MPASAT Privacy Policy

Last updated 21 August 2026.

MPASAT is a school attendance, messaging, and fee-records app operated for the school that issued you an account. The school is the controller of student records. Izzy Tech Team provides the software and hosting used to process that information for the school.

Information we process

• Staff usernames and password hashes; parent names, phone numbers used as login, and password hashes.
• Student names, classes, barcodes, photos, attendance check-in and check-out times, and school fee ledger amounts recorded by the school.
• Parent–student links created when a parent enters a student barcode.
• Chat messages, photos, voice notes, and files sent between parents and the school.
• In-app notification history for linked students. Lock-screen push uses an Expo/Firebase device token after a parent has opened MPASAT and allowed notifications.
• Device and app technical data needed to keep the service running (for example, IP address on the school server logs).

How it is used

Information is used only to run school attendance, communicate with parents, and keep fee records the school already maintains. We do not sell personal information, and we do not use it for advertising.

Children and students

Student profiles may include minors. Those records belong to the school. Parents only see children they have linked with an official barcode. Photos and attendance are not public.

Storage and security

Passwords are stored as one-way hashes. The mobile app keeps the sign-in token in the device secure store. Access to school data requires an authorised account. Communication with the production school server uses HTTPS.

Retention and deletion

The school decides how long student and fee records are kept. A parent can delete their parent account in the MPASAT app (Settings → Delete account). That removes the parent login, device tokens, in-app notices, chat thread, and student links. It does not delete the school’s student attendance or fee records.

You can also request deletion without opening the app: Request account and data deletion.

Your choices

Parents may unlink a student, clear in-app notices, and delete their account. Staff accounts are created by the school; contact the school to close a staff login, or use the deletion request page.

Contact

Questions about this policy or a deletion request: support@vtispace.com.