Legal

Privacy policy

Effective August 24, 2026

SchoolAide is a mobile app for parents, students, and school staff, published by RaksoEd. This policy explains what SchoolAide -- the app and this website -- collects, why, and what you can do about it.

It is written under Republic Act No. 10173, the Data Privacy Act of 2012, and the rules of the National Privacy Commission (NPC).

Who this covers, and who controls what

This policy covers parents and guardians, students, and school staff who use the SchoolAide app, and visitors to this website.

SchoolAide is multi-tenant: one app serves every partner school, and each school's families see that school's own branding, modules, and records. Your school is the personal information controller for your family's data -- the party that decides what is collected and why, as part of its existing enrolment relationship with you -- and RaksoEd acts as its personal information processor, providing the app and the systems behind it under a data processing arrangement with your school. Where RaksoEd itself decides how data is used, such as for the security and operation of the app or the TAPSO Wallet, RaksoEd acts as controller for that specific processing.

You can only get a SchoolAide account once your school has added you, or your child, to its SchoolAide roster. Access always starts inside a relationship your family already has with a school, never as an open public sign-up.

What we collect

We collect what SchoolAide needs to run the modules your school has switched on, grouped here the way the app itself groups them.

Account and identity

  • Your name, the email your school has on file for you, and your relationship to any linked students (parent, guardian, student, or school staff).
  • A student's photo, where a school has added one to their profile, shown on their wallet card.
  • Sign-in method: a 6-digit code sent to your school email, or, if you choose it, your Google or Microsoft account.

If you sign in with Google or Microsoft

When you choose to continue with Google or Microsoft instead of an email code, that provider shares your name, email address, and profile photo with SchoolAide, so we can match you to the account your school has already set up for you. We use this only to sign you in and identify your account. We do not request or receive access to your Gmail, Google Drive, Outlook mail, or any other data from that provider, we do not post or send anything on your behalf, and we do not use this information for advertising.

Device and security

  • The device your account is bound to, and its app version -- SchoolAide locks each account to one verified device, and a sign-in from an unrecognised device is stopped.
  • Whether biometric unlock and Payment Security are turned on. Face ID, fingerprint, and similar biometric checks run entirely on your device through Apple's and Google's own biometric systems: SchoolAide asks your device whether the check passed and never receives or stores the biometric data itself.

Payments and the TAPSO Wallet

  • Wallet balance and transaction history, itemised by product and price for canteen purchases, and by fee for school payments.
  • Top-up method -- GCash, QRPh, or card -- and the confirmation SchoolAide receives once a top-up succeeds. SchoolAide does not store your full card number, GCash credentials, or QRPh sign-in details; those are handled directly by the payment method you choose.
  • Transfers between wallets in your own family, and any daily spending limit or card freeze you set.

Attendance

  • Gate tap times -- time in, time out -- as recorded by your school's own gate hardware, and the status SchoolAide derives from them (present, absent, incomplete). SchoolAide reflects what your school's systems report; it does not independently track a student's location.

HealthPulse

  • Calorie, protein, sugar, and sodium totals, calculated from the canteen items a student's wallet has already paid for. This is derived nutrition information, not data entered separately or gathered from a health device.

Reflect

  • A student's daily check-in: how they say they are feeling, and any note they add. Reflect entries are visible only to the student who wrote them -- the app states this on the screen every time, and it applies even to that student's own parent or guardian. RaksoEd does not access, review, or disclose Reflect entries.

Notifications and support

  • A record of notifications sent to you, so tapping one can take you to the receipt or record it refers to.
  • Anything you send us directly -- a support email, or a demo request from this website -- and the reply we send back.

Technical information

  • Standard device and connection information common to any mobile app or website: device model, operating system version, app version, and IP address, used for security, fraud prevention, and keeping the app working correctly.

Why we process it

We use what we collect to operate the modules your school has enabled: running the wallet and processing payments, recording and showing attendance, sending the notifications that matter to you, sending fee reminders, and providing HealthPulse and Reflect. We also use it to keep accounts secure -- device binding, biometric gating, and fraud checks -- to provide support when you write to us, to meet legal and regulatory obligations, and to maintain and improve the app.

Processing is grounded in your relationship with your school, in the necessity of processing to deliver a service you and your school have both agreed to, in RaksoEd's own legitimate interest in operating a secure and working app, and in compliance with our legal obligations, including those that apply specifically to financial and payment records.

Children's privacy, and Reflect specifically

Many SchoolAide users are minors. Consent for a student's data to be processed is obtained through the enrolment relationship between your family and your school, before your school adds that student to its SchoolAide roster -- SchoolAide does not run a separate, independent sign-up for children.

A parent or guardian who can see a child's wallet and attendance in the app can exercise the rights described in "Your rights" below on that child's behalf, by writing to the address in "Contact us" -- with one deliberate exception: Reflect. Reflect check-ins are private to the student who wrote them by design, not by omission. RaksoEd does not open Reflect entries for a parent's request, and does not access them itself.

Who we share it with

  • Your school, for the records that belong to its own relationship with your family -- attendance, fee status, and wallet activity for students at that school. Reflect entries are the stated exception above.
  • Payment rails and processors -- GCash, QRPh, and card networks -- to complete a top-up or payment you initiate. Their own privacy policies govern what they do with your payment details.
  • Google or Microsoft, only if you choose to sign in with one of them, and only to the extent described above.
  • Service providers who host our infrastructure or, where enabled, provide website analytics, bound by contract to use data only to provide that service to us.
  • Regulators and authorities, where the law requires it, including the National Privacy Commission and, for payment-related records, applicable financial regulators.
  • A successor entity, if RaksoEd is ever acquired or merged, on the condition that your data continues to be protected under a policy at least as protective as this one.
  • We do not sell personal data, and we do not share it with third parties for their own advertising purposes.

Security

Money and children's data deserve real protection, and the ones below are settings you can check in the app right now, alongside the details of how they work.

  • Biometric unlock, with an optional second biometric confirmation on every QR payment, fee payment, and transfer once Payment Security is turned on.
  • Slide-to-pay: transactions confirm with a deliberate gesture rather than a tap, and a live countdown on every QR code means a stale code can never be charged against.
  • One account, one verified device. Moving to a new phone requires a time-limited transfer code that signs the old device out.
  • Encryption at rest: tokens and credentials are stored in the iOS Keychain or Android's encrypted storage, never in plain text.
  • Auto-lock behind a blurred screen after as little as 15 seconds, adjustable up to five minutes.
  • Copied reference numbers clear from the clipboard after 90 seconds. On Android, screenshots are blocked outright -- this specific protection is not currently available on iOS.
  • We use TLS encryption to protect data while it travels between your device and our servers.

How long we keep it

We keep personal data for as long as your account is active with your school. After your account closes, we keep transaction and payment records for up to five years to meet our legal, tax, and financial record-keeping obligations, and delete or anonymise other personal data within twelve months. We may keep data longer where the law requires it, or where it is needed to resolve a dispute already underway.

Your rights under the Data Privacy Act

As a data subject under RA 10173, you have the right to be informed before your personal data is processed; to access a copy of it; to object to processing; to correct inaccurate data; to erasure or blocking, where processing was unlawful or the data is no longer necessary; to data portability; to be indemnified for damages from a data breach or unlawful processing; and to file a complaint with the National Privacy Commission.

To exercise any of these, write to the address in "Contact us" below. If your account is linked to a school, we may need to confirm your request with your school before acting on records that belong to its own relationship with you.

Where your data is processed

We and the service providers we use to run SchoolAide may process data both within and outside the Philippines. Where data is processed outside the Philippines, we require that it be handled to a standard of protection consistent with this policy and with RA 10173.

This website specifically

The "Book a demo" form on this site collects a school name, your name, role, work email, and school size, an optional mobile number, and anything you choose to add in the notes -- used only to arrange and prepare for that walkthrough. Submitting it does not add you to a newsletter or a sales sequence.

Where enabled, this website uses Google Analytics to understand how visitors use it, with IP addresses anonymised. Analytics is switched off entirely outside production, so it never runs against a development or staging copy of this site.

Changes to this policy

We will update this page as SchoolAide's features change, and update the date at the top when we do. Material changes -- anything that meaningfully changes what we collect or why -- will be announced in the app or by email before they take effect.

Contact us and your Data Protection Officer

For any privacy question, a rights request, or to report a concern, write to us. You can also lodge a complaint directly with the National Privacy Commission.