Privacy Policy

Who operates the service

ECCD Care Tracker is operated and presented through The Digital Guro.

ECCD Care Tracker is an independent teacher-assistance tool. It is not affiliated with, endorsed by, or operated by the Department of Education or the ECCD Council.

For privacy questions, rights requests, or account deletion, email contact@thedigitalguro.com.

Information processed by ECCD Care Tracker

Teacher account information

When a teacher creates or signs in to an account, we process the teacher’s name, email address, verification status, account identifiers, account status, subscription status, and related timestamps. We also process app-generated identifiers needed to recognize the verified phone and maintain account access.

Data kept on your phone

The teacher’s working records are normally kept in the app on the phone. They may include:

• teacher and school or learning-center information;
• class names, levels, school years, and rosters;
• child names, dates of birth, sex, LRN when applicable, addresses, family details, and optional background information;
• assessment marks, dates, comments, score results, and teacher-confirmed follow-up dates;
• optional school logo, local preferences, and PDF History information.

This local workspace is not used for advertising and is not sold. It leaves the phone only when the teacher deliberately uses a connected feature described below.

Website information

When someone visits the Digital Guro website, the hosting service may process ordinary request information needed to deliver the page, such as the requested page, date and time, browser information, and network address.

Email updates

If you choose to join the Digital Guro email list, we collect the name and email address you enter, your marketing-email consent, the server-recorded date and time of consent, the version of the consent notice, and the page source of the sign-up. The entry is stored as pending confirmation because the capture form does not yet verify ownership of the email inbox.

We do not use a pending address to send marketing emails. Before any marketing-email capability is activated, the address must be confirmed through a separate mailbox-verification step or deleted. The sign-up does not ask for a role, school, organization, phone number, account password, or learner information.

Marketing messages will come only from The Digital Guro. We do not sell, rent, or share these marketing contact details with other parties.

You can withdraw the pending request at any time by emailing contact@thedigitalguro.com. When a withdrawal is recorded, the name and consent details are removed and only the email address, withdrawn status, and withdrawal time remain as a limited suppression record.

We use first-party website analytics to understand which public page and section is active. The browser creates a random session identifier and keeps it only in sessionStorage for the browser-tab session, with a memory-only fallback when session storage is unavailable. The site sends a heartbeat when the page becomes active and every 20 seconds while the page is visible, plus a leave event when the page is closed or left.

To distinguish new, returning, or unknown visits, the public website keeps a non-identifying visited-before flag in localStorage. Its only value is 1; it contains no random identifier, timestamp, account information, or browsing history. The flag stays in that browser until you clear the website’s site storage. Current-visit classification and timing stay only in session storage. Blocked, unavailable, or malformed storage is reported as unknown. These counts describe browser visits, not unique people: another browser, private browsing, or cleared site storage may appear new. Classification begins when this feature is enabled; earlier visits cannot be reconstructed.

The analytics payload contains only a schema version, the random session identifier, the heartbeat or leave event, curated page and section keys, a monotonic event sequence used only to ignore delayed or duplicate events, and the new/returning/unknown category. It does not include an IP address, user agent, referrer, account identity, or geographic location. The service temporarily holds a one-way protected session reference, deletes inactive session rows, and keeps aggregate daily category counts and completed-visit durations. We do not use analytics cookies, permanent visitor identifiers, advertising identifiers, device fingerprinting, or geolocation. There is no advertising or cross-site tracking.

Data processed by connected services

Connected features require internet access. We process only the information needed for the feature selected by the teacher.

Account access and email verification

We use the teacher’s email address to send account setup and sign-in codes, account messages, and requested PDF emails.

Score calculation

Premium score calculation sends the selected record type, the child’s age in months, and the seven raw domain counts. The score request does not include the child’s name or the full local workspace.

PDF preparation

When a teacher requests a protected PDF, the app sends the information required to fill that selected output. Depending on the output, this can include teacher, school, class, child, family, assessment, score, comment, roster, and optional school-logo information. The service uses the information to prepare the requested PDF and return it to the teacher. The PDF-generation service does not keep a continuing copy of the learner scope or generated PDF after that request is completed.

PDF email delivery

If the teacher selects “Email me” for a saved PDF, the PDF is sent through our email-delivery provider to the teacher’s verified email address. The receiving mailbox and email provider may retain that message under their own settings and policies.

Payments

For Premium access, we process subscription status, price, currency, coupon information when used, internal order references, checkout status, payment-provider references, payment status, and related dates. PayMongo hosts the payment page and may collect the payer and payment information required to complete the selected payment method. ECCD Care Tracker does not receive the teacher’s wallet PIN, OTP, bank password, or full card details from PayMongo.

Support requests

A support request can include a reply email, optional account email, subject, and message. Do not include child names, learner IDs, scores, health information, safeguarding information, payment credentials, or copies of learner records in a support request.

App-use information

We process limited app-use events showing that a class was created, a child profile was created, or a PDF was generated, together with a random event reference and time. These events do not contain class names, child names, learner records, assessment answers, scores, or PDF contents. They are used to understand whether key app functions are being used and to maintain the service.

Service providers and disclosures

We do not sell personal information and do not share it for targeted advertising.

Information may be processed by service providers acting for the functions described in this policy:

• Brevo, for verification codes, support-message delivery, service emails, and requested PDF emails;
• PayMongo, for hosted checkout and payment processing;
• hosting, database, website, and infrastructure providers used to operate the service.

We may also disclose information when required by applicable law, to respond to a lawful request, to protect users or the service, or to investigate fraud, abuse, or a security incident.

Data retention

• Local workspace: kept on the phone until the teacher uses the app’s erase option, clears app storage, or uninstalls the app. Exported PDFs remain where the teacher saved them until the teacher deletes them.
• Account and subscription information: kept while the account is active and afterward when reasonably needed for account administration, deletion processing, legal obligations, dispute handling, and service integrity.
• Verification and session information: expires according to the account-access process, although limited status and audit records may remain.
• Payment and coupon records: may be retained for accounting, transaction history, fraud prevention, disputes, and legal obligations.
• PDF generation: learner scopes and generated files are processed for the request and are not kept as a continuing server copy by the PDF-generation service.
• PDF emails and support: email providers and receiving mailboxes may retain messages according to their settings and policies.
• App-use information: event references are kept for a limited deduplication period; aggregate counts that do not contain names or learner records may be retained for service reporting.
• Marketing email list: new entries remain pending confirmation and cannot be used for marketing sends. Before email sending is enabled, each pending entry must be confirmed or deleted. A withdrawn entry is reduced to a limited suppression record containing the email address, withdrawn status, and withdrawal time.

Children’s information

ECCD Care Tracker is intended for teachers and authorized education workers, not for children to create or operate accounts themselves. Teachers and organizations using the app are responsible for having appropriate authority to enter and use learner information.

Child, family, assessment, health, and school information is normally kept in the teacher’s local workspace. Selected information is processed by the connected PDF service only when the teacher requests an output that requires it. We do not use children’s information for advertising, sell it, or create marketing profiles from it.

Your choices and rights

• Review and correct local teacher, school, class, and learner information through the app where available.
• Keep automatic PDF saving to shared Downloads turned off or turn it off later.
• Erase the local workspace from the Account area of the app.
• Delete exported PDFs directly from the phone or selected document location.
• Ask about, access, correct, object to, or request deletion of account information by emailing us.
• Withdraw a pending marketing-email request by emailing us; we remove the stored name and consent details and keep only a limited suppression record.

Google Play Data Safety summary

This summary is provided to help users understand the app’s data practices. The answers entered in Google Play must match the released app and the services active at the time of submission.

• No advertising SDK is used.
• Personal information is not sold.
• The app does not request precise device location.
• Payment credentials are entered on PayMongo’s hosted service, not into ECCD Care Tracker.
• Data is protected while handled by ECCD Care Tracker and access is limited to the purposes described in this policy.
• Users can request account deletion.

Changes to this policy

We may update this policy when the app, connected services, legal requirements, or data practices change. The date at the top shows the current published version. Material changes will be presented through the website, the app, or another appropriate notice.

Contact us

For privacy questions, rights requests, or account deletion:

The Digital Guro
Email: contact@thedigitalguro.com