Privacy Policy — EduSync

01

Who We Are

EduSync (operated by Centrify Technologies) is a comprehensive educational institution management platform designed to streamline academic, administrative, financial, and communication operations for schools, training centers, and other educational organizations.

Our platform serves multiple stakeholders within an educational ecosystem, including school owners and administrators, teachers and instructors, students and learners, parents and guardians, finance and HR staff, and marketing personnel.

In this Privacy Policy, "we," "us," or "our" refers to Centrify Technologies, and "you" or "your" refers to any individual whose personal data we process, including users of our web application, mobile application, and related services (collectively, the "Platform").

02

Scope of This Policy

This Privacy Policy applies to all personal information collected, processed, and stored in connection with the EduSync Platform, including:

The EduSync web application (centrify-web)
The EduSync mobile application (iOS, Android, and other supported platforms)
The EduSync public landing website
All APIs, integrations, and backend services operated by EduSync
Communication channels operated by us, including SMS, push notifications, and in-app messaging

This Policy does not apply to third-party services linked from the Platform. We encourage you to review the privacy policies of any third-party services you access.

03

Information We Collect

We collect information necessary to provide, maintain, and improve our educational management services. The categories of data we collect depend on your role within the Platform.

Category	Examples	Who It Applies To
Identity & Contact	Full name, phone number, email address, date of birth, profile photo, home address, emergency contacts	All users
Academic Records	Grades, assessment scores, attendance records, placement test results, group enrollments, homework submissions, curriculum progress	Students, Teachers
Financial Data	Tuition charges, payment status, payment method, student account balance, teacher salary records, expense data	Students, Parents, Teachers, Finance staff
Behavioral & Activity Data	Login history, lesson participation, gamification points and achievements, teacher ratings submitted by students, lead pipeline activity	All users
Communication Data	SMS send logs, push notification history, in-app group messages, message reactions, bug reports and support messages	All users
Device & Technical Data	Firebase device tokens, IP addresses, browser/device type, operating system, app version	All users
HR & Employee Data	Employee documents, leave requests, attendance check-ins/check-outs, salary history, QR-based check-in data	Employees, Admins, HR staff
Operational Data	Timetables, room bookings, inventory transactions, asset assignments, task and project records	Admins, Teachers, Facilities staff
Audit Logs	All administrative actions performed on the platform, including timestamps, user IDs, and entity changes	Admins, Super Admins

Information Collected Automatically

When you use the Platform, we automatically collect:

Log data (access times, pages visited, actions performed)
Device identifiers and tokens for push notification delivery
IP addresses for security and fraud prevention
Session duration and navigation patterns

Information From Third Parties

We may also receive information from integrated third-party services, including:

Payme & Click — payment transaction confirmations
Eskiz — SMS delivery status updates
Firebase (Google) — push notification delivery receipts
Facebook & Instagram — page engagement data from social integrations
DiDox — electronic document signing status

04

How We Use Your Information

We use the information we collect for the following purposes:

Platform Operation: Providing core features such as student enrollment, lesson scheduling, attendance tracking, grade recording, and timetable management.
Communication: Sending transactional and informational notifications via SMS, push notifications, and in-app messages regarding academic events, payment reminders, and important updates.
Financial Processing: Calculating tuition charges, processing online payments through Payme and Click, generating salary records, and tracking school expenses.
Authentication & Security: Verifying user identity, managing role-based access control, detecting unauthorized access, and maintaining audit logs.
Academic Support: Evaluating student performance, providing teacher effectiveness insights, generating placement test reports, and enabling curriculum-based learning.
Gamification & Engagement: Awarding points, achievements, and rewards to students and tracking engagement metrics to improve learning outcomes.
HR & Operations: Managing employee attendance, leave, payroll, documents, and internal task workflows.
Platform Improvement: Analyzing usage patterns, resolving bugs, optimizing performance, and developing new features.
Legal Compliance: Fulfilling legal obligations, responding to lawful requests from authorities, and enforcing our Terms of Service.
Recognition Programs: Identifying and publicly recognizing top-performing students and outstanding teachers as described in Section 5 below.

We process your personal data only where we have a lawful basis to do so — including your consent, the performance of a contract (your use of the Platform), compliance with a legal obligation, or our legitimate interests in operating and improving the service.

05

Top Students & Top Teachers Program

EduSync operates a Recognition Program designed to celebrate academic excellence and outstanding teaching performance within and across educational institutions using our Platform.

⭐ Recognition Program — Data Collection & Use

As part of this program, we collect, analyze, and may publicly use data relating to students and teachers who demonstrate exceptional performance. By using the Platform, you acknowledge and consent to the following:

Top Student Recognition: We collect and process academic performance data — including grades, assessment scores, attendance records, gamification rankings, placement test results, and overall engagement metrics — to identify students who demonstrate outstanding academic achievement.
Top Teacher Recognition: We collect and process data — including student evaluation scores (teacher ratings), lesson delivery records, student performance outcomes, attendance consistency, and peer or administrative reviews — to identify teachers who demonstrate exceptional instructional quality.
Use of Recognized Profiles: With the consent of the relevant individual (or their parent/guardian if the student is a minor), we may feature top students and top teachers in promotional materials, within-app leaderboards, school performance reports, platform showcases, marketing campaigns, social media content, and public rankings to inspire and motivate the broader educational community.
Data Shared in Recognition Contexts: Information that may be shared includes name, profile photo, school name, branch, subject area, performance summary, and achievement highlights.
Opt-Out: Participation in public-facing recognition features is voluntary. Students, parents (for minor students), and teachers may opt out of having their information featured in external or promotional recognition contexts at any time by contacting us at the address provided in Section 13.
Internal Use: Regardless of opt-out from public features, we may continue to use performance data internally for platform analytics, school reporting, and service improvement purposes as described elsewhere in this Policy.

We are committed to handling recognition program data with respect and dignity. We will never use top-performer data in a manner that demeans, discriminates against, or unfairly disadvantages any individual.

06

How We Share Your Information

We do not sell your personal information to third parties. We may share your information only in the following circumstances:

Within Your Educational Institution: Authorized administrators, teachers, and staff at your school or branch may access information relevant to their role and responsibilities within the Platform.
With Parents or Guardians: For students who are minors, authorized parents or guardians may access their child's academic progress, attendance, payment history, and schedule through the Platform.
Service Providers: We share data with trusted third-party vendors who assist in operating the Platform, including cloud infrastructure providers, payment processors (Payme, Click), SMS providers (Eskiz), push notification services (Firebase), and analytics tools. These parties are contractually bound to protect your data and use it only for the services they provide to us.
Legal Requirements: We may disclose your information if required by applicable law, court order, or government regulation, or to protect the rights, property, or safety of EduSync, its users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify affected users before any such transfer takes effect.
With Your Consent: We may share your information for other purposes with your explicit consent, including recognition program features described in Section 5.

07

Data Retention

We retain personal data for as long as necessary to fulfill the purposes for which it was collected, including providing the Platform's services, complying with legal obligations, resolving disputes, and enforcing our agreements.

Active User Accounts: Retained for the duration of the user's active enrollment or employment at a school using EduSync.
Inactive Accounts: Data may be retained for up to 3 years after account deactivation unless deletion is requested.
Financial Records: Payment and billing records are retained for a minimum of 5 years to comply with financial and tax regulations.
Audit Logs: Security and administrative audit logs are retained for up to 2 years.
Communication Logs (SMS/Push): Retained for up to 1 year for debugging and compliance purposes.
Demo Data: Data created during trial/demo periods is automatically deleted after the demo period expires.

After the applicable retention period, data is securely deleted or anonymized in accordance with our data lifecycle management procedures.

08

Security Measures

We implement industry-standard technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our security practices include:

JWT-based authentication with role-based access control (RBAC) for all API endpoints
Encrypted storage of sensitive credentials, including SMS provider tokens and payment gateway keys
Comprehensive audit logging of all administrative actions
Secure HTTPS transmission of all data in transit
QR-based staff attendance verification to prevent unauthorized check-ins
Regular security reviews and vulnerability assessments
Background job queue isolation (Redis/Bull) for sensitive async operations

Important: While we take all reasonable steps to protect your information, no method of electronic transmission or storage is 100% secure. In the event of a data breach that affects your rights and freedoms, we will notify you and the relevant authorities in accordance with applicable law.

09

Children's Privacy

EduSync is an educational platform that serves students of all ages, including minors under the age of 18. We handle data relating to minor students with heightened care and in compliance with applicable laws protecting children's privacy.

Student accounts for minors are created and managed by authorized school administrators, not by the students themselves.
Parent and guardian accounts are linked to student profiles to provide visibility into academic progress, attendance, and payments.
We do not knowingly collect personal information from children for marketing purposes without verifiable parental consent.
For the Recognition Program (Section 5), participation of minor students in any public-facing features requires explicit consent from a parent or legal guardian.

If you believe we have inadvertently collected personal information from a minor without appropriate consent, please contact us immediately at the details in Section 13 so we can take corrective action.

10

Your Rights & Choices

Depending on your location and applicable law, you may have the following rights with respect to your personal data:

Access: Request a copy of the personal information we hold about you.
Rectification: Request correction of inaccurate or incomplete personal data.
Erasure: Request deletion of your personal data, subject to our legal retention obligations.
Restriction: Request that we limit the processing of your data in certain circumstances.
Portability: Request your personal data in a structured, machine-readable format.
Objection: Object to the processing of your personal data where we rely on legitimate interests.
Withdraw Consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Opt Out of Recognition Features: Request removal from public-facing Top Student or Top Teacher recognition programs (Section 5).

To exercise any of these rights, please submit a written request to us using the contact information in Section 13. We will respond within 30 days. We may need to verify your identity before processing your request.

Note for School-Managed Accounts: If your account is managed by an educational institution (e.g., a student or teacher account created by a school administrator), certain requests — such as deletion or data export — may need to be coordinated through your institution's authorized administrator.

11

Third-Party Services

The EduSync Platform integrates with the following third-party services. Each service is governed by its own privacy policy, which we encourage you to review:

Service	Purpose	Data Shared
Firebase (Google)	Push notifications, device token management	Device tokens, notification content
Payme	Online tuition payment processing	Payment amounts, transaction IDs
Click	Online tuition payment processing	Payment amounts, transaction IDs
Eskiz	SMS notification delivery	Phone numbers, SMS content
DiDox	Electronic document signing	Document metadata, signing status
Facebook / Instagram	Social media integration for school communications	Page-linked post content
OpenAI	AI-assisted content generation features	Input prompts (no personal data by default)

We evaluate all third-party integrations for privacy compliance before enabling them on the Platform. We do not permit third parties to use your data for their own independent marketing or advertising purposes.

12

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:

Update the "Effective Date" at the top of this page
Notify users through an in-app notification or email where required
For significant changes affecting minors' data, seek renewed parental consent

Your continued use of the Platform after any changes become effective constitutes your acknowledgment of the updated Privacy Policy. We encourage you to review this Policy periodically.

13

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy team:

Company Centrify Technologies

Product EduSync Platform

Email privacy@edusync.uz

Support support@edusync.uz

We aim to respond to all privacy-related inquiries within 5 business days and to resolve substantive data requests within 30 calendar days.