Thompson Staff — Privacy Policy

1. Who this app is for

Thompson Staff is an internal work application for employees of Thompson International School. It is intended for two staff roles only: school nurses and security guards.

Sign-up inside the app is not possible. Accounts are created by the school administration in the school's CRM system. The app is not intended for the general public.

2. What data we collect

2.1 Data about the employee

2.2 Data about third parties (entered by the employee)

As part of their duties, employees enter the following:

School nurse:

• Student medical check-up records: height, weight, general condition, notes
• Medical room visit records: complaint, body temperature, treatment given, recommendations
• Whether a record is visible to parents or kept internal

Security guard:

• Visitor details: full name, purpose of visit, host employee, note, photo
• Entry and exit times
• Shift checklist results and photo evidence
• Incident reports: description and photos

This data is processed on behalf of the school. The school is the controller of this data; the app is the tool used to collect it.

2.3 Data we do NOT collect

The app does not collect:

• Location (neither GPS nor network-based)
• Audio recordings or microphone data
• Phone contacts, calendar, SMS or call history
• Bank cards or payment information
• Advertising ID (AAID / IDFA)
• Browsing history or the list of other apps on the device

3. Camera and photos

The app asks for camera permission. It is used only in the following cases, and only after you tap a button yourself:

• taking a photo when registering a visitor
• attaching photo evidence to a shift checklist item
• attaching a photo to an incident report
• setting your profile picture

The app never takes photos or records video in the background and does not scan your device gallery. No video is recorded.

4. Where data is stored

All network traffic is transmitted encrypted over HTTPS (TLS).

5. Third-party services

Location tracking and advertising-identifier collection in AppMetrica are deliberately disabled by the app.

These services process data only on our instructions and do not use it for their own advertising purposes. The app contains no advertising networks.

Their policies:

• Google: https://policies.google.com/privacy
• Yandex AppMetrica: https://yandex.com/legal/confidential/

6. Who data is disclosed to

• School administration and authorised staff — within their role
• A student's parents— only if the nurse marked a record as «visible to parents», and only through the school's parent-facing app
• When required by law — to the competent authorities of the Republic of Uzbekistan, in the manner prescribed by law

We do not sell data and do not share it with third parties for advertising.

7. Retention

• Work records(medical records, visitor log, incident reports) — kept according to the school's internal record-keeping rules. These records are official school documents.
• Employee accounts — deleted or disabled by the school administration when the employee leaves.
• Data on the device — destroyed immediately when you sign out or uninstall the app.

8. Your rights

You have the right to:

• Know what data about you is processed and obtain a copy
• Request correction of inaccurate data
• Request deletion of your data
• Object to processing

There is no self-service account deletion button in the app, because accounts are managed by the school administration. Send your request to:

info@thompson.uz — subject line «Thompson Staff — data request».

We will respond within 30 days.

Requests concerning student medical data are handled directly by the school administration, as the school is the controller of that data.

9. Security

• All network traffic is encrypted with HTTPS/TLS
• Access to the app is protected by a personal PIN code; fingerprint or face unlock can optionally be enabled
• Access is role-based: you only see data required for your job
• App data is excluded from device backups (Android backup)

No system is completely secure. If you believe your account has been compromised, notify the school administration immediately.

10. Children's data

The app is intended for employees aged 18 and over and is not distributed to children.

The app does, however, process medical data about students, including minors. This data is collected on behalf of the school, is accessible only to authorised staff, and is never used for advertising or profiling.

11. Advertising and in-app purchases

The app contains no advertising, no in-app purchases and no third-party ad tracking.

12. Changes to this policy

If this policy changes, a new date will be shown on this page. We will announce material changes in the app or through the school administration.

13. Contact