Legal
Privacy Policy
Last updated: June 2025
Overview
MarkIT is built for teachers. We collect only the data necessary to run the Service and we never sell it. This policy explains what we collect, why, and what rights you have over your data.
1. Data We Collect
Account data
- Email address — used to identify your account and for support communication.
- Password — stored as a one-way hash. We cannot read your password.
Attendance data
- Student names and identifiers — entered by you, used solely to display and track attendance.
- Attendance records — present/absent/late status per student per date, stored locally and synced to our servers.
- Class and section names — used to organise your records.
Technical data
- Device and browser type — collected automatically for debugging and compatibility.
- Usage logs — timestamps of sync events and API calls, used for service reliability. No behavioural tracking.
Payment data
We do not process payments directly. GCash handles the transaction. We receive only a screenshot of your receipt to confirm payment — we do not store card or bank details.
2. How We Use Your Data
- To provide and maintain the Service.
- To sync your attendance records across your devices.
- To respond to support requests.
- To confirm manual payment activation.
- To send transactional emails (account creation, payment confirmation). We do not send marketing emails without your consent.
3. Data Sharing
We do not sell, rent, or share your data with third parties for marketing or advertising purposes.
We may share data with:
- Hosting providers — Cloudflare (infrastructure). Subject to Cloudflare's privacy policy.
- Law enforcement — only if required by applicable law.
4. Data Storage and Security
Attendance data is stored locally on your device using IndexedDB (offline-first) and synced to servers hosted on Cloudflare infrastructure. Data in transit is encrypted via HTTPS/TLS. Data at rest is encrypted by our hosting provider.
No security system is perfect. We recommend using a strong, unique password for your account.
5. Student Data
MarkIT processes student data on behalf of teachers. Teachers are responsible for ensuring they have the necessary authorisation to collect and store student attendance data under applicable law in their jurisdiction (e.g. FERPA, PDPA, GDPR where applicable).
We do not access student records except as needed to provide the Service or respond to technical support requests from you.
6. Your Rights
- Access — you can export all your attendance records as CSV at any time from within the app.
- Correction — edit any record directly in the app.
- Deletion — contact support@getmarkit.app to request permanent deletion of your account and all associated data. We will complete the deletion within 30 days.
- Portability — export your data in CSV format at any time.
7. Cookies
The Service uses only essential cookies for session authentication. We do not use tracking, advertising, or analytics cookies.
Cloudflare Web Analytics is used for aggregate page-view statistics. It does not use cookies and does not track individual users.
8. Children's Privacy
MarkIT is designed for use by teachers (adults). If a teacher enters information about minors (students), that data is handled in accordance with this policy and under the teacher's responsibility.
9. Changes to This Policy
We may update this policy. We will notify you of material changes by updating the "Last updated" date. Continued use of the Service constitutes acceptance of the updated policy.
10. Contact
Questions about this Privacy Policy? Email us at support@getmarkit.app.