Who is responsible for your data
Kampus is used by school owners and admins, office staff, teachers, parents and guardians, and students.
Most of what Kampus holds is entered by a school: its students, their guardians, staff, attendance, results and fees. The school decides what to record and who can see it, and is responsible for that information. Atomicle Labs stores and processes it on the school's behalf, only to run Kampus for that school.
For your own Kampus login, and for a school owner's account, Atomicle Labs is responsible.
What Kampus stores
Your account:
Your name, email address and, for a school owner, a Bangladeshi mobile number.
Your password, stored only as a secure hash. We can't read it.
Sign-in sessions: a session token, the time, and the IP address and browser or app the session came from.
School records, as the school enters them:
Students: name, student ID, class, section and roll, gender, date of birth, fee discounts, an email address if the student has a login, and profile photos.
Guardians: names, relationship to the student, mobile numbers and email addresses.
Teachers and staff: names, contact details, roles, the classes and subjects they teach, and profile photos.
Attendance and roll calls, exam marks, results and report cards, class routines and substitutions.
Fees, dues, payments and receipts, and the school's accounts (expenses, cash handovers and their attachments).
Notes from guardians to the class teacher, with any photo or file attached.
Messages the school sends, and whether each one reached each person in the app, by SMS or by email.
Books and question papers the school uploads or makes, and photos of admission forms it imports.
The school's website: its pages, photos, logo and, if it has one, its own domain name.
How it is used
Only to provide Kampus: to sign you in, show each person what their role at the school allows, send the school's messages and receipts, print report cards and receipts, and keep the service secure and working.
Inside a school, people see only what their role opens. Guardians see only the children linked to them, teachers see the classes they teach, and staff see the parts of the console the school gives them.
Kampus shows no ads, does not sell or rent data, and does not use your data to build profiles or for marketing. The app contains no advertising or third-party analytics or tracking tools.
AI features
Some features use AI models, and only when someone at the school uses them:
The Kampus Assistant and the Question maker send the request and the school data needed to answer it (for example a class list, a student's dues or a book's pages) to Cloudflare Workers AI.
Reading admission forms and cleaning up profile photos send the form photo or the profile photo to Google Gemini through OpenRouter.
The assistant never changes anything by itself: it drafts a change, and a person at the school confirms it. We don't use school data to train AI models.
Who we share it with
Only with the service providers that run Kampus for us, for that purpose:
Cloudflare hosts the app and stores the data (Workers, the D1 database and R2 file storage) and sends Kampus emails.
Cloudflare Workers AI, and Google Gemini through OpenRouter, for the AI features above.
An SMS provider, when a school sends text messages: the phone number and the text.
We may also disclose data if the law requires it. Data is never shared with other schools.
Security
Everything travels over HTTPS, encrypted in transit. Access to a school's data needs a signed-in account with a role at that school, and every request is checked against it. Passwords are hashed, and signing out of everywhere or a password reset ends other sessions.
How long it is kept
School records are kept while the school uses Kampus, so it can see past years. When a school stops using Kampus, or asks us to, we delete its data. Your account is kept until you ask us to delete it. Deleted data leaves our backups within 30 days.
See Delete your account for how to ask, and what a school may keep for its own accounts.
Children
Students' information is entered by their school, not collected from the child. A student signs in only with a login set up through the school, and a guardian sees only their own children. Guardians and students can ask the school to correct or remove a record, or write to us.
Your choices
You can ask to see, correct or delete the data about you. For school records, the school office can make most changes; for anything else, email us. The app asks for access to your photos only when you choose a photo to attach or upload.
Changes
If this policy changes, we'll update this page and the date at the top.
Questions?
Write to atomiclegames@gmail.com and a person at Atomicle Labs will reply.