Privacy Policy

Welcome to Our Story, an educational publishing platform developed and maintained by Pranati Systems. Our Story is designed for authorized school administrators, teachers, and campus coordinators to document campus events, compose school activity announcements, and publish approved stories and photo galleries directly to their official school website.

We are committed to protecting the privacy and security of school institutions, staff members, and students. This Privacy Policy describes how we collect, use, store, and disclose information when you use our mobile application.

We only collect data necessary to provide and operate the publishing service. We do not sell personal data, nor do we track users across third-party apps or websites.

A. Information You Provide Directly

• Account Credentials:Username and password used to authenticate authorized staff members against your school's secure enterprise tenant.
• School Event Content: Story titles, descriptions, categories, event dates, tags, and photo galleries selected by teachers to represent school activities.
• Support Inquiries: Information provided when contacting support (such as school name and contact email/phone via WhatsApp or email).

B. Permissions & Device Information

• Photos & Media (Android Photo Picker):The app accesses only the specific photos you select to attach to a story. We use Android's native, zero-permission Photo Picker. The app never scans, reads, or accesses your general device photo library.
• Camera Access (Optional): If you take a photo directly within the app, camera hardware is accessed solely to capture the immediate image for the post.
• Network & Connectivity: The app checks network availability (ACCESS_NETWORK_STATE and INTERNET) to sync approved posts to your school website and verify account status with our secure API gateway.

C. Local Device Storage

• Encrypted Tokens & Local Drafts: Authentication tokens are stored securely in local device storage using Android's standard encrypted key store. Local drafts and offline articles are cached locally on your device via a local database (Room) so your work is not lost during network interruptions.

We use the information collected strictly for:

• Authentication & Authorization: Verifying staff identities, assigning user roles (e.g., Campus Coordinator vs. School Administrator), and preventing unauthorized access to school websites.
• Content Syndication:Formatting, optimizing (compressing images to efficient WebP formats), and publishing approved event stories to the institution's official website via secure API relays and HMAC-authenticated dispatchers.
• Operational Notifications: Providing accurate service maintenance, subscription status, and billing hold notices.
• Customer Support: Resolving technical or administrative inquiries initiated by school staff.

• No Advertising or Behavioral Tracking: Our Story contains no third-party ad networks, tracking pixels, or commercial data brokers.
• Official School Websites: Story content, author bylines (if enabled), and selected event photographs are transmitted exclusively to the designated official school website/portal configured for your institution.
• Secure API Gateway:Authentication and dispatch requests are processed through Pranati's encrypted cloud servers using HTTPS/TLS encryption.
• Legal Compliance: We will only disclose information if required by applicable law, court order, or governmental regulation.

• Local Storage: You may clear cached drafts and local data at any time by logging out or clearing app storage in Android Settings.

Our Story is an enterprise tool built exclusively for adult school personnel (teachers, principals, and administrative staff). It is not directed to or intended for use by children under the age of 13 (or under 16 in applicable jurisdictions).

While stories published by school staff may highlight student academic and extracurricular achievements, the subscribing educational institution is solely responsible for ensuring appropriate parental consent and school media consent policies prior to publishing student names or photographs.

We implement industry-standard administrative, technical, and physical safeguards:

• All network communication between the app, the FastAPI gateway, and the school website is encrypted in transit using TLS/HTTPS.
• Cryptographic signature verification (HMAC) protects dispatch pipelines from tampering.
• Staff passwords and tokens are never logged or stored in plain text.

We may update this Privacy Policy periodically to reflect app updates or legal requirements. Material changes will be indicated by the "Last Updated" date at the top of this page.

If you have questions, feedback, or requests regarding this Privacy Policy or data handling in Our Story, please contact: