Privacy Policy

We only collect information needed to operate the inventory system:

• Account information — your name, work email address, role, and the campuses you are assigned to. Your password is stored only as a salted cryptographic hash; we never store it in plain text.
• Operational records — actions you take in the app (device assignments, audits, repair reports, requests, comments) together with timestamps, for accountability and audit history.
• Security and sign-in data — your last sign-in time and IP address and failed-login counts, used to protect accounts against unauthorised access.
• Push notification token — if you enable notifications, a device push token so we can send you operational alerts (for example, a device assigned to you or a request awaiting review). Used for operational messages only — never for advertising.
• Camera — the app uses your device camera solely to scan asset-tag QR codes. Images are processed on-device to read the code and are not stored or transmitted.

Tellpat does not collect location data, contacts, microphone audio, advertising identifiers, or analytics for advertising, and contains no third-party advertising SDKs.

• To authenticate you and provide access appropriate to your role.
• To operate inventory, assignment, audit, repair, and request workflows.
• To send operational notifications you have opted into.
• To maintain security and an audit trail of changes.

We do not sell your personal information and do not share it with third parties for their own marketing. Information is visible to other authorised users of your organisation as required by the workflow (for example, the IT team can see who a device is assigned to). We use service providers strictly to run the app — secure cloud hosting for our database and the Expo push-notification service for delivering alerts — and only to the extent needed to provide the service. We may disclose information where required by law.

We retain account and operational records for as long as your account is active and as needed for the organisation’s audit and asset-management purposes. When you delete your account, your personal details (name, email, password, push token) are erased and the account is permanently deactivated, as described below. Historical operational records may be retained in anonymised form where needed for audit integrity.

You can permanently delete your account at any time from within the app: open More → Account → Delete account and confirm. This erases your personal information and permanently disables the account; it cannot be undone. If you cannot access the app, contact us at the address below to request deletion.

Data is transmitted over encrypted HTTPS connections and passwords are stored as salted hashes. Authentication tokens on your device are kept in the operating system’s secure storage. Access within the app is restricted by role.

You may request access to, correction of, or deletion of your personal information by contacting us. You may disable push notifications at any time in your device settings.

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

Questions or requests about this policy or your data: it@smsabuja.sch.ng, Stella Maris Schools, Abuja, Nigeria.