Privacy Policy

When you register or interact with AIMS, we collect the following categories of personal information:

• Student identity — full name (first, middle, last), sex, date of birth, and Learner Reference Number (LRN)
• Academic information — grade level, semester, track, cluster, strand, last school attended, and general average
• Contact information — permanent address, mobile number, student email address, and parent or guardian email address
• Parent or guardian information— father's and mother's full names and occupations
• Emergency contact — name and contact number of the person to notify in an emergency
• Religion — as declared by the student or guardian during registration
• Account credentials — email address and, where applicable, OAuth tokens issued by Google for sign-in purposes

We use the information we collect to:

• Process and manage student enrollment and registration
• Maintain accurate academic records including grade levels, tracks, and academic performance
• Communicate with students, parents, and guardians regarding enrollment status, school announcements, and academic concerns
• Generate reports and school-required documents (e.g., enrollment lists, class records, Excel exports for administrative use)
• Verify identity and authenticate access for students, teachers, and administrators
• Comply with requirements from DepEd and other regulatory bodies
• Contact the designated emergency contact when necessary

We do not sell, rent, or trade your personal information to third parties for commercial purposes.

SCCV collects and processes personal information in accordance with the Republic Act No. 10173 — the Data Privacy Act of 2012 of the Philippines — and its implementing rules and regulations. The legal bases for our processing include:

• Consent — you provide your information voluntarily when submitting the registration form
• Contractual necessity — we need certain information to enroll and serve you as a student
• Legal obligation — we are required by DepEd and other governing bodies to maintain student records
• Legitimate interest — to operate and improve AIMS and ensure the safety of our school community

Access to your personal data within AIMS is role-based:

• Students — can view and update their own registration information subject to school approval
• Teachers — can view student academic records relevant to their assigned classes
• Administrators and Super-Admins — can access, manage, and export student records for legitimate administrative purposes

All staff with access to student data are bound by confidentiality obligations. Access is granted only on a need-to-know basis.

We may share your personal information with the following parties only as necessary and in accordance with applicable law:

• DepEd and government agencies — when required by law or in connection with official reporting obligations
• Service providers — third-party technology providers that host or operate AIMS on our behalf (e.g., Supabase for database and authentication, Vercel for hosting), subject to data processing agreements
• Google — if you choose to sign in with Google, limited authentication data is exchanged via OAuth; we do not receive or store your Google password

We do not share your data with any other third parties without your explicit consent, except where required by law.

Student records are retained for the period required by DepEd regulations and SCCV's records management policy. In general:

• Active enrollment records are kept for the duration of the student's enrollment and for a reasonable period thereafter
• Academic records may be kept indefinitely as part of the official school archive, as required by law
• Incomplete or cancelled registrations may be deleted after 90 days of inactivity

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, disclosure, alteration, or destruction. These include:

• Encrypted data transmission (HTTPS / TLS)
• Row-level security policies enforced at the database level to ensure users can only access data they are authorized to see
• Role-based access controls for all system users
• Secure OAuth-based authentication via Google
• Regular review of access permissions

While we take reasonable steps to protect your data, no system is completely secure. In the event of a data breach, we will notify affected individuals and the National Privacy Commission (NPC) as required by law.

Under the Data Privacy Act of 2012, you have the following rights regarding your personal information:

• Right to be informed — to know how your data is collected and used
• Right to access — to request a copy of your personal data held by SCCV
• Right to correction — to have inaccurate or incomplete data corrected
• Right to erasure or blocking — to request deletion of your data where it is no longer necessary, subject to legal retention requirements
• Right to object — to object to processing in certain circumstances
• Right to data portability — to receive your data in a structured, commonly used format
• Right to lodge a complaint — to file a complaint with the National Privacy Commission (NPC) if you believe your rights have been violated

To exercise any of these rights, please contact our Data Privacy Officer using the details below.

AIMS uses browser-based storage (cookies and local storage) solely for functional purposes, including:

• Maintaining your authenticated session
• Remembering your theme preference (light or dark mode)

We do not use cookies for advertising or cross-site tracking.

AIMS is designed for use by enrolled students, which may include minors. Registration for minor students must be submitted by a parent or legal guardian who consents to the collection and use of the student's information as described in this policy. We do not knowingly collect information from children without parental consent.

We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated policy on this page with a revised effective date. Continued use of AIMS after changes are posted constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or wish to exercise your data privacy rights, please contact our Data Privacy Officer:

You may also file a complaint with the National Privacy Commission (NPC) at www.privacy.gov.ph.