Legal
Mobile App Privacy Policy
For the JPRAXC Parent, JPRAXC Staff and JPRAXC School ERP Android apps: what they collect, who receives it, what never leaves the phone, and how to have it removed.
This policy is published by JPRAXC INFYNEX PRIVATE LIMITED and describes the Android apps listed below. The separate website privacy policy covers jpraxc.com, its demo and purchase forms, and downloads.
Which apps this covers
- JPRAXC Parent —
com.jpraxc.mobile.parent - JPRAXC Staff —
com.jpraxc.mobile.staff - JPRAXC School ERP —
com.jpraxc.mobile.erp
They are one codebase in three editions. Each is useless on its own: it does nothing until a school issues you a School ID and an account.
Who holds your records
Your school holds your records, not us. Once the app knows which school you belong to, it talks to that school's own JPRAXC School ERP server, on the school's own domain. Attendance, marks, fees, notices, payroll and messages live in the school's database, under the school's control. The school decides what is released to a parent or staff account, and can switch categories such as fee amounts or salary figures off entirely.
JPRAXC INFYNEX PRIVATE LIMITED supplies the software. We do not receive your school records through these apps in the ordinary course of their use.
What the apps collect
What you type
The School ID. The 15-character School ID you enter at setup is sent to the JPRAXC school directory at schools.jpcerpcloud.com so the app can find your school's server address, name and logo. Nothing else about you is sent with it.
Sign-in details. In JPRAXC Parent, first-time activation asks for the admission number, the student's date of birth and the student's Aadhaar number, so the school's server can confirm you are the family on that record before you choose a password. In JPRAXC Staff and JPRAXC School ERP, sign-in asks for the Login ID and password issued by the school. These are sent to your school's own server over an encrypted connection to be checked. None of them — password, date of birth or Aadhaar number — is stored on the phone or sent to JPRAXC.
What the school releases to your account
Once signed in, the app displays only what your school has released to your account. Depending on the edition and the school's settings that can include the student or employee profile and photograph, attendance, examination results, the fee ledger with receipts, transport route and stop, notices, the class diary, payroll records and salary slips, and JPRAXC ConnectX messages. The app requests these records to show them; it does not copy them anywhere else.
What you send
Messages and file attachments you send through JPRAXC ConnectX go to your school's server, where the school can read them. Staff editions also send the attendance, diary entries and marks you enter.
Technical data
To deliver notifications the app registers with your school's server: the edition in use, the Firebase Cloud Messaging token for this installation, the app version, and a device identifier that the app itself generates as a random value on first run. We do not collect an advertising identifier, and we do not read your phone's hardware identifiers, IMEI, serial number, phone number, contacts or location.
These apps contain no advertising software and no third-party analytics or tracking software. We do not sell or rent any data, and we do not use it for advertising or profiling.
What stays on the phone
The app keeps a small amount of state on the device, encrypted with a key held in the Android Keystore:
- the school record it verified — School ID, name, address, logo and server address — and the randomly generated device identifier;
- the signed-in session token, so you are not asked for full credentials every time;
- a salted hash of your four-digit App PIN. The PIN itself is never stored, and never leaves the phone;
- whether you switched biometric unlock on.
Biometric unlock uses the Android system prompt. Your fingerprint or face is held by the phone, is never seen by the app, and never leaves the device. The App PIN and biometric unlock protect the app locally; they are not sent anywhere.
Receipts and salary slips you choose to download are written to your phone's own Downloads folder, where they stay until you delete them.
Permissions
- Internet — to reach your school's server.
- Notifications — to show school notices, messages and download confirmations. You may decline; the rest of the app still works.
- Biometric — only if you switch biometric unlock on.
The apps do not request camera, microphone, location, contacts, SMS, call log or calendar access. Choosing a file to attach in ConnectX uses the Android file picker, which hands the app only the one file you pick.
Who receives data
- Your school — everything you send through the app goes to your school's own server, which the school controls.
- Google (Firebase Cloud Messaging) — delivers push notifications. Google receives the notification token for this installation as part of that service.
- JPRAXC school directory — receives the School ID you type, to return your school's server address.
Beyond these, we do not share data with third parties except where the law requires it.
Children's records
These apps are for adults: parents and guardians, teachers and school staff. They are not directed at children and are not designed for a child to use.
The records shown in JPRAXC Parent are about a child, and are held by the school as the school's own records. A parent or guardian who wants a child's record corrected or removed should ask the school, which controls that data and is bound by its own obligations for it.
Retention and deletion
Signing out ends the session on the school's server and returns the app to its unlock screen.
Change user, on the unlock screen, revokes the session on the school's server and erases everything the app holds on this phone: the School ID binding, the saved session, the App PIN, the cached school identity and the notification registration. The app returns to first-run setup.
Uninstalling removes everything the app stored on the phone. Files already saved to your Downloads folder remain until you delete them.
Records inside the school's ERP are the school's own and are kept under the school's retention rules; ask your school to see, correct or delete them. To ask what JPRAXC itself holds about you, or to have it removed, write to us using the contact details below and we will respond.
Security
The apps talk to servers only over HTTPS; unencrypted connections are refused outright. Documents and images are fetched only from the school's own server, and redirects to other hosts are rejected before any content is read. On-device state is encrypted with a hardware-backed Android Keystore key, and repeated wrong App PIN entries lock the PIN for a growing period.
These are reasonable technical and organisational safeguards, not a guarantee: no internet service is completely free of risk.
Changes to this policy
If this policy changes we will update this page and the date at the top of it, and where the change is significant we will say so in the app's release notes. This page stays at the same address so that the link published on Google Play keeps working.
Contact
JPRAXC INFYNEX PRIVATE LIMITED, JPRAXC Building, Ward No. 7, Dudahi, Kushinagar, Uttar Pradesh — PIN 274302, India.
Write to support@jpcerpcloud.com for anything about these apps and the data they handle, or sales@jpcerpcloud.com for commercial enquiries.
For your own school record — a wrong mark, a missing receipt, a record you want removed — your school is the fastest route, because the school holds it.