Account & Login Policy

2. Account Creation

Accounts on the platform are created only by authorized school administrators:

• Accounts are created only for verified individuals who have a legitimate need for access
• Student accounts are created upon enrollment at the school
• Teacher and staff accounts are created upon commencement of employment
• Parent/guardian accounts are created and linked to enrolled students
• All account creation requires valid, accurate information
• Self-registration is not permitted — all accounts must be created by an authorized administrator
• Each individual may have only one account — duplicate accounts are not permitted

3. Account Types & Roles

The platform supports the following account types, each with specific access permissions:

• Student: Access to own academic records, attendance, homework, results, and school notices
• Teacher: Access to assigned class records, attendance management, homework management, and result entry
• Parent/Guardian: Access to linked student's information, fee payment, and school notices
• Administrator: Controlled administrative access to school management functions

Access is strictly limited to the permissions associated with each role. Users must not attempt to access functions or data beyond their authorized role.

4. Login Credentials

All users must manage their login credentials responsibly:

• Keep your username and password strictly confidential
• Never share your credentials with anyone — including family members, friends, or colleagues
• Do not write down your password in an insecure location
• Do not store your password in an unsecured file or note
• Change your password immediately if you suspect it has been compromised
• Report any suspected unauthorized access to your account immediately

5. Password Policy

All users must comply with the following password requirements:

• Use a strong, unique password that you do not use for other services
• Passwords must meet the minimum complexity requirements set by the platform
• Do not use easily guessable passwords such as your name, date of birth, school name, or "password"
• Change your password periodically and whenever you suspect it may have been compromised
• Do not reuse previous passwords
• Administrative accounts may be subject to stricter password requirements

6. Multi-Factor Authentication

Multi-factor authentication (MFA) may be required for certain account types, particularly administrative accounts, to provide an additional layer of security beyond the password.

• Administrative accounts may be required to use MFA
• Where MFA is available, all users are encouraged to enable it for their accounts
• MFA codes and backup codes must be kept secure and not shared with others
• If you lose access to your MFA device, contact the school administration for account recovery

7. Session Management

Users must manage their login sessions responsibly:

• Always log out of the platform when you have finished using it, especially on shared or public devices
• Do not leave your session open and unattended
• Sessions may automatically expire after a period of inactivity for security purposes
• Do not use "remember me" or saved password features on shared devices
• If you notice an active session that you did not initiate, change your password immediately and report it

8. Account Maintenance

Users are responsible for maintaining the accuracy of their account information:

• Keep your contact information (email address, mobile number) current
• Update your information promptly if it changes
• Accounts must not be transferred to another person
• Contact the school administration if you need to update information that you cannot change yourself

9. Inactive Accounts

Accounts that have not been accessed for an extended period may be deactivated:

• Inactive accounts may be deactivated after an extended period of inactivity
• Users will be notified before their account is deactivated where possible
• Deactivated accounts may be reactivated by contacting the school administration
• The school reserves the right to permanently delete inactive accounts after a further defined period

10. Account Offboarding

When a user's relationship with the school ends, their account will be managed as follows:

• Student graduation or departure: Student accounts will be deactivated according to the school's offboarding process. Access to academic records may be provided for a defined period after departure.
• Staff departure: Staff accounts will be deactivated on or before the last day of employment.
• Parent/guardian: Parent/guardian accounts will be deactivated when their linked student(s) are no longer enrolled at the school.

Users should ensure they have obtained any necessary records before their account is deactivated.

11. Account Recovery

If you are unable to access your account:

• Contact the school administration for account recovery assistance
• Identity verification may be required before account recovery is granted
• The school administration will verify your identity before resetting your credentials

12. Policy Acceptance

During account registration or first login, users are required to confirm their acceptance of the school's Terms & Conditions and Privacy Policy. A record of acceptance — including the policy version and timestamp — is maintained by the platform.

Continued use of the platform constitutes ongoing acceptance of the current policies. Users will be notified of significant policy changes.

13. Contact

For questions about this policy or to request account assistance, please contact the school administration or use our Grievance Submission Form.