At a glance
1. About this policy
This policy applies to the CIT Schools parent and student mobile app for Android and iOS, developed by CIT GROUP, Lao PDR. It covers school and student registration, profiles, attendance and results, student pickup and go-home requests, tuition payments, online exams and notifications, where enabled by your school.
Your school manages school records and account access. CIT GROUP operates the app and processes school information to provide these services. Contact your school about its handling of education records, and contact us about the app or this policy.
2. Information handled by the app
- Account and profile: phone number, password for authentication, name, gender, birthday, email, photo, address, occupation, workplace and vehicle number, where provided.
- Student and registration records: student identifiers, class, school, linked parents and guardians, attendance, scores and conduct. Registration and profile forms may also include nationality, ethnicity, religion, language group, blood group, special health information, residence and talents.
- Pickup and go-home requests: selected student, requester, request time, status and school confirmation. Guardian management uses guardian names, phone numbers and links to children.
- Payments: invoices, amounts, discounts, selected bank, payment notes, QR references, transaction status and receipts for tuition or school registration packages. Bank authentication takes place through your bank; the app does not ask for your bank password or PIN.
- Online exams: answers, attempts, submission times, marks and teacher feedback. During an exam, the app reports leaving or returning to the exam screen, connection loss or restoration and fullscreen exit events for exam integrity.
3. Photos, notifications and device access
You can choose images for profiles or registration using the device image picker, which may offer camera or photo-library access depending on your device. Selected images are resized on the device before upload. Saving or sharing a QR code or receipt creates a temporary cached image and opens the system share sheet; a browser downloads the image. Content is shared with the destination you select.
With notification permission, Firebase Cloud Messaging provides a push token. The app sends that token, device platform and app language to our server linked to your signed-in account, to deliver school alerts. You can disable notifications in account settings or device settings. Signing out requests removal of this phone’s token from your account. Notifications may appear on your lock screen according to device settings.
The app does not request GPS, microphone, contacts or biometric access. School attendance records and pickup requests do not mean the app tracks your live location. You can revoke available permissions in device settings; affected optional features may stop working.
4. How information is used
We use this information to authenticate accounts, display authorised school records, process registration and profile changes, connect guardians with children, coordinate pickup, deliver alerts, administer exams and reconcile payments. It also supports troubleshooting and protecting accounts and service integrity. The app has no advertising SDK or advertising tracking integration.
6. Device storage and security
The app stores a sign-in token, cached profile, language and notification preferences, and active payment QR details in Capacitor Preferences (local app storage). Exported images may remain in the app cache, downloads or a destination you choose. Signing out clears the sign-in token and cached profile; it does not delete school records or exported files. Protect your device and avoid sharing your account or guardian invitation credentials. Access controls and authenticated requests help protect records, but no system can guarantee absolute security.
7. Children and student information
The app supports students, including children, and their parents or guardians through participating schools. Parents and guardians should supervise children’s use and provide information only when authorised. Schools manage student access and the permissions needed for education records. Health and other sensitive registration details should be provided only as needed for the school’s services. Contact the school or CIT GROUP if a child’s information or guardian access is incorrect or unauthorised.
8. Retention, correction and deletion
School records are retained according to the school’s requirements and applicable recordkeeping obligations. You can edit available profile fields where your school permits it. To request access, correction, removal of a guardian link, account deletion or deletion of associated data, contact your school or email [email protected] with your school name, account phone number and request. Do not send your password. We may need to verify your identity and coordinate with the school. Some education or payment records may need to be retained; we will explain any limits that apply. Uninstalling the app does not delete your server account or school records.
9. Changes to this policy
We may update this policy as the app changes. The updated policy and date will be published on this page.
10. Contact us
For privacy questions or requests: CIT GROUP — CIT Schools, Vientiane, Lao PDR.
Email: [email protected]
Website: citschool.net