At a glance
1. About this policy
This Privacy Policy applies to the CIT Schools Admin mobile application for iOS and Android (the "App"), developed and operated by CIT GROUP, Lao PDR ("we", "us", "our"). The App lets school owners, administrators, teachers and other authorised school staff manage daily school work: staff attendance, class attendance, scores, student pick-up, tuition invoices and payments, expenses and student registration.
The App is a tool for schools. Your account is created and managed by your school. For the school records you view or enter (for example student, attendance and payment records), your school is the data controller and CIT GROUP processes that data on the school's behalf and according to its instructions. For your own account and device data described below, CIT GROUP is responsible for how the App handles it.
By signing in to and using the App you acknowledge this Policy. If you do not agree with it, please do not use the App and contact your school administrator.
2. Information we collect
2.1 Account and profile information
- Name, gender, phone number, role (for example owner, administrator or teacher) and the school / branch you belong to.
- Your password. It is only stored on our servers as a one-way encrypted hash (bcrypt) and is never visible to anyone, including us.
- An optional profile photo that you choose to upload.
2.2 School records you view or enter
Depending on the permissions your school grants to your role, the App displays and lets you create or update:
- Student information: names, photos, classes, student codes and guardian contact details.
- Class attendance (absent / late marks and notes), conduct and academic scores.
- Student pick-up calls and "go home" requests sent by parents, and their confirmation.
- Tuition invoices, payments, receipts, packages, school expenses and the school's receiving bank account details.
- Student registration forms submitted to the school.
Every change is recorded with the staff account that made it and the time, so the school can keep an accurate history.
2.3 Staff attendance and precise location
When you tap Check in or Check out, the App reads your device's precise GPS location once and sends it with the attendance record, together with the date and time. It is used to confirm that you are within the distance from the school set by your school, and is kept as part of your attendance history. The App does not collect location in the background or at any other time.
2.4 Camera, photos and QR codes
- The camera is used to scan QR codes (for example for attendance) and to take photos of receipts. QR codes are read on your device; only the result needed for the action is sent.
- Photos you pick from your library (receipts, profile photo) are uploaded only when you choose them.
- When you save a payment receipt, the App writes the image to your photo library. It does not read other photos.
2.5 Biometric sign-in (Face ID / fingerprint)
If you turn on biometric sign-in, your face or fingerprint is verified entirely by your device's operating system. The App and CIT GROUP never receive or store biometric data. Your sign-in credentials are kept only on your device in the secure Keychain (iOS) or Keystore (Android) and are unlocked only after your device confirms your identity. You can turn this off at any time.
2.6 Push notifications
If you allow notifications, the App registers a push token issued by Google Firebase Cloud Messaging, together with your device platform (iOS / Android) and app language, on your account. It is used only to send you school notifications such as pick-up calls and go-home requests. The token is removed from your account when you sign out.
2.7 Technical information
Like most online services, our servers automatically record technical data needed to run and secure the service: IP address, date and time of requests, the API endpoints used, device operating system and app version, and error logs. We do not use third-party analytics or advertising SDKs in the App.
3. Device permissions
The App asks for each permission only when you first use the feature that needs it. All permissions are optional: if you decline, only that feature stops working. You can change them at any time in your device settings.
| Permission | Why it is used | When |
|---|---|---|
| Location (precise) | Verify staff check-in / check-out at school and show it on the map. | Only while the check-in screen is open (never in the background). |
| Camera | Scan QR codes and take receipt photos. | When you open the scanner or take a photo. |
| Photos | Choose a receipt or profile photo; save payment receipts. | When you pick or save an image. |
| Face ID / Fingerprint | Quick and secure sign-in. | Only if you turn on biometric sign-in. |
| Notifications | Receive pick-up calls and go-home requests. | Asked after you sign in. |
| Internet | Connect to the CIT Schools service. | While the App is in use. |
4. How we use information
- To sign you in, keep your session secure and show only the screens and data your role is allowed to access.
- To provide the App's features: attendance, scores, pick-up, tuition, payments, expenses and registration.
- To send operational notifications to you and, through the school's parent app, to parents (for example absence or payment notices).
- To keep accurate records and an audit history for the school.
- To maintain, secure, troubleshoot and improve the service, and to prevent fraud and misuse.
- To comply with legal obligations.
6. Data retention
- Account and school records are kept for as long as your school uses CIT Schools, or as long as the school requires for its records and legal obligations.
- Push tokens are deleted when you sign out, clear notifications in settings, or when Google reports the token is no longer valid.
- Server logs are kept for a limited period for security and troubleshooting.
- When a school ends its service, or on a valid deletion request, data is deleted or anonymised within a reasonable time, except where we must keep it by law.
7. Security
- All traffic between the App and our servers is encrypted with HTTPS (TLS).
- Passwords are stored only as bcrypt hashes; session tokens are stored in the device's secure storage and can be revoked by signing out.
- Role-based permissions: each request is checked on the server, so staff only reach the data their school allows.
- Each school's data is kept separate from other schools.
No method of transmission or storage is 100% secure. Please keep your password private, use a screen lock on your device and sign out on shared devices. Tell your school administrator and us immediately if you suspect unauthorised access.
8. Your choices and rights
- Access and correction: view and edit your profile in the App, or ask your school administrator to correct records.
- Permissions: allow or deny location, camera, photos, biometrics and notifications at any time in your device settings.
- Notifications: sign out to stop notifications on this phone, or use "Clear notifications" in the App settings to stop them on all your phones.
- Account deletion: staff accounts belong to your school. Ask your school administrator to deactivate or delete your account, or email us at [email protected] from your registered contact; we will verify the request with your school and respond within 30 days.
- Uninstall: removing the App deletes the data stored on your device (including saved biometric credentials). Records held by your school are not affected.
We handle personal data in accordance with the applicable laws of the Lao PDR, including the Law on Electronic Data Protection. Depending on where you live, you may have additional rights (such as objecting to or restricting processing); contact us to exercise them.
9. Children's information
The App is intended only for adult school staff and is not designed for or directed to children. It does, however, process information about students, who may be children, because schools use it to manage their students. This data is entered and controlled by the school, is accessible only to authorised staff and the student's parents / guardians, and is never used for advertising or profiling.
Parents or guardians who want to review, correct or delete their child's information should contact the child's school, or write to us at [email protected] and we will work with the school to respond.
10. International data transfers
Some service providers, such as Google Firebase and Google Maps, may process data on servers outside the Lao PDR. When this happens, we rely on providers that apply recognised security and data protection standards, and only share what is needed for the service.
11. Changes to this policy
We may update this Policy when the App or the law changes. The new version will be published on this page with a new "Last updated" date. If the changes are significant, we will also inform users through the App or the school. Continued use of the App after an update means you accept the revised Policy.
12. Contact us
For any question, request or complaint about this Policy or your data, contact:
We aim to respond within 30 days.