Privacy Policy — Staff App

Applies to the NMA Staff mobile app and the staff web portal at https://staff.naveedmajeedacademy.pk. Last updated: October 29, 2026.

Who This Covers

This policy applies to teachers, administrators, coordinators, exam coordinators, counselors, and other staff members of Naveed Majeed Academy who are issued an account to use the NMA Staff app or staff web portal. It is separate from the Parent/Student Privacy Policy, which covers a different app and a different audience.

Staff accounts are created and managed by the academy, not self-registered. There is no public sign-up.

Information We Collect About You

To operate your staff account, we collect and store:

• Your name, role/designation, campus assignment, contact number, and email address.
• Your profile photo, if you choose to upload one.
• Login credentials (your password is stored encrypted, never in plain text) and sign-in activity (date, time, and outcome of login attempts), for account security and audit purposes.
• A device push-notification token, if you enable notifications, so we can deliver alerts (e.g. new assignments, messages, or your own attendance notices) to your device.
• Actions you take in the app that are recorded for accountability — for example, marks you enter, attendance you mark, photos you upload for Daily Lecture, or messages/replies you send — are logged against your account, the same way they would be on the web portal.
• If you are a teacher and your campus uses geofence attendance, your device's precise location at Check In and Check Out, and while you are checked in — see "Location Data" below.

Location Data (Teacher Attendance Check In/Check Out)

If your campus has geofence attendance enabled, the NMA Staff app uses your device's location to verify your own attendance. This applies only to teacher accounts using the Check In/Check Out feature — it is never used to track any other staff role, and it is never used to track students or parents.

• What we collect: your device's GPS coordinates and accuracy reading at the moment you tap Check In or Check Out, and campus-boundary "entered"/"exited" events for the rest of that working day. We also record whether your device reported the location as a mock/simulated location, as a safeguard against falsified check-ins.
• Why: to confirm you are actually at your assigned campus when you check in, to calculate on-time/late arrival and any early departure against your timetable, and to automatically detect when you leave campus for the day so you don't have to remember to check out.
• When it's collected: only from the moment you tap Check In until you tap Check Out (or the school day ends). The app does not collect your location at any other time, and does not track your location continuously or in the background outside that window.
• Background location: the app may ask for "Allow all the time" location permission, in addition to "while using the app." This is used only to detect a campus-boundary crossing (a geofence) for a campus you have already checked in to — it does not enable continuous location tracking, and the app does not read or report your location in the background for any other purpose. You can decline this permission; Check Out will then need to be done manually instead of being detected automatically.
• Who can see it: your own precise coordinates are visible to administrators at the specific campus the attendance record belongs to (never to another campus's admin), and to the academy's Super Admin, for the purpose of reviewing and correcting attendance.
• Retention: location data collected this way is stored as part of your attendance record and retained on the same basis as other attendance/activity records — see "Data Retention and Account Removal" below.

Student and Parent Information You May Access

Depending on your role, the app gives you access to student records needed to do your job — for example class rosters, attendance, marks, timetables, or counseling case notes. This access is scoped to your assignment (your classes, subjects, or campus) and is the same data you already work with on the web portal.

This data belongs to the students and their families, not to you personally. You may only use it for legitimate academy purposes, and you must not copy, export, or share it outside the app/portal except as your role requires. The academy may audit access to this data.

How We Use Your Information

• To authenticate you and give you access appropriate to your role.
• To let you perform your job functions in the app (e.g. marking attendance, entering marks, uploading lecture material or photos, replying to student questions).
• If you are a teacher at a campus using geofence attendance, to verify your Check In/Check Out and campus attendance against your timetable — see "Location Data" above.
• To send you push notifications you've enabled.
• To maintain security and accountability logs (who did what, and when) for the academy's records.

We do not use your information for advertising, and we do not sell or rent your information to any third party.

How We Share Information

We do not share your personal information with outside organizations for their own marketing purposes. We may disclose information:

• Within the academy's administration, as needed for HR, payroll, or operational purposes.
• To comply with a court order, law, or legitimate government/regulatory request.
• Where required to investigate a suspected violation of academy policy or protect the safety of students or staff.

Data Security

Data is transmitted over encrypted (HTTPS) connections. Passwords are stored using one-way encryption (hashing), never in plain text. Access to student/parent data within the app is scoped to your role and assignment.

Data Retention and Account Removal

Your account and its associated activity logs are retained for as long as you remain a staff member, and for a reasonable period afterward for record-keeping and audit purposes as required by the academy's policies. If you leave the academy and would like your account data reviewed or deleted sooner, email naveedmajeedacademy@gmail.com or contact the school office using the number below. We will process deletion requests within 30 days, except where we are required to retain certain records for legal, regulatory, or academic record-keeping reasons.

Children's Data

Some of the students whose data you access through this app are under 13. You are accessing that data as part of your professional duties, under the academy's supervision — not collecting it directly from a child. See the Parent/Student Privacy Policy for how student data is collected and used more broadly.

Changes to This Policy

If we make material changes to this policy, we will update this page and change the "Last updated" date above.

Contact

Questions about this policy, or requests regarding your account data, can be directed to the school office: +92-321-4978791 or naveedmajeedacademy@gmail.com