Privacy Policy
Effective September 6, 2026
SamayIQ is center-management software used by a learning center's owner and staff. This policy explains what information SamayIQ collects, why it is collected, who can see it, how long it is kept, and how to have it removed. It is written in plain English on purpose.
Throughout this policy, "your center" means the center that holds the SamayIQ account, and "we" means the people who operate SamayIQ.
Who the information belongs to
A center enters its own records into SamayIQ — students, guardians, schedules, attendance, and staff. Your center decides what to enter and remains responsible for that information, including obtaining any parent or guardian permission it needs to record and share it. We store and process it so your center can use SamayIQ.
What we collect
Center and staff accounts
- Center name, address, phone number, timezone, and operating settings.
- The name and email address of the account owner and of each staff member invited to the center.
- A password, stored only as a one-way hash — never as readable text.
- Sign-in activity and security-relevant actions (see "Audit records" below).
- Staff clock-in and clock-out times, where a center uses staff time tracking.
Student information
- Student name and preferred name.
- Subjects enrolled in (Math, Reading, or both).
- Current levels, level history, Achievement Test results, and progress notes a center records.
- Expected schedules, check-in and check-out times, session length, and absences.
- Date of birth, if a center chooses to enter it — it is optional.
- A check-in PIN, where a center uses PIN-based kiosk check-in.
Guardian information
- Guardian name, relationship to the student, email address, and phone number.
- Notification preferences for that guardian.
- Guardian ID photos, if a center chooses to upload them. These are stored in private storage and are not publicly reachable; SamayIQ shows them to authorized staff at that center through short-lived access links.
Books and materials
- Which books your center holds, in what quantities, including books your center adds itself.
- Which student has which book checked out, when it was taken, and when it was returned.
Audit records
For security, SamayIQ records certain sensitive events — sign-in successes and failures, password resets, staff role changes, invitations, and staff deactivation — along with the account involved and the IP address the request came from.
Demo requests
If you submit the demo-request form on our homepage, we receive the center name, contact name, email address, and any optional phone number or notes you include, and we use them only to reply to you.
Why we collect it
- To provide the features your center signed up for — check-in, attendance, schedules, progress, books.
- To send the emails your center chooses to send, such as check-in notifications and progress updates.
- To keep accounts secure and to investigate suspicious activity.
- To bill your center's subscription.
- To provide support when you contact us, and to keep the service working.
We do not sell personal information. We do not use student, guardian, or attendance information for advertising, and we do not share it with third parties for their own marketing.
Who can see it
Your center's records are visible to the authorized accounts at your center — the owner and the staff accounts your center creates — limited by the permissions your center assigns them. Other centers cannot access your center's records through SamayIQ.
Like any software operator, we have the technical ability to access data on our servers when it is needed to run, maintain, and support SamayIQ — for example, to investigate a problem you report. That access exists to operate the service, never to let one center see another's information.
Service providers we use
- Supabase — hosts the PostgreSQL database where your center's records are stored, and the private file storage used for uploaded images such as Guardian ID photos.
- Resend — delivers the emails SamayIQ sends on your center's behalf.
- Stripe — handles subscription payments. Card details are entered on Stripe's own pages and are processed by Stripe. SamayIQ never receives or stores card numbers.
- Vercel — hosts and serves the application itself.
These providers process information so that SamayIQ can function. We may also disclose information if we are legally required to.
How long we keep it
Your center's records are kept for as long as the account exists, because attendance history, level history, and book history are the point of the product. A center can delete individual records — a student, a guardian, a book, an uploaded photo — from within the application at any time.
Canceling a subscription stops billing; it does not by itself delete your center's data. If your center wants its data removed, ask us and we will delete it.
Requesting deletion or a copy
Email us at support.samayiq@gmail.com from the account owner's email address and tell us what you want deleted — a specific record, or the center's account and all of its data. We will confirm before deleting an entire account, because that cannot be undone. A center can also export much of its own data as a spreadsheet from within the application.
If you are a parent or guardian and want to know what a center has recorded about your child, contact the center directly — the center controls its own records. We will help the center respond.
Children's information
SamayIQ is used by center staff, not by students' families, and student records are entered by the center. Students do not create SamayIQ accounts. The one thing a student does directly is tap their own name (and, if the center requires it, enter a PIN) to check in at the center's kiosk. Your center is responsible for obtaining any consent it needs from parents and guardians before entering their information or their child's information into SamayIQ.
Security
Every request is checked against the signed-in account and is limited to that account's own center. Passwords are stored hashed, connections are encrypted, uploaded ID photos are kept in private storage, and sensitive actions are recorded in audit records. No system can guarantee against every risk, and SamayIQ holds no security certifications. Our Security & Privacy Overview describes this in more detail.
Changes to this policy
If we change this policy, we will update the effective date above, and we will email the account owner if the change is significant.
Contact
Questions about this policy or about your center's data: support.samayiq@gmail.com.