ISY Family & ISY Staff — Privacy Policy

ISY Family and ISY Staff are the communication apps for the International School Yangon (ISY). Last updated: 13 August 2026.

Who we are

These apps are operated by the International School Yangon to let the school and teachers communicate with parents and guardians. This policy covers the parent app (ISY Family), the staff app (ISY Staff), and the school admin panel.

What we collect

• Account details — your name, the username the school issues you, and your relationship to your child(ren).
• Your children's enrollment — name, grade, and class section, provided by the school.
• Messages you send — posts in class and school groups, and direct messages with your child's teachers.
• Photos and files you attach to a message.
• Notification preferences and, if you enable push notifications, a device push token.
• Limited technical logs needed to keep the service secure. We store a one-way hash of your sign-in IP address, never the raw address.

We do not sell your data, and we do not use it for advertising.

How we use it

• To deliver school announcements, class-group messages, and teacher direct messages.
• To send you a periodic digest and (optionally) push notifications you have turned on.
• To translate a message or summary into another language when you choose to. Your text is sent to our translation provider only at the moment you tap Translate — never automatically. You can set a preferred translation language in your profile; it is used for translation only and does not change the app's language.
• To keep the community safe through moderation and the safeguarding measures below.

Keeping children safe

• Image safety. Every uploaded image is automatically screened for known child-sexual-abuse material (CSAM) and for other unsafe content. A confirmed CSAM match is blocked and reported to the National Center for Missing & Exploited Children (NCMEC) as required by law.
• Private teacher messages. Direct messages between a parent and a teacher are private. School administrators cannot browse them. They can be opened only by the school's Designated Safeguarding Lead, only for a genuine welfare or safeguarding concern, and every such access is permanently logged (“break-glass”).
• Moderation. Group posts pass an automated word filter, and any message can be reported for review.

Who we share it with

We share data only with service providers that help us run the app, under contract:

• Neon — database hosting.
• Cloudflare — file storage (R2), inbound email handling, and image-safety screening.
• Anthropic — generating short summaries of long school emails. Summaries are produced from school notices, not from your private messages.
• Google — sign-in for staff accounts (isyedu.org), automated image-safety checks, and, through Google Cloud Translation, on-demand translation of a message or summary when you tap Translate. Text sent for translation is not used to train Google's models.
• NCMEC — only when the law requires a CSAM report, as described above.

How long we keep it

• Incoming school emails: kept until one year after the end of the school year they arrived in, then deleted.
• Email summaries: kept for the same period as the emails they summarize.
• Group messages: kept until one year after the end of the school year they were sent in.
• Teacher–parent direct messages: kept until three years after the end of that school year, to meet safeguarding obligations.
• Your account: kept until you delete it.

Deleting your account

You can request account deletion from the Profile screen in the parent app. Deletion has a 30-day grace period: if you sign back in within 30 days, your account is restored. After 30 days your account and personal data are permanently removed. A safeguarding record of a teacher conversation may be retained in a restricted, Safeguarding-Lead-only store where the law requires it, even after your account is deleted.

Your choices

• Turn digest email and push notifications on or off in Settings.
• Request access to, correction of, or deletion of your data by contacting the school.

Note on group visibility: your name is shown to the other parents in your child's grade group whenever you participate there. This is a safeguarding decision by the school's Designated Safeguarding Lead — named participation keeps posting accountable — and it cannot be turned off.

Children's data

ISY Family and ISY Staff are used by parents and school staff, not by students. Information about children is provided by the school as part of enrollment and is used only for school communication.

Contact

Questions about this policy or your data? Contact the ISY school office or the Designated Safeguarding Lead at the International School Yangon, or email averma@isyedu.org.