Acceptable Use Policy

Skooltym Access is licensed for one purpose: recording attendance and notifying parents. This policy sets the boundary, and forms part of the Terms of Service.

1Permitted use

A school may use Skooltym Access to enrol its own students, record their attendance at its own gates, notify their parents and guardians, and produce attendance reports and analytics for the school’s own administration and for the students’ parents.

2Prohibited use

A school must not, and must not permit any person to:

• Enrol any person who is not a student or staff member of that school, or enrol a child without recorded parental consent.
• Make biometric enrolment a condition of admission, attendance, examination, meals, transport or any other service, or fail to offer the non-biometric alternative.
• Use the system, or any data in it, for surveillance, discipline by surveillance, behaviour profiling, or any purpose other than attendance and notification.
• Use attendance or contact data for marketing, fundraising, political communication, or any purpose the parent was not told about.
• Disclose student or parent data to any third party without a lawful basis, including to other schools, employers, insurers or commercial parties.
• Attempt to extract, copy, reverse-engineer or export biometric templates, or use them in any other system.
• Share login credentials, use a colleague’s account, or leave an administrator session accessible to unauthorised staff.
• Interfere with the platform’s security, probe it, load-test it, scrape it, or attempt to access another school’s tenant.
• Use the system in a way that discriminates against a student on the basis of sex, disability, ethnicity, religion or any other protected characteristic — including by failing to accommodate a student whom the terminal cannot reliably read.
• Retain data beyond the retention periods the school has set and told parents about.

3Terminals

Gate terminals must be sited where they are supervised, must not be repositioned to capture areas beyond the point of entry, and must not be connected to any other recording or analytics system without our written agreement.

4Reporting

A school must report to us promptly any suspected compromise of credentials, any loss or theft of a terminal, and any incident that may have exposed student or parent data.

5Enforcement

We may investigate suspected breaches and may suspend access immediately where continued use would be unlawful, would endanger the platform, or would put students’ data at risk. Persistent or serious breach is a material breach of the Terms of Service and may result in termination without refund. Where a breach involves a child’s data, we may be required to report it.