Last updated: 26 October 2026
This policy explains what personal information Grosvenor Academy ("the school", "we") collects through the Grosvenor Academy app for Android, the web portal at app.grosvenoracademy.co.za and this website, why we collect it, who can see it and how long we keep it. We follow South Africa's Protection of Personal Information Act (POPIA).
Who we are
Grosvenor Academy, 8 Curzon Rd, Bryanston, Sandton, 2191, South Africa. Information Officer: Uresha Sahadev, uresha@grosvenoracademy.co.za, 083 327 8920.
Who can use the app
The app and portal are for the school's parents and guardians, teachers and staff, and learners whose parent or teacher has set up a student login for them. Learners do not create their own accounts; a parent or teacher sets up and looks after a learner's login.
What we collect
- Account details: name, username, email address, mobile number and password (stored only as a secure hash).
- Your child and school records: your child's name, grade and class, the student code that links you, attendance, homework, permission slip answers, invoices and payments, and study material they open or bookmark.
- Messages and files: messages between parents, learners and teachers, and photos or PDFs you attach. Messages and attachments are encrypted when stored.
- Class photos: photos teachers post of class activities. A learner appears only if their parent gave photo consent on the registration form, and the school approves posts before parents see them.
- Collection: people you allow to collect your child (name, relationship, number and an optional photo), the transport provider you choose, and who collected your child each day. Photos are encrypted when stored.
- Student help: requests to talk to a teacher or counsellor and bullying reports a learner sends. These are encrypted and only seen by the staff member chosen and the school's safeguarding lead.
- School shop: orders you place, their items, invoices and payments.
- Device information: a notification token for your phone and a random id the app creates for it (so we can send notifications to each phone you use), your phone's make and model (so the school can tell your phones apart if you need help), the app version and, if the app has a problem, a technical error report (the error, the screen, the app version and your account id). We do not collect your location, contacts or browsing history, and there is no advertising or tracking in the app.
- Files kept on your phone: study files you choose to keep for offline use, and reminders, are stored on your phone only; they are removed when you sign out.
Why we use it
Only to run the school's communication with families: to sign you in, show you information about your own child and their class, deliver messages and notices, send notifications you have switched on, record attendance, collection and shop orders, keep learners safe, and fix problems with the app. We do not sell your information or use it for advertising.
Who can see it
- You see your own account and your linked children only.
- Teachers see the learners in the classes they teach, and their parents' names. They do not see ID numbers, medical details or addresses.
- The school office manages accounts, classes and records. Sensitive actions (opening collection photos, exports, safeguarding reports) are logged.
- Service providers: our hosting provider (Webox, South Africa) stores the data; Google Firebase Cloud Messaging delivers notifications to Android phones (it receives the notification token and the short notification text, which never names a child). We do not share your information with anyone else unless the law requires it.
Notifications
The app can send notifications for messages, notices, homework, attendance, fees, forms, class photos, collection and the school shop. You choose which ones you get in Profile. Emergency alerts from the school always come through. Non-urgent notifications wait during quiet hours (19:00 to 07:00).
How we protect it
All connections use HTTPS. Passwords are hashed. Messages, attachments, collection photos, transport documents and student help requests are encrypted when stored. Access is limited by role, and staff actions on sensitive information are logged.
How long we keep it
We keep school records while your child is at the school and for as long as the law requires afterwards. Technical error reports are deleted after 90 days. When you close your account, it is removed after 30 days (the school can restore it within that time if it was closed by mistake); school records the law requires us to keep, such as invoices, are kept separately.
Deleting your account and your rights
You can close your account at any time: in the app, open Profile and tap Close account; in the web portal, open My account. You can also email uresha@grosvenoracademy.co.za to ask us to delete your account and data. Under POPIA you may ask to see the information we hold about you, ask us to correct it, or object to how we use it, by contacting the Information Officer above. If you are not satisfied, you may complain to the Information Regulator of South Africa (inforegulator.org.za).
Children
Learner logins are created and managed by a parent or teacher. Learners can see their own class's homework, notices, calendar, photos and study material, message their teachers and ask for help; they cannot see fees, forms or attendance.
Changes
We will update this page if the way we handle information changes, and show the date at the top. For questions, contact us.
Grosvenor Academy