UpStat Privacy Policy

Accounts are protected through sign-in checks and active session verification. Do not share your email, password, invite code or sign-in details with other people.

• Always sign out when using a shared device.
• If you notice suspicious activity, change your password and contact support.
• We do not ask for your password in chats, calls or direct messages.

The app may use first name, last name, email, phone number if provided, interface language, role in the institution and profile data required for the diary to work.

• Passwords are stored in protected form, not as plain text.
• Email is used for sign-in, access recovery and important service notices.
• A profile can be linked to an institution, group, class or role.

Schedules, grades, assignments, attendance, group members, lesson journals and messages are shown only within the learning process and role-based access.

• Teachers see data for their groups and journals.
• Students see their own learning data.
• Parents see a child's data when that link is configured by the institution.
• Admins manage institution structure, schedules, roles and invitations.

Students, teachers, parents and admins see different parts of the app. This helps limit access to the information each person needs.

• Roles are issued by the institution or an admin through an invitation.
• Access can be changed or revoked by the institution.
• If you see incorrect data or another group, contact an admin or support.

Data is used only to operate UpStat: account access, learning data display, lesson journals, messaging, notifications and support.

• Displaying schedules, grades, homework and attendance.
• Synchronizing learning data between the web and mobile app.
• Delivering service notifications about important events.
• Diagnosing errors, keeping the service secure and preventing abuse.

We do not sell personal data. Data may be available to the institution according to roles and to technical providers that help operate the service.

• The institution receives data needed for learning and administration.
• Data storage and processing services are used to keep the app working reliably.
• A notification service may be used to deliver important messages.
• Technical providers must not use data for their own advertising purposes.

For notifications, the app may store device information and notification language. This is needed to deliver messages about grades, assignments, schedules and important events.

• Notifications can be turned off in device or app settings.
• After sign-out or device removal, notification data may be deleted or disabled.
• We do not use notification data to sell data or for third-party advertising.

We use safeguards such as secure connections, access control, protected password storage, role-based restrictions and backups.

• Data access is limited by assigned role.
• Service logs may be used to investigate errors and suspicious activity.
• No internet transmission is absolutely secure, but we reduce risks with reasonable safeguards.

Data is stored as long as needed for the learning process, obligations to the institution, security and applicable requirements.

• Account and profile data are stored while the user uses the service or is linked to an institution.
• Educational records may be kept longer if needed by the institution or required by law.
• Technical logs are kept for a limited period for security and diagnostics.

Users can initiate account deletion from their profile. After code confirmation, the account is deactivated, personal profile fields are cleared, and active sessions are ended.

• We may ask you to confirm account ownership.
• Deletion is completed within a reasonable time; if some data must be retained by law or academic record rules, we will explain this.
• Messages and learning records needed by other participants may be anonymized or retained in a permitted scope.

UpStat may be used by school students. The institution and parents or legal guardians are responsible for lawful student onboarding and educational data processing.

• We do not use student data for behavioral advertising.
• We do not publish students' personal data publicly.
• Parent access to a child's data is configured through the institution or authorized users.

Users may request access to their data, correction of inaccuracies, restriction of processing, export or account deletion where applicable.

• Some data can be changed in the profile.
• Educational data may require contacting the institution.
• For privacy and data questions, contact support@mail.ithorde.kz.

If you use a shared device, always sign out when finished. If you notice suspicious activity, contact support.

• Do not share invite codes with people who should not have access.
• Check the active institution if you are connected to several organizations.
• Report incorrect roles, other people's data or suspicious notifications.