. Information we collect

The data we hold depends on your role (school administrator, teacher, student, or parent). We collect only what is needed to operate the Service.

Account information. Username or ID number, full name, password (stored as a hash), role, and the school you belong to.
Contact information. For parents: phone number used to log in and, optionally, an email address. For staff: school-issued identifier.
Attendance records. Check-in and check-out times, period, group, and the device or station that recorded the event.
Homework and grades. Assignments created by teachers, submissions and files uploaded by students, exam and quiz results, and grade publication dates.
Uploaded files. Photos and documents that users attach to homework, profile pictures, and files attached to messages.
Messages and AI assistant. Conversations with the in-app AI assistant and messages sent through the school portal.
Face signature — only where the school enables face attendance (see section 8). A face signature is a list of numbers derived from the shape of a face. It is not a photo and a photo cannot be reconstructed from it.
Device and session data. A session token stored on your device after login, the app version, and minimal technical logs (timestamps, status codes) needed to operate and secure the Service.
Payments and invoices (where the school enables accounting features): payment amounts, dates, and invoice PDFs. We do not store full credit-card numbers.

The app does not collect device location, microphone audio, contacts, or advertising identifiers. Camera images used for face attendance are not stored or transmitted (see section 8).

2. How we use information

To authenticate you and keep you signed in.
To show attendance, homework, grades, and notifications relevant to your role.
To let teachers manage classes and let parents see their children's activity.
To answer questions through the AI assistant feature.
To operate, secure, and improve the Service (debugging, abuse prevention).
To comply with legal obligations.

We do not sell personal information and we do not use it for advertising.

3. Sharing

We share information only as follows:

With your school. School administrators and authorised staff can see the data that belongs to their school. Parents can see the data of children linked to them.
With service providers. Hosting, database, file storage, and the AI model provider used by the assistant. These providers process data on our behalf under contract.
When required by law or to protect the rights and safety of users.

4. Data retention

We keep your data while your account is active and while your school uses the Service. When you request account deletion (see /delete-account) and the request is approved by your school, your personal account record is deleted from our active database within a reasonable timeframe. Some records may remain in encrypted backups for a limited period before they are overwritten. We may retain anonymised or aggregate data that cannot be used to identify you.

5. Security

Passwords are stored as one-way hashes. Traffic between the app and our servers is encrypted in transit (HTTPS). Access to school data inside Senmmar is restricted to authorised staff and audited.

6. Children

The Service is provided to schools, and student accounts are created by the school the student attends. The school is responsible for obtaining any consent required under local law for student accounts — including, where the school enables face attendance, any consent required for a child's face signature (section 8). If you are a parent and believe a child's account was created, or a child's face was registered, without appropriate authorisation, please contact your school or email us at the address below; a registration can be removed at any time and removal is immediate.

7. Your rights

Depending on your jurisdiction, you may have the right to access, correct, export, or delete your data. The Service provides in-app controls for the most common requests, and you can also email us. For account deletion, see /delete-account.

8. Face attendance (only where a school enables it)

A school may choose to record attendance by recognising faces at an attendance station — a phone or tablet placed at a gate, door, or classroom and signed in with credentials the school issues. This section describes that feature. Where a school does not use it, no face data of any kind is collected.

What is stored. Only a face signature: a fixed list of numbers computed from the geometry of a face. It cannot be turned back into a photograph, and it is not a photograph.
What is not stored. No photo or video of a face is saved, uploaded, or sent anywhere. Camera frames are processed on the station device, in memory, and discarded immediately.
Where recognition happens. On the station device itself. Comparing a face against the school's registered signatures does not require an internet connection and does not send any image to our servers.
What is uploaded. When a person is recognised, the station sends an attendance event — who, when, and which station — exactly as a card scan would. The face signature itself is uploaded only once, at registration.
Who can be registered. Only students and staff of the school, and only those in the groups the school has assigned to that station. A station cannot see or register anyone outside its assigned groups.
What it is not used for. Face signatures are used for attendance only. They are never used to sign in to an account, are not shared with other schools or any third party, are not used for advertising or profiling, and are not sold.
Retention and removal. A face signature is kept until the school removes it or the person leaves the school. School staff can remove any registration at any time from the station app; removal deletes the signature from our database. Deleting the person's account (section 4) also deletes their face signature.
Accuracy. Recognition is not perfect. Attendance recorded by face can be corrected by school staff like any other attendance record.

The school is the data controller for face signatures, as for all other data in the Service, and is responsible for obtaining any consent or notice required by local law before registering a person's face — particularly for children. Senmmar processes this data only on the school's instructions.

9. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Effective date" at the top of the page. Significant changes will be communicated through the app or by email.

10. Contact

Questions, requests, or complaints about privacy: info@senmmar.com. For general help, see our support page.