QuizaacQR Privacy Policy
This Privacy Policy describes how IsaacPro / APRIMETech (“we”, “us”) processes personal information when a Philippine K–12 school uses QuizaacQR for campus attendance (the “Service”). The school is the personal information controller under the Data Privacy Act of 2012 (RA 10173). We act as a personal information processor on the school’s documented instructions.
Information we process
- Student roster data — name, LRN, grade, section, parent/guardian contact, parental consent flags.
- Attendance events — QR scan timestamps, gate/class/subject event types, device identifiers.
- Audit images (optional) — a JPEG photograph captured at scan time for dispute review (e.g. borrowed ID). These are audit records, not the primary gate identity method.
- Staff accounts — principal, registrar, teacher, guard, and support user credentials and role assignments.
- Technical logs — device sync health, upload queues, and API diagnostics.
Audit images — scope and limits
When enabled by the school, the Android app may store a face photograph with each scan. Images are used solely for attendance audit and dispute resolution — not for automated biometric identification as the primary gate method unless the school explicitly enables a separate recognition mode. Schools must obtain parental consent before enrolling minors.
Storage and transfer
- On-device: roster and pending scans are cached on gate phones during rush hour (offline operation).
- Server: synced events and audit images are stored on secured servers operated for IsaacPro products.
- Data is not sold. Sub-processors (hosting, email) operate under contractual safeguards.
Retention
Attendance records are retained for the active school year plus one additional year unless the school requests earlier deletion or applicable law requires a longer period. Audit images follow the same retention schedule unless the school configures a shorter period.
Access controls
Role-based access limits who can view student data: principals and registrars for their campus; guards for live gate events; IsaacPro support only when authorised by the school for troubleshooting. Audit image review is restricted to authorised school staff and support admins with a documented reason.
Parental consent
Schools must obtain verifiable parental consent before collecting student attendance data. Use our parental consent form template and keep signed copies on file.
Your rights (schools and parents)
- Request access, correction, or deletion of student records (via the school as controller).
- Object to processing where permitted by law.
- File a complaint with the National Privacy Commission (NPC).
Breach notification
If we become aware of a personal data breach likely to pose a risk to data subjects, we will notify affected schools without undue delay and cooperate with their NPC notification obligations.
Data Protection Officer
IsaacPro Data Protection Officer
APRIMETech · Marikina City, Philippines
Email:
support@isaacpro.net
·
aprimetech.net@gmail.com
QuizaacOMR (bubble-sheet grading) is covered separately in the QuizaacOMR Privacy Policy.