Cyfamod-SMS Apps Privacy Policy

Last updated: 31 July 2026

This policy applies only to the Cyfamod-SMS Staff and Cyfamod-SMS Student mobile apps (together, the “SMS Apps”). It does not describe the data practices of Cyfamod’s other products or the general Cyfamod website.

1. What the mobile apps do

Cyfamod-SMS Staff helps authorised school staff access school, class, student and results information. Cyfamod-SMS Student lets a learner sign in with school-provided credentials to view their school information, complete permitted bio-data, view results and download a result slip. The SMS Apps do not offer public account registration: accounts and learner admission details are created and managed by the relevant school.

2. Information used by Cyfamod-SMS Staff

Cyfamod-SMS Staff uses staff account and profile information, including name, email address, phone number, role, address and, where held by the school, gender, qualifications and employment information. It also gives authorised staff access to student and guardian information needed for school administration, including names, contact details, admission number, class details, profile photographs, attendance, academic results, skill or behaviour ratings, and teacher comments.

Where a school has recorded it, authorised staff may also see student blood-group or medical-information fields. This information is used only for the school-management functions available to authorised users.

3. Information used by Cyfamod-SMS Student

Cyfamod-SMS Student uses the learner’s admission number and password to sign in. It displays and, where permitted, sends updates to profile and bio-data, including name, address, profile photograph, date of birth, gender, nationality, state or local-government-area of origin, and blood group. It may display linked parent or guardian names, phone numbers and email addresses, as well as school, class, subject, session, term and academic-result information.

4. How information is used and shared

We use this information to authenticate users, provide the requested school-management features, maintain authorised school records, display results and result slips, and support the security and operation of the SMS Apps. Information is available to the relevant school and authorised users according to their roles and permissions. We do not sell this information or use it for advertising, and the SMS Apps do not contain advertising.

5. What the apps do not currently use

The current SMS Apps do not use precise or approximate location, contacts, microphone, SMS or call-log data, payment information, advertising identifiers or advertising SDKs. The SMS Apps include no active third-party crash-reporting configuration at the date of this policy.

6. Security and retention

Access is controlled through school-provided credentials and role-based permissions. The SMS Apps store the access token in secure device storage. School records are retained according to the relevant school’s instructions and any applicable operational, legal, security or record-keeping requirements.

7. Schools, learners and privacy questions

Schools are responsible for the information they enter, the people they authorise to use the SMS Apps, and any permissions required for learner information. If you need a school record corrected, accessed or removed, please contact the relevant school first. The current SMS Apps do not provide self-service account deletion.

For questions about this policy, email privacy@cyfamod.com. Please include the school or service involved and enough detail for us to understand your question. We may need to verify identity and work with the relevant school before responding to school-record requests.

8. Changes to this policy

We may update this policy when the SMS Apps or their data practices change. The updated policy will be published at this address with a revised “Last updated” date.