Privacy Policy

MAS Lantern (“we,” “our,” or “us”) is committed to protecting the privacy of students, parents, and school staff. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application and web services.

We use collected information for:

• School Operations: Managing student enrollment, attendance tracking, dismissal coordination
• Communication: Facilitating parent-teacher messaging and school announcements
• Authentication: Securing user accounts and maintaining session security
• App Improvement: Analyzing usage patterns to improve functionality and user experience
• Security: Detecting and preventing fraudulent activity or unauthorized access

MAS Lantern complies with the Family Educational Rights and Privacy Act (FERPA). We:

• Only collect educational records necessary for school operations
• Limit access to student data based on legitimate educational interest and role
• Do not sell or share student information with third parties for marketing
• Maintain comprehensive audit logs of data access
• Allow parents to review and request corrections to their children's records

We use the following service providers who act as “school officials” under FERPA to provide essential services. These providers are contractually prohibited from using student data for their own purposes:

Important: We do NOT share student education records with third parties for their own purposes. All service providers listed above act solely on our behalf and are subject to strict data protection agreements.

We implement industry-standard security measures:

• Encryption: Data encrypted in transit (HTTPS/TLS 1.3) and at rest (AES-256)
• Access Controls: Role-based permissions (Admin, Staff, Parent)
• Authentication: Secure token-based authentication with automatic expiration
• Audit Logging: Comprehensive logs of all access to student records (retained for 7 years)
• Monitoring: Continuous security monitoring and regular security audits

We retain your information for as long as:

• Your account is active
• Required by law or school policy (typically 5–7 years for educational records)
• Necessary for legitimate operational purposes

When you delete your account, we will delete or anonymize your data within 30 days, except where legally required to retain records (e.g., financial records, audit logs).

MAS Lantern accounts are restricted to adults aged 18 and over. Students do not have accounts — all student data is created and managed by authorized school staff and parents/guardians. We comply with COPPA (Children's Online Privacy Protection Act) and FERPA by:

• Not allowing minors to create accounts or access the App directly
• Only collecting student information entered by authorized adults
• Not collecting more information than necessary for educational purposes
• Not using student data for advertising, profiling, or behavioral targeting
• Allowing parents and guardians to review and request deletion of their child's information

You have the right to:

• Access: Request a copy of your personal data
• Correction: Request correction of inaccurate information
• Deletion: Request deletion of your account and associated data
• Portability: Request an export of your data in machine-readable format (JSON/CSV)
• Opt-Out: Disable analytics tracking in app settings

To exercise these rights, email info@nilesoft.dev with “Data Request” in the subject line.

We do NOT sell, rent, or trade your personal information.

We may disclose information only in these limited circumstances:

• With Your Consent: When you explicitly authorize sharing
• Legal Obligations: When required by law, court order, or legal process
• Safety & Security: To protect the safety of students, staff, or prevent fraud
• Service Providers: With providers listed above who act as school officials
• School Officials: With staff who have legitimate educational interest

Our services are hosted in the United States. If you access MAS Lantern from outside the U.S., your data will be transferred to and processed in the United States. By using our services, you consent to this transfer.

We may update this Privacy Policy periodically. We will notify users of material changes via:

• In-app notification
• Email to registered users
• Posting updated policy with new “Last Updated” date

Continued use after changes constitutes acceptance of the updated policy.

For privacy questions, data requests, or to exercise your FERPA rights:

For FERPA-related complaints, you may also contact: