XUS Schools is a school management service made by XusCorp. Schools use it to run attendance, homework, timetables, exams, fees, transport and notices, and to give parents, teachers and students one app for the school day. This policy explains what information the apps handle, why, and what your choices are. It is written in plain language on purpose.
Who is responsible for the data
Your school decides what information goes into XUS Schools and who can see it. In privacy terms the school is the data controller and XusCorp is the data processor: we store and process the information on the school's instructions and do not use it for our own purposes. Questions about a specific record (a mark, an attendance entry, a fee) go to the school office first; they can correct it, and they can ask us to delete it.
Information the apps handle
| What | Where it comes from | Why |
|---|
| Account details: name, role (parent, teacher, student, admin), email address or a school-issued roll number for students, and a password stored only as a hash | Created by the school when it onboards you | To sign you in and show you only what your role allows |
| School records linked to you: attendance, homework, timetable, exam results, fee invoices and receipts, transport route, notices, observations, ID card | Entered by the school | This is the service: showing parents, teachers and students their part of the school day |
| Messages and homework submissions you send through the app | You | Delivered to the school staff or class they are addressed to |
| Push notification token | Your device, if you allow notifications | To deliver notices, homework and attendance alerts |
| Technical logs: request time, IP address, app version, error reports | Your device and our servers | To keep the service secure and working; kept for a limited time |
The apps do not collect your precise location, contacts, photo library or advertising identifiers, and they contain no advertising and no third-party analytics trackers.
Device permissions
- Camera: used only when you choose to scan a student ID QR code or attach a photo. Nothing is captured in the background.
- Face ID, Touch ID or fingerprint: optional, to unlock the app quickly. The biometric check happens on your device; we never receive biometric data.
- Notifications: optional, for school notices and alerts. You can turn them off in your device settings at any time.
Children and student accounts
Students sign in with a roll number and a password issued by their school, never with an email address, and the school controls whether a student gets a login at all. Student accounts see only their own timetable, homework, attendance and results. There are no advertisements, no in-app purchases and no public profiles. We do not knowingly collect information from a child except as directed by the child's school for the purpose of running the school.
Where the data lives and who can see it
Data is stored with our hosting providers in encrypted databases, and every school's data is isolated from every other school's at the database level. Access inside XusCorp is limited to the people who operate the service, and only when needed to support a school. We share personal information with no one else, except the service providers that host the platform and deliver email and notifications, each bound by contract to process it only for us. We never sell personal information.
How long we keep it
School records stay for as long as the school uses XUS Schools, because the school needs its history (past enrolments, fee receipts, results). When a school leaves, its data is exported on request and then deleted. Technical logs are deleted automatically after a short retention period. Password reset links expire within minutes and can be used once.
Your choices
- Change your password at any time from the app or the web app; students are asked to set their own password at first sign-in.
- Turn notifications, camera and biometric unlock on or off in your device settings.
- Ask your school to correct or delete information about you; the school can also close your account. If you would rather write to us directly, use the address below and we will work with the school to resolve it.
Security
Connections use HTTPS. Passwords are hashed, sessions expire, and a password change or a reset by the school ends the sessions on other devices. Row-level security in the database means the service cannot read another school's records even by mistake.
Changes to this policy
If we change what the apps collect or how it is used, we will update this page and the date at the top, and tell schools through the admin web app.
Contact
XusCorp · XUS Schools
Email: support@xuscorp.com
Web: schools.xuscorp.com