Privacy

ZERA Parent App — Privacy Policy

Last updated 2 September 2026

This policy explains what the ZERA parent app collects, why, and what control you have over it. It covers the mobile app only. Our website and other school services are covered by the school’s general privacy practices.

The app is provided by ZERA RESOURCE CENTRE SDN. BHD. (Company No. 202001032868 / 1389189-U), the operator of ZERA International School, at Blok C, Pusat Perdagangan Ekoflora, Jalan Ekoflora 7/5, Taman Ekoflora Utama, 81100 Johor Bahru, Johor, Malaysia. We are the data controller for the information described here, and we handle it in line with Malaysia’s Personal Data Protection Act 2010 (PDPA).

Questions about anything below: [email protected].

Who can use the app

The app is for parents and guardians of enrolled ZERA students. Accounts are not open to the public — the school creates your guardian record when your child enrols, and you sign in to a record that already exists. Students do not have their own accounts.

What the app collects

InformationWhat it includesWhy
Your identity and contact detailsName, preferred name, email address, phone number, profile pictureTo sign you in, address you correctly, and let the school reach you
Your children’s school recordsName and photo, class and timetable, attendance, report cards, merit and discipline records, house membership, leave applicationsThese are the records the app exists to show you
Emergency and billing contactsContact people and details you enter for your childSo the school can reach the right person, and bill correctly
Fees and paymentsInvoices, instalments, payment history, wallet balanceTo show you what is owed and what has been paid
MessagesMessages you exchange with school staff, including any photos you attachTo deliver the conversation and keep its history
Photos you chooseOnly images you pick from your photo library to attach to a message or set as your child’s profile pictureOnly for the purpose you chose them for
Sign-in tokenA token stored on your device after you sign inSo you stay signed in between visits
Notification tokenA device identifier issued by Apple or Google, when notifications are turned onTo deliver notifications to your device

What the app does not do

  • No advertising. The app contains no ads and no advertising identifiers.
  • No selling or sharing for marketing. We never sell your information, and we never share it with anyone for their own marketing.
  • No tracking across other apps or websites. The app does not track you anywhere else, and does not build an advertising profile of you.
  • No third-party analytics. The app carries no analytics or behavioural tracking software.
  • No location. The app does not request or collect your location.
  • No camera or microphone. The app can read images you pick from your photo library; it never opens your camera or microphone.
  • No contacts, calendar, or health data.

Where the information comes from

Most of it comes from the school’s own records — your child’s enrolment, attendance, results and fees are recorded by school staff, and the app displays them to you. The rest is what you enter: your profile, emergency and billing contacts, messages, and any photos you attach.

Photo library access

The app asks for photo library access only at the moment you choose to attach a picture, and only reads the image you select. It never browses or uploads your library. You can decline, and every other part of the app keeps working.

Payments

When you pay a fee, the app hands you to the payment provider’s own secure page in your browser. Card and banking details are entered there, not in the app — we never see, handle or store them. The app only learns whether a payment succeeded.

Who we share information with

We share only what is necessary to run the service:

  • ZERA staff, on a need-to-know basis — teachers, the office, and finance see the records relevant to their role.
  • Our software provider, Commun, which builds and hosts the school management system behind the app, under contract and only to operate it.
  • Cloud hosting and delivery providers — Amazon Web Services (data storage, Singapore region), Pusher (real-time message delivery), and Apple or Google (notification delivery only, when notifications are on).
  • Payment providers, when you make a payment.
  • Authorities, where the law requires it.

We do not share your information with anyone else.

Children’s information

The records in the app are about children, and we treat them accordingly. Access is limited to the child’s own guardians and to staff who need it. The app shows children’s records to signed-in guardians only; it does not make them public, and it does not use them for any purpose beyond running the school.

How long we keep it

School records — enrolment, results, attendance, financial history — are kept for as long as the school is required to keep them under Malaysian law and its own record-keeping obligations, which continues after a student leaves. Messages and your guardian profile are kept while your account is active, and removed when your account is closed (see below).

Your choices and rights

Under the PDPA you can ask us to access, correct, or limit our use of your personal information, and you can withdraw consent for uses that rely on it. Some of this you can do yourself in the app: your profile, emergency contacts and billing contacts are all editable, and notifications can be turned off at any time in your device settings.

Closing your account

You can request account deletion from inside the app — More → Delete account — or by emailing [email protected]. We confirm the request is genuinely from you, then close your account and remove your guardian profile, contact details and messages from the app.

Please note what deletion does not reach: your child’s academic, attendance, and financial records belong to the school and are kept under the retention obligations described above. Closing your app account removes your access; it does not erase your child’s school record, and it does not withdraw your child from the school.

Keeping it safe

Traffic between the app and our servers is encrypted with standard HTTPS/TLS. Your sign-in token is held in the device’s own secure storage — the iOS Keychain or the Android Keystore. Access to school records is restricted by role, and staff see only what their role requires.

Changes to this policy

If we change this policy we will update the date at the top of this page, and we will tell you in the app if the change is significant.

Contact us

ZERA RESOURCE CENTRE SDN. BHD. Blok C, Pusat Perdagangan Ekoflora, Jalan Ekoflora 7/5, Taman Ekoflora Utama, 81100 Johor Bahru, Johor, Malaysia Email: [email protected] · Phone: +60 13-205 8869