Privacy Policy

1. Who is responsible for your data

Each school decides which students, parents and teachers are added to Stack and how their information is used. For that information the school is the data controller and Stack acts on the school's behalf as a processor. For account and service data that we need to run the platform itself, we are the controller.

If you are a parent or teacher and want to see, correct or remove information a school holds about you or your child, please contact your school first. We will help the school respond.

2. Information we handle

• Account details: name, email address, role (school admin, staff, teacher or parent) and your school.
• School records entered by teachers and administrators: students and their classes, Qur'an and tahfiz progress records, ratings and remarks, schedules, attendance and teacher pay information.
• Invoices and payment status for school fees. Card and bank details are entered on the payment provider's page and are never stored by Stack.
• Photos you choose to upload, such as a teacher's profile photo or a student's photo.
• Location, only when a teacher who is paid per day taps Check in or Check out. It is sent once at that moment so the school can confirm attendance on its premises. We do not track location in the background.
• Technical information needed to keep the service running and secure, such as device type, app version and error logs.

3. How we use information

We do not sell personal data and we do not use it for third-party advertising.

• To provide and improve the service: sign-in, showing the right records to the right people, and calculating attendance and fees.
• To send service messages such as announcements from your school and password emails.
• To keep the platform secure, prevent abuse and fix problems.
• To meet legal obligations.

4. Children's information

Students are often children. Their information is entered by their school or, where the school allows it, by a parent or guardian, and is only shown to that school's staff, the student's teachers and the student's parents or guardians. Please do not add a child's information unless you are authorised to.

5. Sharing

Information is shared only as needed to run the service:

• Within a school: each school can only see its own data, and people only see what their role allows.
• Service providers that help us host the platform, send email and process online payments (for example, ToyyibPay for school fee payments). They may only use the data to provide their service to us.
• Authorities, where we are required to by law.

6. Security and retention

We use reasonable safeguards, including encrypted connections, access controls scoped to each school, and protected storage of sign-in sessions on your device. No system is completely secure, so please keep your password private.

We keep information for as long as your school's account is active and as long as needed to meet legal, accounting and dispute requirements. When a school ends its use of Stack, its data can be deleted or returned on request.

7. Your choices

• Update your name, photo and password in the Profile section.
• Ask your school or us to access, correct or delete your personal data.
• Withdraw location permission at any time in your device settings; you will then be unable to check in from the app.

8. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed, and we will notify schools of significant changes.

9. Contact us

Questions or requests about this policy can be sent to hafiz@sakeena.my, or by post to Stack by Sakeena, Bandar Tasik Senangin, Negeri Sembilan, Malaysia.