BulletinSchool report cards

Privacy Policy

Last updated: July 18, 2026

Overview

Bulletin is a school management platform used by schools to record student information, academic marks, report cards, and fee payments. This policy explains what data the app and web platform collect, how it is used, and who it is shared with.

Bulletin is provided to schools as a tool. The school that creates an account and enters student, staff, and family data is the one responsible for that data and for having the right to collect it. Bulletin stores and processes that data on the school's behalf, to make the platform work.

Who uses Bulletin

Accounts exist for school administrators, teachers/lecturers, and, where a school enables it, students and parents/guardians. Some student accounts belong to children. Student and parent accounts are created and managed by the school, not signed up independently, so the school is responsible for any parental consent required under its local rules before creating an account for a student.

Information we collect

Account information — name, email address, password (stored encrypted, never in plain text), role (e.g. admin, teacher, student, parent), and the school the account belongs to.

Student information — full name, student/matricule ID, class or programme, gender, date of birth, place of birth, enrollment status, and guardian name/phone/email where provided by the school.

Academic records — subject marks, grades, class positions, teacher remarks, AI-generated remarks (see below), pass/fail decisions, and report card/transcript documents.

Fee and payment records — installment amounts, payment dates, and notes tied to a student's fee ledger. Bulletin records that a payment was made; it does not process card or mobile-money transactions itself.

School information — school name, contact details, logo, and official stamp images used on printed documents.

Technical information — a login session token stored on your device to keep you signed in, and standard server logs (such as IP address and request timestamps) used for security and troubleshooting.

AI-generated remarks

If a school enables AI-assisted remarks, a student's name and term average are sent to a third-party AI provider (Google's Gemini API) to generate a short written comment. No other student data — marks per subject, guardian details, fee records, or birth details — is sent as part of this feature. Staff can review and edit any AI-generated remark before it is published.

How we use this information

  • To operate the platform: authenticate accounts, generate report cards and transcripts, and track fee payments.
  • To let schools communicate academic results to students and guardians.
  • To maintain security, prevent abuse, and troubleshoot technical issues.

We do not sell any data, and we do not use it for advertising. Bulletin has no ads and no third-party analytics or tracking SDKs.

Who we share data with

Data is only shared with the infrastructure providers that host and run Bulletin, strictly to operate the service:

  • Neon — database hosting.
  • Railway — API server hosting.
  • Vercel — web application hosting.
  • Google (Gemini API) — only when a school enables AI remarks, and only the student's name and average as described above.

These providers process data on our behalf under their own security and confidentiality terms. We do not share data with advertisers or data brokers.

Data retention and deletion

Data is retained for as long as the school's account is active, so that historical academic records remain available. A school administrator can deactivate or remove a student or staff record at any time. To request deletion of a specific account or dataset, contact us at the email below — we will act on the request or route it to the responsible school if the school controls that data.

Data security

Passwords are stored using industry-standard one-way hashing (bcrypt) and are never visible to Bulletin staff. Access to student and academic data is restricted by role — for example, a subject teacher can only see the classes and subjects assigned to them.

Children's data

Some users of Bulletin are school-age children. Student accounts are created and managed by schools, not by children signing up on their own, and Bulletin does not knowingly collect data directly from children outside of that school-managed context. Parents or guardians with questions about a specific student's data should contact their school, or reach us directly at the email below.

Changes to this policy

If this policy changes, the "Last updated" date at the top of this page will change accordingly. Continued use of Bulletin after an update means you accept the revised policy.

Contact us

For any question about this policy or your data, contact bulletin996@gmail.com.