Privacy policy
Shaaro helps schools with their daily work and helps students learn. We keep only the information that takes, never sell it and never use it for advertising.
- No ads. Nobody's data is ever sold.
- A guardian's consent for a student is recorded: with one tap on the guardian page, or on the school's signed paper form.
- Education officers and teacher trainers see numbers only, never a student's name or marks.
- You can see, correct, download or delete your data at any time.
1. Who we are
Shaaro (shaaro.app) is operated by Studio Imagine, 83/B Shiddeshwari Circular Road, Malibag, Dhaka 1219. In this policy, "we" means Shaaro and Studio Imagine. For any privacy question, write to hello@shaaro.app.
This policy follows Bangladesh's personal data protection law (the Personal Data Protection Ordinance 2025 and the law that followed it), the Children Act 2013, the Cyber Security Ordinance 2025 and the ICT Act 2006.
2. What we keep
| Whose | What we keep |
|---|---|
| Student (the school's register) | Name, class, section, roll, student ID, gender, date of birth (if the school adds it), the guardian's mobile number. What the school records: attendance, marks, result sheets, report cards, teachers' comments, talents, testimonials and TCs, fees and payments, photos of handed-in work, skill groups and stars. |
| Student with their own login (Class 9 and up) | All of the above, plus: quiz results, "Where do I stand?" results, notes and quizzes they write (with a photo, if they add one), and the PIN (encrypted). |
| Guardian | Guardians have no account. We keep the mobile number the school gives. What a guardian adds on the guardian page: a first name, a mobile number (optional), which children are on this phone, the consent record (date and policy version), messages to the teacher and thank-you notes. |
| Teacher, head teacher, office staff and tutor | Name, mobile or email, school, role, subjects and classes, questions written and checked, papers, lesson plans, diary, files uploaded to the library, board and yearbook photos, points. For a tutor, the names of the students they add. |
| Education officer and teacher trainer | Name, post, area of responsibility, official mobile or email. |
| Everyone | Sign-in times, whether each sign-in attempt worked, and when you were last active. A log of who changed marks, attendance, grades, result sheets or the register, and when. |
| Visitors | Which pages were viewed, where visitors came from, device and browser type, and the rough country and city from the network. IP addresses are not kept with these (see section 11). |
What we do not keep: national ID or birth registration numbers, fingerprints, face recognition data, a phone's exact location (GPS), phone contact lists, bank or card numbers.
3. Why we keep it
- To run the school: register, attendance, marks, results, report cards, certificates, fees, routines, exams and seat plans.
- To show quizzes and practice, check answers and show where a student stands.
- To show teachers, head teachers, guardians and officials only what each is allowed to see.
- To handle sign-in and, when the school uses SMS, to send messages to guardians.
- To check question quality and count teachers' points and recognition.
- To keep the service safe, stop the question bank being copied, fix faults and meet the law.
Legal basis: our service agreement with the school, a guardian's consent, your own consent, and legal duties. Consent can be withdrawn at any time.
4. Students under 18
- Most students have no login of their own. They are a line in the school's register, and that record belongs to the school. From Class 9, the school can give a student their own login with a link and a PIN.
- A guardian's consent is recorded in two ways: one tap on the guardian page, or a signed paper form that the school collects and a teacher records in Shaaro. Each consent keeps its date and the policy version.
- Guardians need no login. The guardian page opens from the school's SMS link, or from a G code a teacher gives (it works for 7 days). One phone can hold several children; a signed cookie remembers the phone. The link works like a key, so do not share it.
- Students never see ads. No profiling or behaviour tracking for advertising or marketing.
- Skill groups and practice scores are learning feedback, not an official result. A teacher can change them, and no significant decision rests on them alone. Marks and result sheets are the school's own records, entered and approved by the school.
- A student's notes and quizzes are checked by their subject teacher first. Outside the school, others see only a first name and class, never the school or the photo. A photo showing a face is never approved. Three reports hide a post.
- Pride cards show numbers. A student's first name appears only when the school has marked that the guardians agreed. Students cannot send private messages to each other.
5. Who can see what
| Who | What they see |
|---|---|
| Student (own login) | Their own page |
| Guardian | Only their own child's page, through the link or a G code |
| Teacher | Students in their own classes. Comments on a student are seen by their author, the class teacher and the head teacher. |
| Head teacher | All teachers and students of their school |
| Office staff | Their own school's register, fees, certificates, exams and SMS |
| Tutor | The students they added |
| Education officers and teacher trainers | Numbers by school or area, no student names or marks |
| Anyone with a certificate's QR code | A check of what the certificate itself prints |
| Shaaro team | Only when needed for support; every decision they make is logged |
6. Who we share with
We never sell or rent anyone's data. A few providers help run the service; they act on our instructions under contract:
- Database, sign-in and file storage: Supabase
- Website hosting: Vercel. The rough country and city of a visit come from its network.
- Checking that a person, not a bot, fills in some forms: Cloudflare Turnstile
- SMS: when the school uses SMS, an SMS provider, only the number and the message
- Email: Resend, when we send you an email
- If you sign in with Google, Google shares your name and email with us
- When a teacher asks for a draft post, their answers go to an AI service (Anthropic), after student names, phone numbers and rolls are removed
- For rain alerts, a weather service (Open-Meteo) gets only the school's map location, never a person's
We give information to a government body only on a valid written order under Bangladeshi law, and only what the law requires.
7. Where data is stored
Data is stored in Supabase's cloud data centre, encrypted in transit and at rest. Photos, handed-in work and files sit in private storage that only people with permission can open, through Shaaro. If the law or the authority requires, data will move to servers in the country. We keep no national ID or biometric data.
8. How long we keep it
- For as long as the account is active.
- On a deletion request the account is hidden at once, and the nightly job deletes it after 30 days.
- The school's register, attendance and result records are kept or deleted as the school instructs.
- Your data download file is deleted after 7 days.
- Documents sent with a request (such as a joining letter) are deleted 180 days after the request is closed.
- Visit counts are deleted after 90 days.
- Anonymous totals (such as an upazila average) are kept; no one can be identified from them.
9. Your rights
- See and download your data
- Correct wrong data
- Withdraw consent
- Pause your account, or delete your account and data
- Make a complaint
A guardian can use these rights for their child. Requests can also be sent without signing in, from shaaro.app/delete-account. We confirm a request within 7 working days and complete it within 30 days.
10. Security
- All connections use HTTPS; data is encrypted.
- PINs and passwords are never stored in readable form.
- Five wrong PINs or passwords within 15 minutes lock that login for a while. Wrong codes are counted and limited too.
- Shaaro team admin logins can use two-step verification; when it is on, the console does not open without the code. Every decision is logged.
- In a student's quiz, the right answers never reach the browser before marking. One account or connection can take only so many questions, so the question bank cannot be copied.
- For a classroom screen, only a hash (sha256) of its token is kept. Unlinking stops the screen at once.
11. Cookies
We use only essential cookies and browser storage: keeping you signed in, remembering your language and role, the list of children on a guardian's phone (a signed cookie), recognising a classroom screen, and data kept in the browser so work carries on without internet. For practice without signing in, the browser keeps a random ID; the server gets only its hash, to count the day's free practice. No advertising cookies or outside trackers. We count page views, where visitors came from and which devices they use on our own server, without cookies. IP addresses are not stored with these counts; a visitor gets a one-day code that cannot be matched to the next day, and none at all when the browser sends Do Not Track or Global Privacy Control. This builds no personal profiles, and the counts are deleted after 90 days. To stop the question bank being copied, the questions one connection takes are counted by its address for a short time; if someone takes questions at an unusual rate, the address is kept with the block record.
12. If there is a data breach
If a breach happens, we will promptly notify the national data authority as the law requires, and tell the people at risk what happened and what we are doing.
13. Changes
We will announce any significant change on the website at least 60 days ahead. Every version stays on this page.
14. Complaints and contact
Complaints or questions: hello@shaaro.app (subject "Privacy"). If we do not resolve it, you can complain to Bangladesh's national data protection authority.