Privacy Policy
Last updated: 15 October 2026
School Desk is a school management service (website and mobile app) provided by CODENASTIC (SMC-PRIVATE) LIMITED, a company registered in Pakistan (SECP). It is used by schools in Pakistan to run admissions, attendance, exams, fees and communication with parents. This policy explains what information the service handles and how we protect it.
Who is responsible for the data
Each school that uses School Desk decides what student, parent and staff information is entered and why. The school is the data controller. CODENASTIC (SMC-PRIVATE) LIMITED acts as the processor: we store and process the information on the school's behalf, only to provide the service. Accounts are created by the school; people cannot sign up on their own.
Information we handle
| Information | Who it is about | Why |
|---|---|---|
| Name, username, email address, phone number, role | Students, parents and guardians, teachers, staff | Sign-in and identifying people in the school |
| Date of birth, gender, address, CNIC / B-Form number, admission details, guardian relationship | Students, parents and guardians, staff | School records and admissions |
| Profile photo (optional) | Students, staff | Report cards and ID cards |
| Attendance, leave, exam marks and results, class diary, timetable | Students, staff | Academic record keeping and showing it to parents |
| Fee invoices, payments and balances; payroll for staff | Students and parents; staff | Fee collection and salary processing |
| Announcements and notifications sent by the school | All users | Communication between the school and families |
| Device push token and notification history | App users | Delivering notifications to your phone |
| Sign-in activity and audit logs | All users | Security and accountability |
We do not collect your location, contacts, microphone or camera data, and the app shows no advertising.
How the information is used
- To provide the features of School Desk to the school and its families.
- To send notifications such as absence alerts, new fee invoices, payment receipts and announcements.
- To keep the service secure, prevent misuse and fix problems.
We do not sell personal information and we do not use it for advertising or profiling.
Who it is shared with
- The school. Staff see information according to the permissions the school gives them. A parent sees only their own children.
- Notification providers. Push messages are delivered through Expo and Google Firebase Cloud Messaging. They receive the device token and the message text, which can include a child's first name.
- Hosting. The data is stored on servers operated for CODENASTIC (SMC-PRIVATE) LIMITED, protected by access controls.
- Legal requirements. We may disclose information if the law requires it.
Security
Data is sent over encrypted HTTPS connections. Passwords are stored hashed, never in plain text. Access to each school's data is limited by role and kept separate from other schools. No system is perfectly secure, but we work to protect the information we hold.
How long we keep it
We keep information for as long as the school uses School Desk, because school records such as results and fee history must be kept. When a school ends its service, or when a valid deletion request is approved, the data is deleted or anonymised, except where we must keep it for legal or accounting reasons.
Children
Students are often children. Their information is entered and managed by the school and shown to their parents or guardians. Children's accounts, where a school enables them, are created by the school. We do not knowingly collect information from children outside a school's service.
Your choices and rights
You can ask to see, correct or delete your information. Because the school owns the records, we will usually pass your request to the school, or ask your school to make the change. To remove your account and data, see how to request account deletion.
Changes to this policy
If we change this policy we will update the date above. Significant changes will also be announced in the app or by the school.
Contact
Questions or requests: info@schooldesk.pk. Please write from the email address or phone number registered with your school account and name your school.