Anseraf — Privacy

The short version

Anseraf exists so a school can tell families what is happening and release children safely to the right adult. It holds the data needed to do that and no more. The school is the controller; we are its processor.

What is collected

Guardian identity

Name and mobile number, so the school knows who you are and can reach you. The mobile number is also the sign-in credential.

Student–guardian relationship

Which children you are linked to and whether you may collect them. This is what makes safe dismissal possible; it is set by the school, not by you.

Student record (limited)

Name, class and stage, and the identifiers the school uses. The app shows what the school chooses to expose to families.

Dismissal and attendance events

When a child was released, and to whom. This is a safeguarding record and the school keeps it.

Staff account data

Name, mobile number, role and the permissions the school assigned.

Device and notification data

A push notification token and basic app/device version, so notices reach the right device and so we can diagnose faults.

Technical logs

Request logs and error reports, kept to run the service and investigate problems.

How you sign in

You enter your mobile number and receive a one-time code by SMS. There is no password. The number is verified because it is also how the school identifies you as the guardian it linked to a child — a wrong number is a safeguarding problem, not just a login problem.

Delivering that code requires passing your number to an SMS provider. That is the only purpose it is used for in that context.

Notifications

The app sends notices the school issues — announcements, and events concerning your child. Delivery uses the platform push services operated by Apple and Google, which receive a device token and the notification payload in order to deliver it. You can turn notifications off at the operating-system level, though doing so means you will miss school notices.

Where data is held

Our production servers are currently located in Germany, operated on infrastructure we manage ourselves rather than on a third-party school-software platform. Some supporting services — email delivery, DNS and content delivery — may process data in other countries.

Because this places personal data outside the Kingdom, it is a cross-border transfer under the Personal Data Protection Law. We rely on the transfer being necessary to perform the agreement with the school, and we apply contractual and technical safeguards to it. If you require data residency inside the Kingdom, tell us before you subscribe: it is a deployment question, not a policy one.

Your rights

Under the Personal Data Protection Law you may ask to be told what personal data is held about you, to obtain a copy of it, to have it corrected, and in defined circumstances to have it destroyed. You may also withdraw a consent you previously gave.

For anything held on behalf of a school — a student record, an attendance or dismissal event, a guardian relationship — the school is the controller and decides. Send those requests to the school; we will support the school in answering them. For data we hold in our own right, such as an enquiry you emailed us, write to us directly and we will respond.

What Anseraf does not do

• It does not track your location. The app does not request location permission for tracking purposes.
• It contains no advertising and no third-party analytics sold on to anyone.
• It does not share your number with other guardians.

Deleting your account

A guardian account exists because a school linked it to a child. Ask the school to remove the link and the account access ends. If you want the underlying record erased, the school decides that as controller, and we act on its instruction. You can also write to [email protected] and we will route the request to the right school and follow up.