PRIVACY POLICY — ERSANDER
App: ERSANDER (Student & Parent Portal)
Package ID: com.ersander.student
Published by: Emmanuel Residential School
Effective date: 3 August 2026
Last updated: 3 August 2026
1. WHO WE ARE
ERSANDER is the official student and parent application of Emmanuel Residential School, Andar Bazar ("the School", "we", "us").
The School is the data controller for all student and parent information shown in the app. The information originates in the School's own record system; the app displays it and does not create it.
Contact for privacy questions:
Emmanuel Residential School
Andar Bazar, Raghunathpur Road, Andar, Siwan, Bihar 841231, India
Email: ersandar1990@gmail.com
Phone: +91 9507486521
2. WHO THIS APP IS FOR
ERSANDER is available only to students and parents or guardians of the School, and only with sign-in credentials issued by the School. The app cannot create accounts and has no public sign-up.
Some account holders are children. Where a student is below the age of digital consent under applicable law, the account is intended to be used by, or under the supervision of, a parent or guardian. Credentials are issued by the School under its own enrolment and consent process. The app does not collect consent independently.
3. WHAT THE APP COLLECTS
3.1 Information you enter
- Username. Used to sign you in. Sent to the School's server.
- Password. Used to sign you in. Sent to the School's server, and never stored on the device.
- Complaint text and category. Used to raise a complaint. Sent to the School's server.
- Leave request details. Used to apply for leave. Sent to the School's server.
3.2 Information stored on your device
- Session token. Keeps you signed in. Held in encrypted storage: Android Keystore using AES-GCM with RSA-OAEP key wrapping, and the iOS or macOS Keychain, restricted to this device and unavailable until the first unlock after a restart.
The session token is erased when you log out, and when the server rejects it.
3.3 Information the School already holds, shown in the app
Name, photograph, class and section, admission and roll number, parent or guardian details, registered contact details, fee and transport records, leave records, complaint records, and notices. The app displays this data. It does not generate or independently collect it.
3.4 Information collected automatically
- IP address and standard connection metadata, visible to any server the app contacts, as with any internet-connected app.
- App version, device platform, language and country, sent to the Google Play Store when the app checks whether an update is required.
4. WHAT THE APP DOES NOT COLLECT
We want to be specific, because "we may collect" language is often used to cover things an app never touches. ERSANDER does not:
- Collect or request location of any kind.
- Access your camera, microphone, photos, media or files. The Android permissions for photo, video, audio and storage access are explicitly removed from the app at build time.
- Access your contacts, calendar, call logs or SMS.
- Contain advertising, an advertising ID, or ad networks.
- Contain analytics or crash-reporting software, or any third-party tracking.
- Build profiles of users, or use data for marketing or advertising.
- Sell or rent personal information to anyone, ever.
The app requests exactly two Android permissions:
- INTERNET, to reach the School's server.
- ACCESS_NETWORK_STATE, to tell "you are offline" apart from "the server is not responding".
5. NETWORK CONNECTIONS THE APP MAKES
For transparency, these are every outbound connection ERSANDER makes:
- The School's server at [API DOMAIN]. Carries sign-in and all the data you view or submit. Sent over HTTPS. Unencrypted traffic is disabled in the app.
- Google Play. An app-version lookup, to determine whether an update is required. Sends the app's package name, language and country. Sends no personal data.
- Public DNS resolvers. A connection to 1.1.1.1 (Cloudflare) and 8.8.8.8 (Google) on port 53, used only to confirm the device genuinely has working internet before showing the offline screen. No data about you is transmitted. These providers can see your IP address, as they would for any internet connectivity check.
6. HOW THE INFORMATION IS USED
Solely to operate the app for you: to sign you in, to show your child's school information, to submit leave requests and complaints, and to notify you when a mandatory app update is available.
We do not use your information for advertising, profiling, automated decision-making, or any purpose unrelated to the School's operation.
7. SHARING
Personal information is not shared with third parties. It travels only between your device and the School's own systems.
The limited exceptions are:
- Hosting and infrastructure providers operating the School's server on the School's instructions: [NAME PROVIDER, OR STATE THAT THE SERVER IS ON SCHOOL PREMISES].
- Legal obligation, where disclosure is required by law, court order, or a competent authority.
8. RETENTION AND DELETION
Student and parent records are retained by the School under its own record retention policy: [STATE RETENTION PERIOD OR LINK TO SCHOOL POLICY].
- Data stored on your device, meaning the session token, is removed when you log out or when you uninstall the app.
- Data held by the School cannot be deleted from inside the app, because it forms part of official school records. To request access, correction or deletion of a record, contact the School at ersandar1990@gmail.com.
To request account and data deletion, write to ersandar1990@gmail.com.
9. YOUR RIGHTS
Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, and to receive a copy of it. Because the School is the controller of these records, please direct all such requests to ersandar1990@gmail.com. We will respond within 30 days.
10. SECURITY
- Sign-in credentials and all data travel over HTTPS. Unencrypted traffic is disabled at the platform level.
- The session token is held in hardware-backed encrypted storage, using the Android Keystore or the iOS Keychain, not in plain preferences.
- Your password is never written to the device.
- Release builds are code-shrunk and obfuscated.
No system is perfectly secure. If you believe your account has been accessed without your permission, contact the School immediately at ersandar1990@gmail.com and change your password from within the app.
11. CHILDREN'S PRIVACY
This app exists to give families access to their own school records. Accounts are issued by the School to enrolled students and their parents or guardians as part of school administration.
We do not knowingly collect personal information from children beyond what the School already holds as part of enrolment, and we do not use children's data for advertising, profiling or any commercial purpose. Parents and guardians may contact the School at ersandar1990@gmail.com to review or request changes to their child's information.
12. CHANGES TO THIS POLICY
If this policy changes materially, we will update the "Last updated" date above and, where the change is significant, notify users in the app or through the School's usual communication channels.
13. CONTACT
Emmanuel Residential School
Andar Bazar, Raghunathpur Road, Andar, Siwan, Bihar 841231, India
Email: ersandar1990@gmail.com
Phone: +91 9507486521