Student79 Privacy Policy
# Privacy Policy
**Schedule 79, Register 79, and Student 79**
Last updated: 24 May 2026
---
## Who We Are
These apps are developed and operated by Steven Duguid, based in the United Kingdom. If you have any questions about this privacy policy or how your data is handled, you can contact me at:
**Email:** steve.duguid@btinternet.com
---
## What These Apps Do
Schedule 79, Register 79, and Student 79 are timetabling and attendance tools designed for performing arts schools. They allow school administrators to build lesson schedules, teachers to record student attendance, and students to view their personal timetables.
---
## What Data We Collect
The apps collect and store the following personal data:
| Data | Who it relates to | Why it is collected |
|------|------------------|---------------------|
| Full name | Teachers, students | To identify people in the schedule and attendance records |
| Email address | Teachers, students | To identify and contact individuals |
| Phone number | Teachers, students | To allow contact between the school and its staff or students |
| Lesson schedule data | All users | To display timetables and enable attendance marking |
| Attendance records | Students | To record whether a student was present, late, or absent at a lesson |
No payment information, location data, or device identifiers are collected by these apps.
---
## How We Use Your Data
Your data is used solely to operate the scheduling and attendance features of the apps. Specifically:
- **Names** are displayed in lesson schedules, attendance registers, and timetable views
- **Email addresses and phone numbers** are stored for administrative reference within the school
- **Attendance records** are used to track student participation and can be exported by the school administrator for reporting purposes
We do not use your data for marketing, advertising, or any purpose unrelated to running the school schedule.
---
## Legal Basis for Processing (UK GDPR)
We process personal data on the following legal bases:
- **Legitimate interests** — operating a school schedule and attendance system is a legitimate interest of the school administrator and its users
- **Consent** — where individuals are added to the system, this is done by the school administrator with the knowledge of the individuals concerned
---
## How Data is Stored
All data is stored using **Apple iCloud (CloudKit)**, Apple's secure cloud storage service. Data is encrypted in transit and at rest by Apple. The data is stored on Apple's servers, which may be located in data centres within or outside the United Kingdom.
For information on Apple's data handling practices, see Apple's Privacy Policy at [apple.com/legal/privacy](https://www.apple.com/legal/privacy/).
No data is stored on our own servers. We do not have direct access to Apple's infrastructure.
---
## Who We Share Data With
Your data is not sold, rented, or shared with third parties for commercial purposes.
Data is shared only in the following limited ways:
- **Between app users within your school** — when a school administrator shares the schedule, teachers and students at that school can view the relevant data in Register 79 and Student 79. This sharing is controlled entirely by the school administrator.
- **Apple** — as the provider of the iCloud infrastructure used to store and sync data.
---
## Data Retention
Data is retained for as long as the school administrator keeps it within the apps. The administrator can delete any teacher, student, lesson, or attendance record at any time. When data is deleted from the app it is removed from iCloud storage.
---
## Your Rights Under UK GDPR
If your personal data is stored in these apps, you have the following rights:
- **Right of access** — you can request a copy of the personal data held about you
- **Right to rectification** — you can request that inaccurate data is corrected
- **Right to erasure** — you can request that your data is deleted
- **Right to restrict processing** — you can request that we limit how your data is used
- **Right to data portability** — you can request your data in a structured, machine-readable format (attendance data can be exported as CSV)
- **Right to object** — you can object to processing based on legitimate interests
To exercise any of these rights, please contact Steven Duguid at **steve.duguid@btinternet.com**. We will respond within 30 days.
---
## Complaints
If you are unhappy with how your data has been handled, you have the right to lodge a complaint with the UK's data protection authority:
**Information Commissioner's Office (ICO)**
Website: [ico.org.uk](https://ico.org.uk)
Helpline: 0303 123 1113
---
## Changes to This Policy
If this privacy policy changes, the updated version will be published at this URL with a revised "Last updated" date. We recommend checking this page periodically.
---
## Contact
For any privacy-related questions or requests:
**Steven Duguid**
Email: steve.duguid@btinternet.com