Privacy policy

Who we are

edaya is a school tracking app published by Maya Investissement Group Inc.

If you have any questions about this policy, email us at infos@maya-invest.ca.

Our role regarding school data

edaya is provided to schools. For student, family and staff data entered in the app, the school is the data controller and edaya acts as a processor, on the school’s instructions.

Data is only used to provide the service to the school and is never sold.

Data we process

• Account: name, email address, role (parent, teacher, staff).
• School life: messages, homework, grades and report cards, attendance and activities, depending on how the school uses edaya.
• Financial information: school fees invoiced, payments recorded and due dates, entered by the school and shown for viewing only.
• Technical data: device type, connection logs and security data.
• Site preferences: language and theme (light or dark), stored locally in your browser.

Purposes

• Provide and secure the school tracking service.
• Enable communication between the school and families.
• Send useful notifications (new message, absence, grade).
• Keep families informed about the school fees invoiced by the school and how they stand.
• Provide support and improve the app.

School fees and payments

Where the school uses this feature, edaya shows families the school fees invoiced, the payments already recorded and the upcoming due dates. These amounts are entered and kept up to date by the school, which is responsible for them.

No payment is made in edaya. The app never asks for a card number or bank details, and processes no transaction. Payments are made directly to the school, through the means it offers.

This information is only used to keep the family informed about their file. It is not used for advertising, is not subject to profiling, and is never sold.

Sharing and subprocessors

We rely on technical providers for hosting, the database, notification delivery and file storage. They only access data to provide their service, under contract, and are not allowed to use it for any other purpose.

Our current subprocessors are:

• Cloudflare, Inc. (United States): website and application hosting, file storage.
• Neon, Inc. (United States): database hosting.
• Novu (Novu Labs, Inc.): notification delivery.
• Google LLC (Firebase): infrastructure services for the mobile apps, including push notification delivery.

Retention

School data is kept for the duration of the contractual relationship with the school, then deleted or anonymized according to the school’s instructions and applicable legal obligations. As a guide:

• User account: for the duration of the relationship with the school, then deleted within 12 months after the end of the contract.
• School life data (messages, homework, grades, attendance, fees): for the duration of the student’s enrolment, then according to the archiving periods required by applicable laws.
• Technical and security logs: 12 months maximum.
• Contact or demo requests: 24 months maximum after the last exchange, unless a business relationship follows.

Security

We use technical and organizational measures to protect data: encryption in transit, isolation per school, and access control by roles and permissions.

Your rights

In accordance with applicable laws (including PIPEDA and, in Quebec, Law 25), you may request access, correction, deletion or portability of your personal information.

For data entered by a school, please contact that school, or email us at infos@maya-invest.ca and we will guide you.

Children’s data

edaya is used in schools and therefore processes information about students who are minors. This data is entered by the school, which is responsible for it and for obtaining the necessary permissions from parents or guardians.

edaya does not offer open sign-up: accounts are created by the school, by invitation. We never collect information directly from a child.

The information processed is limited to what is needed for school tracking. No advertising is shown in the app, no profiling is carried out for commercial purposes, and no data is sold or shared with third parties for such purposes.

A parent or guardian who wishes to view, correct or delete their child’s information can contact the school, or email us at infos@maya-invest.ca and we will guide them.

Deleting your account and data

You can request the deletion of your account and the associated information by emailing infos@maya-invest.ca.

Requests are processed within a maximum of 90 days from the date they are received.

For school data entered by a school, the request is passed on to that school, which is responsible for it and decides how to proceed.

Some information may be kept beyond that period where the law requires it, in particular for archiving or accounting obligations.

Cookies and tracking

The edaya marketing site uses no advertising cookies or tracking tools. Only your language and theme preferences are stored locally in your browser.

International transfers

Some of our subprocessors are established in the United States. Your data may therefore be hosted or processed outside your country of residence.

Where this happens, we put appropriate contractual safeguards in place with each provider, including confidentiality and security obligations.

Changes

This policy may be updated. The last updated date is shown at the top of this page.

Contact us

The controller for personal information is Maya Investissement Group Inc., publisher of edaya.

Address: 2237 Esprit Drive, Orléans (Ontario) K4A 4Z4, Canada.

Email: infos@maya-invest.ca

Any request regarding your personal information can be sent to the contact details above.