Privacy Policy

Effective Date: September 17, 2025

Last Updated: October 28, 2026

This Privacy Policy describes how Durbin App handles personal information in connection with the mobile application made available to parents and legal guardians.

1. Overview

Durbin is a mobile application that allows parents or legal guardians to securely access and view their child's academic and school-related information.

The App retrieves and displays data from the official school information system.

For the purposes of data protection:

The School acts as the Data Controller.
The App developer operates as a Data Processor, processing data solely on behalf of the School.
Parents or guardians are authorized users of the system.

2. Information We Process

The App does not independently collect personal data for advertising, marketing, profiling, or analytics purposes. However, it processes certain information necessary to provide its functionality.

2.1 Account Credentials

The App processes login credentials (such as username and password) provided by the School to:

Authenticate authorized users
Securely grant access to student records

2.2 Student Academic Information

The App retrieves and displays student-related information from the School’s official database, which may include:

Grades and assessment results
Attendance records
Academic progress data
Class or schedule information

This information:

Is created and maintained by the School
Remains under the School’s control
Is accessed only by authenticated users

The App does not modify or independently distribute this information.

2.3 Optional Profile Photo

If enabled in future updates, users may voluntarily upload a profile photo.

Profile photos:

Are optional
Are used only for in-app identification
Are not used for advertising or analytics
Are not shared with third parties

3. Purpose of Processing

Personal data is processed solely for the following purposes:

User authentication
Secure access to student academic information
Maintaining proper operation of the App

The App does not use personal data of parents, guardians or students for:

Advertising
Behavioral tracking
Marketing
Selling data to third parties

4. Data Storage and Retention

Student data is stored within the School’s official database systems.

The App itself does not independently determine retention periods.

Data is retained by the School for as long as necessary under its educational and administrative policies.

Access through the App is automatically revoked when:

A user account is deactivated by the School
The student is no longer enrolled
The School removes access permissions

The App may temporarily cache session data locally on the device for technical functionality, but this data is not used for tracking or profiling.

5. Data Security

We implement appropriate technical and organizational security measures to protect personal data, including:

Encrypted data transmission using HTTPS (TLS)
Secure authentication mechanisms
Access restricted to authorized users only

The App does not include advertising SDKs, marketing trackers, or third-party analytics tools unless explicitly stated in future updates.

Users are responsible for maintaining the confidentiality of their login credentials.

6. Data Sharing

We do not sell, rent, or trade personal data.

Personal data is not shared with third parties except:

When required by law
When necessary for secure hosting or infrastructure services acting on behalf of the School

Any infrastructure providers act under contractual obligations to protect data.

7. Children's Privacy

The App is intended for use by parents or legal guardians.

It is not designed for direct use by children.

The App does not knowingly collect personal data directly from children.

Student information is accessed only by authorized parents through School-issued credentials.

8. User Rights

As the School acts as the Data Controller:

Requests to access, correct, or delete student data must be directed to the School administration.
The School determines how such requests are handled in accordance with applicable law.

For questions regarding account access, please contact your School directly.

9. International Data Transfers

If applicable, data may be processed on secure servers located in Uzbekistan. Appropriate safeguards are implemented to protect such data.

10. Facebook and Instagram Integration (School Staff)

This section applies to the Durbin web platform used by school staff, not to the parent mobile app.

A school administrator may choose to connect the school's own Facebook ad account, Facebook Page and Instagram professional account to the Marketing section of Durbin. Nothing is connected unless an administrator signs in with Facebook or Instagram and grants access. Durbin uses Meta's official APIs (Facebook Login for Business, the Marketing API and the Instagram API).

10.1 Information We Receive from Meta

When an account is connected, Durbin receives and stores:

Access tokens issued by Meta, stored encrypted
IDs and names of the connected ad accounts, Facebook Page and Instagram account
Ad campaign, ad set and ad settings (name, objective, status, budget, schedule) and their performance statistics (spend, reach, impressions, clicks, leads)
Instagram profile information (username, follower and post counts), post and story statistics, and aggregated audience statistics (age range, gender, city, active hours) that do not identify individual people
Instagram Direct conversations with the school's account: the other person's Instagram user ID, username and name, and the message text and time

10.2 How We Use It

This information is used only to:

Show marketing statistics to authorized staff of the same school
Pause, start or create the school's ad campaigns when a staff member asks to (new campaigns are created paused and spend nothing until started)
Show Instagram Direct messages to the school's staff and let them reply
Compare ad results with the leads recorded in the school's own CRM

We do not sell this information, share it with other schools or third parties, or use it for our own advertising.

10.3 Storage and Access

This information is stored on our servers together with the school's other data and is visible only to staff of that school who have marketing permissions. Access tokens are never shown in the interface.

10.4 Disconnecting and Deleting Data

Disconnecting: an administrator can disconnect Facebook or Instagram at any time in Marketing → Facebook Ads or Instagram → "Disconnect". The stored access tokens are deleted and data stops syncing. Access can also be removed from Facebook or Instagram settings ("Business Integrations" / "Apps and Websites").
Removal on Meta's side: when access to Durbin is removed in Instagram, Meta notifies Durbin and the connected account record and its Instagram Direct conversations and messages are deleted. When access is removed in Facebook, the stored token stops working and no further data is received.
Deletion requests: when a deletion request is sent through Facebook or Instagram, Durbin deletes the connected account record and the Instagram Direct conversations and messages linked to that user, and returns a confirmation code with a status page.
Deletion can also be requested by email at durbincrm@gmail.com. Previously synced statistics are deleted on request within 30 days.

11. Changes to This Policy

We may update this Privacy Policy periodically.

Any updates will be published on this page with a revised “Last Updated” date.

12. Contact Information

For questions about this Privacy Policy or the technical operation of the App, please contact:

Developer/Company Name: Durbin

Email: durbincrm@gmail.com

Address: Tinchlik street, 6

Province: Xorazm

City: Urgench

For questions related to student records, corrections, or data deletion requests, please contact:

School Name: "Data talim stansiyasi" MCHJ

School Contact Email: dataunionuz@gmail.com

Address: Oyoqbog' MFY, Xiva street. 2/2

Province: Xorazm

City: Urgench