Privacy policy

This policy explains what personal data NAWARA processes, why, who can see it and what your rights are. NAWARA is the school's application: it connects the administration, the staff and families.

1. Who is responsible for your data

The school that uses NAWARA is responsible for the data entered on the platform. For any question or request, contact the school (details at the bottom of this page).

2. The data we process

• Your account (parents, staff, administration): full name, sex, phone, email address, password — stored in encrypted form, unreadable even by the school —, profile photo; where applicable, national ID number, date of birth and address.
• Your children: full name, sex, date of birth, address, photo, class, attendance and notes useful for their care, entered by the school.
• School life: posts (texts, photos and videos of activities), messages exchanged in the messaging, meals and activities.
• Enrolments and payments: chosen offers, instalments, payments and receipts.
• Staff: contract, salary, bank details, items of social security and tax returns, time records (arrival and departure times; depending on settings, photo and IP address when clocking in).
• Technical data: device identifier for notifications, server logs (IP address, browser, pages requested) kept for security.

3. Where the data comes from

You provide it (registration, profile, messages); the school enters it (your child's enrolment, payments, posts); some is produced by using the platform (time records, technical logs).

4. Why it is processed

• to organise the care and follow-up of children: enrolments, classes, attendance;
• to keep families informed: posts, messaging, notifications, text messages;
• to manage billing: instalments, payments, receipts;
• to manage staff: contracts, payroll, time records, returns;
• to keep the platform and accounts secure.

5. Who can see it

• the school's administration, according to the rights the school grants to each person;
• teachers, for the children in their classes;
• each parent, for their own account, their children and the posts that concern them.

Your data is never sold or rented, and is never used for advertising: NAWARA shows no advertising.

6. Technical providers

NAWARA relies on providers who only receive what their service requires:

• the server's hosting provider;
• Google Firebase, to send notifications (device identifier and notification content);
• Pusher, to deliver messaging messages instantly;
• an email delivery service, in particular for password resets;
• an SMS delivery service, when the school sends text messages (phone number and message content);
• Google Fonts, to display fonts (your browser then contacts Google).

7. How long data is kept

Data is kept while the account is in use and the child is enrolled or the contract runs, then for as long as legal obligations require, in particular accounting ones. The school can delete an account and its data.

8. Security

Exchanges with NAWARA are encrypted (HTTPS), passwords are stored in encrypted form, and each account only reaches what its role allows. The school can block an account at any time.

9. Your rights

You can ask to access your data and your child's, to have it corrected or deleted, and object to some processing, by contacting the school. These rights are provided by Organic Law No. 2004-63 of 27 July 2004 on the protection of personal data; you can also refer to the National Authority for the Protection of Personal Data (INPDP).

10. Changes

This policy may change as the platform evolves; the date of the last update is shown at the top of the page.

11. Contact