National Grammar School ("NGS", "we", "us") operates the NGS eDiary mobile application for Android and iOS and the web portal at sms.ngs.edu.pk (together, the "Service"). This policy explains what information the Service processes, why, and the choices you have.
1. Information we process
1.1 Account and identity
Your login code, name, role (parent, guardian, student, or staff), the campus you belong to, and the password you set. Passwords are stored only as a one-way hash. If you sign in with your email address instead of your login code, that email address is sent to us to identify your account.
1.2 Contact details
Parents, guardians, and staff can view and update their contact details from Profile: email address, mobile and other phone numbers, and, for parents and guardians, home address with city and area. The school uses these to reach you about your child or your employment.
If you use Forgot password, the email address and contact number you enter are sent to us to confirm your identity before a temporary password is emailed to you.
1.3 Student information shown to authorised parents and guardians
For each student linked to your account, the app shows records the school already holds: attendance, timetable, diary and homework, marks and report cards, fee bills and payment history, notices, and learning resources. This information is created by the school, not collected from you, and is shown only to the parent or guardian the school has linked to that student.
1.4 Content you choose to upload or write
When you use a feature that needs it, you may upload a photo or file from your camera or photo library – for example a fee payment receipt or a student submission. The app asks for camera or photo permission only at that moment, and only the file you pick is sent to us.
When you submit a fee payment receipt, you also enter the amount paid, the payment date and method, and the bank name and reference number, and you may add a note for the school office. Requests you send to the school through the app, such as leave or meeting requests, include the details and any note or reason you write.
1.5 Staff information
Staff members see their own profile, attendance, leave, payslips, and documents, and may record class attendance, marks, and diary entries for the classes they teach.
1.6 Device and technical information
- Push notification token, device platform and model, and app version – used only to deliver notifications you have allowed.
- Security logs on our servers: sign-in attempts, timestamps, and IP addresses, kept to protect accounts and detect misuse.
2. How we use information
- To provide the Service: show you the records you are entitled to see and let you act on them.
- To send notifications you have opted into (attendance, fees, homework, announcements).
- To keep accounts secure (rate limiting, sign-in auditing, session control).
- To respond to support requests from you or your campus.
We do not show advertising, do not use analytics or tracking SDKs in the app, and do not sell or rent personal information.
3. Who we share information with
| Recipient | What | Why |
|---|---|---|
| Expo (Expo, Inc.) | Push token, notification title and text | Delivers push notifications to your device |
| Google Firebase Cloud Messaging | Push token, notification payload | Notification transport on Android |
| Apple Push Notification service | Push token, notification payload | Notification transport on iOS |
| Your campus and NGS head office | Records described above | They are the school's own records |
These providers act on our instructions to deliver the Service. We may also disclose information where the law requires it.
4. Storage and security
- All traffic between the app and our servers uses HTTPS.
- Sign-in tokens are kept in the device's secure storage (Android Keystore / iOS Keychain) and are short-lived; signing out revokes them.
- Data is stored on servers operated by NGS in Pakistan.
5. Retention
Account information is kept while you are associated with the school. Academic, attendance, and fee records are part of the school's official records and are retained according to school policy and applicable law, even after an app account is deleted. Push tokens are removed when you sign out, delete your account, or the device stops accepting notifications. Security logs are retained for a limited period for audit purposes.
6. Your choices
- Notifications – allow or deny at install, and change at any time in your device settings.
- Camera and photos – permission is requested only when you choose to upload; you can decline.
- Password – change it from Profile → Change Password.
- Sign out – ends the session on that device.
- Delete your account – accounts are created by the school, so deletion is by request: follow the steps at sms.ngs.edu.pk/legal/delete-account.html.
- Access or correction – contact your campus office or the address below to see or correct the information held about you.
7. Children
The Service is intended for parents, guardians, and staff. Where a campus issues a login to a student, the school does so under the parent or guardian's consent and the student sees only their own records. We do not knowingly collect information from children under 13 without such consent.
8. Changes to this policy
We will post any changes on this page and update the effective date above. Material changes will also be announced in the app.
9. Contact
National Grammar School – Head Office
22/D1 Gulberg III, Lahore, Pakistan
Email: asifali@ngs.edu.pk
Website: ngs.edu.pk