Privacy Policy

Introduction

This Privacy Policy explains how we collect, use, and protect your information when you use our School Management Portal (Schoolyst). We are committed to safeguarding the privacy and security of all users, including students, parents/guardians, teachers, and school administrators.

Information We Collect

We may collect the following types of information, depending on your role and usage of the platform:

  • Basic personal information (e.g., name, contact details)

  • Student academic records and attendance data

  • Parent or guardian contact and relationship information

  • Emergency contact details

  • Health and medical information, where relevant and permitted

How We Use Your Information

We use your information for the following purposes:

  • Managing student enrollment, attendance, and records

  • Communicating with parents, guardians, and staff

  • Maintaining academic history and progress tracking

  • Processing payments and maintaining financial records

  • Supporting student well-being and safety within the school environment

Data Storage and Processing

Your data is stored and processed securely using Supabase, a trusted cloud-based database platform. Supabase employs industry-standard encryption and secure infrastructure. You can learn more about their security practices at supabase.com/privacy.

Authentication

To ensure secure login, we use third-party OAuth providers. This means:

  • Users may authenticate via trusted platforms such as Google or Microsoft

  • We receive limited profile information (e.g., name, email address) from these providers

  • We do not store your passwords — authentication is securely managed by the OAuth providers

We encourage users to review the privacy policies of their chosen authentication provider.

Data Protection

We implement a range of safeguards to protect personal data, including:

  • Data encryption at rest and in transit

  • Access controls and restricted permissions for sensitive data

  • Secure, automated backups

  • Regular security audits and monitoring

  • OAuth industry-standard authentication protocols

  • Activity logging and monitoring for unusual access patterns

Data Sharing

We do not sell or share your personal information with third parties, except in the following circumstances:

  • Where required by applicable law or regulation

  • With explicit consent from a parent, guardian, or user

  • With verified educational service providers necessary to deliver our services

Legal Compliance and Jurisdiction

We operate exclusively in Canada and comply with the following federal and provincial privacy laws:

Federal:

  • Personal Information Protection and Electronic Documents Act (PIPEDA)

Provincial Private Sector Privacy Laws:

  • Alberta’s Personal Information Protection Act (PIPA)

  • British Columbia’s Personal Information Protection Act (PIPA)

  • Quebec’s Act Respecting the Protection of Personal Information in the Private Sector (Law 25)

Provincial Public Sector Privacy Laws (as applicable):

  • Ontario’s Freedom of Information and Protection of Privacy Act (FIPPA)

  • Municipal Freedom of Information and Protection of Privacy Act (MFIPPA)

Education Laws:

  • Relevant provincial Education Acts and related regulations governing student data and school operations

We regularly review and update our practices to ensure compliance with these laws and evolving privacy standards.

Your Rights

As a user, you have the right to:

  • Access your personal data

  • Request corrections to inaccurate or incomplete information

  • Request deletion of your data, where applicable

  • Withdraw consent or opt out of non-essential data processing

To exercise these rights, please contact us using the details below.

Contact Us

If you have any questions or concerns regarding this Privacy Policy or your data, please contact our Privacy Officer:

Email: info@schoolyst.com
Phone: (647) 382-2352