Privacy Policy
Effective date: September 1, 2026
This Privacy Policy describes how Mmodemmo School Management System handles information when a school or Who Uses This Applicationd user accesses the application. It also explains the Google permissions identified in the current application configuration.
Who Uses This Application
Mmodemmo School Management System is used within a school by two types of authorized accounts:
- Admin — the school administrator who runs the desktop application, sets up and manages teacher accounts and PINs, and may connect a Google account to enable the Google Sheets and Drive workflows described in Section 3.
- Teacher — a staff member who accesses the online portal using a PIN issued by the school administrator, scoped to their assigned classes and duties, to enter marks, attendance, levy, and related academic data.
Both account types are authorized and managed by the school itself. References to "users" throughout this policy mean Admin and Teacher accounts alike, unless stated otherwise.
Information We Collect
- School records entered into the application — student names and class information, attendance records, levy/fee payment records, SBA and exam marks, and related academic data that the school's administrators and teachers enter directly into the desktop application or online portal.
- Teacher access information — the name and contact details a school administrator adds for each teacher, and the PIN used to access the online portal. This is set and controlled by the school administrator, not collected from teachers directly by us.
- Google account information (school administrator only) — when a school administrator connects their Google account, the application receives only what is needed to identify the connected account and to read and write data in the Google Sheets and Drive files the application itself creates or is given access to. See Section 3 for the specific Google permissions requested.
Google Authentication & Google User Data
The application uses Google OAuth and, according to the configuration supplied for this website, requests these Google API scopes:
- Google Drive API — permits the application to access files that it creates or opens with the application, rather than providing unrestricted access to a user's entire Google Drive.
- Google Sheets API — permits the application to read and write Google Sheets needed for the application's school-data workflow.
Based on the information supplied, these permissions are used to support the school's data workflow, including working with Google Sheets and application-related files in Google Drive. The supplied configuration does not identify Gmail, Google Calendar, Google Photos, or other Google API scopes.
The available materials do not expose the complete OAuth callback or token-storage implementation. Therefore, this page does not make an unsupported claim about whether a Google account's name, email address, profile image, subject identifier, refresh token, or other authentication fields are permanently stored in the application's database. Those details should be confirmed against the production authentication implementation before submitting the final OAuth verification package.
How Information Is Used
Information handled by the application is used for purposes such as:
- authenticating and authorizing users (Admin and Teacher accounts alike) where Google authentication is used;
- providing authorized users with the school-management and academic-data functions of the application;
- maintaining school records, assessments, attendance, levies, examinations, and reports;
- supporting the application's Google Sheets and Google Drive workflows;
- maintaining application operation and security; and
- responding to support and privacy requests.
Information is not described here as being used for advertising or unrelated profiling.
Data Sharing
Purpose of Use
School information and Google-accessed data are intended to be used for the operation of Mmodemmo School Management System and the school's authorized workflows. The materials supplied for this implementation do not identify an advertising network or data broker.
Third-Party Service Providers
Where third-party infrastructure or service providers process information on behalf of the application, their access should be limited to what is reasonably necessary to provide that service. The exact production hosting, database, SMS, analytics, and other service providers were not supplied for inspection, so this policy does not invent a vendor list.
Legal Disclosure
Information may also be disclosed where required by law, legal process, or to protect the rights, safety, and security of the application, its users, or others.
Data Security
Our Safeguards
We take reasonable technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. Access to school information is intended to be limited according to the application's authorization model.
No Guarantee of Absolute Security
No method of storing or transmitting information can be guaranteed to be completely secure. We therefore do not make claims of absolute or perfect security.
Data Retention
Retention Period
Information is retained for as long as reasonably necessary for the purposes for which it was collected, including operating the school-management service, maintaining records, meeting legitimate administrative needs, resolving disputes, and complying with applicable legal requirements.
No Fixed Schedule
No fixed deletion period was provided in the application materials, so this policy does not invent a specific number of days or years.
Your Choices and Requests
Your Rights
Subject to applicable law and the school's administrative responsibilities, users may contact us to ask about information associated with their use of the application or to request correction or deletion where applicable.
How to Request
A request can be made by contacting cosmopolitech.dev@gmail.com. We may need to verify the requester's identity and, where school records are involved, confirm that the requester is authorized to make the request.
Google Account Access
Revoking Access
A user or school can manage or revoke the application's Google account access through the relevant controls in their Google Account. Revoking access prevents future use of the granted Google permissions, but it does not by itself establish that previously stored application records will automatically be deleted.
Deletion Requests
If you want to request deletion or clarification about information held by the application, contact cosmopolitech.dev@gmail.com.
Changes to This Privacy Policy
We may update this Privacy Policy when the application's practices, Google integrations, or legal requirements change. The effective date at the top of this page will be updated when the policy is revised. Material changes will be reflected on this page.
Contact
Mmodemmo School Management System
Email: cosmopolitech.dev@gmail.com