SMS - School Management Software
Privacy Policy
SMS - School Management Software respects the privacy of schools, educators, families and students. This policy explains how information is handled when SMS is used through web services and mobile applications.
Effective date: 29 July 2026

Scope and roles
SMS is designed for use by educational institutions. The school or education group using SMS normally decides why and how personal data is processed and remains responsible for its own legal obligations. SMS processes data only to provide the agreed system and related support.
Information processed
Depending on the modules selected by a school, SMS may process account details, contact details, student records, attendance, schedules, grades, assignments, messages, fee records and files voluntarily uploaded by authorised users. Technical information such as browser type, device type and limited diagnostic data may also be processed to keep the system reliable.
Purpose of processing
Information is used to operate school administration, learning, communication, reporting, authentication, support and platform security. SMS does not use school or student data for advertising, behavioural profiling or unrelated marketing.
School instructions and legal basis
The School is responsible for ensuring that it has an appropriate legal basis to enter data into SMS and to give processing instructions. SMS processes information only within the modules, permissions and support arrangements requested by the School, unless disclosure is required by applicable law.
Sharing and hosting
Data is not sold or rented. In a self-hosted deployment, the school chooses and operates its own hosting environment. Where support or agreed technical services require access, access is limited to authorised personnel and the minimum information needed for that purpose.
Accounts, cookies and diagnostics
SMS uses account and session information to authenticate Users, keep the service secure and remember essential preferences. The public SMS website uses only the technical cookies required for its language preference, security and contact form. Diagnostic data is limited to what is reasonably necessary to identify errors, protect the service and improve reliability.
Children and student data
Student accounts and records are created and managed by the school. The school is responsible for obtaining any consent required by applicable law. SMS is intended solely for educational and school-administration purposes and does not permit advertising or behavioural tracking of students.
Security and retention
SMS uses role-based access controls and security measures appropriate to the deployment. The school determines retention periods, backups and deletion procedures for data held on its infrastructure, subject to applicable law and its own policies.
International access and incident handling
If authorised support personnel access a deployment from another country, the School and SMS should use the safeguards required by applicable law. If SMS becomes aware of a security incident within its own area of responsibility, it will work with the School to investigate the issue and provide relevant information without undue delay.
Requests and updates
Users should first contact their school to request access, correction, export or deletion of school-held data. Schools may contact the SMS team through the website contact form for technical or privacy questions. This policy may be updated when the service or legal requirements change.
