Privacy & Data Protection Policy

Zetime Institutional Platform • Last updated: July 2026

1. Information Architecture & Scope

Zetime processes educational and operational data to power attendance tracking, discipline incident management, and parent-teacher communication across educational institutions. Data is partitioned into strict tenant layers:

Account Credentials

Encrypted user names, emails, phone contacts, role assignments, and school credentials.

Attendance & Discipline

Daily/session attendance records, discipline incident reports, follow-up logs, and parent acknowledgments.

Communications & Mobile

Direct messages, announcement broadcasts, FCM push notification tokens, and Capacitor mobile app device metrics.

2. Data Usage & Processing Principles

We process data strictly to facilitate institutional operations and parent transparency. Zetime never sells or monetizes student or institutional data to third parties or advertising networks.

Authenticating school administrators, teachers, parents, and students with strict Role-Based Access Control (RBAC).

Delivering real-time attendance alerts (Absent/Late notifications) and discipline report updates to linked parent profiles.

Generating high-precision attendance analytics, section breakdown charts, and CSV/PDF compliance reports.

Enabling direct parent-teacher messaging and school-wide announcement channels.

Multi-Tenant Isolation & Encryption Standards

Zetime enforces strict multi-tenant isolation at the database and application levels (schoolId scoping). All data in transit is encrypted using TLS 1.3, and data at rest is secured with AES-256 encryption. Discipline audit logs and attendance records are immutably timestamped to ensure audit compliance.

3. Data Retention & Institutional Rights

Educational institutions retain full ownership and sovereignty over their data. Upon account closure or subscription termination:

School Admins can export all attendance logs, student records, and discipline reports in standard CSV format.

Data is maintained for a 30-day grace period for recovery, after which permanent cryptographic purging occurs upon request.

Parents may request access or correction of their student link details through their designated School Administrator.

4. Mobile & Push Notification Policies

The Zetime Mobile Application (Capacitor for Android & iOS) registers Firebase Cloud Messaging (FCM) push tokens exclusively for operational alerts (e.g., child attendance warnings, new discipline notes, and incoming call notifications). Push tokens are revoked automatically upon user logout.

Have questions regarding security or data compliance?

Contact Security & Compliance