Privacy and legal notice

Legal notice

Hazdret Zuka, Hofackerstrasse 18, 8953 Dietikon, Zvicër / Schweiz / Switzerland

Phone and WhatsApp: +41 79 592 75 12 · Email: info@dijaschool.com

Responsible for content: Hazdret Zuka.

Website dijaschool.com

The website sets no cookies, does not measure visitors and shows no ads. Fonts are served from our own server, not from Google.

The website is hosted by Hostinger. Like any server, it temporarily logs the IP address and time of a visit for technical security.

The contact form sends nothing itself: it opens WhatsApp or your email program with a prepared text. You decide whether to send it.

The Dija program and app: who is responsible

Dija is a program for schools. Data about students, parents and staff is entered by the school, and the school is responsible for it. Dija processes it only on the school's instructions (processing on behalf of the school).

For questions about your child's data, please contact the school first. We help the school to answer.

Which data is processed

Only what the school uses for its work:

• Student data: name, date of birth, class, address, admission documents, extra fields defined by the school.
• Parents: name, phone, email.
• Attendance, grades, behaviour, invoices and payments.
• Parental consents with signature and the signed wording.
• School bus: stop, boarding and drop-off. The bus location comes only from the driver's phone during a trip and is deleted after 7 days.
• Staff accounts and a change log (who changed what and when).
• After-school and meals: booked services, when the child arrived and who picked them up, people who may pick up the child. Allergies are recorded only if the school notes them; only staff and the kitchen list see them, never other parents.
• Kindergarten: the day report (meal, nap, how the day went, note), accessible only to authorised staff and the child's parents.
• The class timetable and homework, and messages from the school to the Dija team.
• Messages in Dija between parents, teachers, the office and the principal, with the time they were read. Only the people in the conversation see them.
• Notifications in the bell (deleted after 120 days), answers to invitations (coming or not coming), requests for certificates and parents' notices when someone else picks up the child.

Where the data is stored

The program uses Supabase. Database and files are stored in the Frankfurt data centre (Germany, EU). Each school is separated from the others; each role sees only what it needs.

The connection is always encrypted. A backup is made every night, plus an encrypted copy at a second provider in the EU.

If the school uses the AI options, documents and texts are processed by Claude on Amazon Web Services in Frankfurt (EU). They are not stored after the answer and not used to train models. For the monthly report only numbers are sent, no names.

The transport map comes from our own server (OpenStreetMap data, prepared with Protomaps). No external map service is used.

Emails from the program (account confirmation, reminders and replies from the team) are sent via Amazon SES in Frankfurt (EU).

Free trial

A school can try Dija free for 30 days, without obligation. The school registers itself or writes to us, and we activate it within one working day.

Before the trial ends, the management gets a reminder in the program and by email. Nothing closes automatically: the school decides whether to continue.

If the school does not continue, the trial data is deleted 30 days after the end, unless the school asks for an export. To continue, the contract and the data processing agreement are signed.

Camera, location and notifications in the app

The camera is used only when you photograph a document for the student file yourself. The photo is reduced in size and stored only in the school's protected storage.

Location is used only on the driver's phone during an active trip. Parents and students are not tracked.

Notifications (push) are sent only if you allow them on your phone, for example about the school bus or school announcements. They pass through the phone's notification service (Google on Android, Apple on iPhone), which only receives the title and short text of the notification.

The app contains no ads and shares no data with third parties for advertising.

Deleting your account and data

Staff accounts are created by the school; parents create their account themselves with the school's invitation. To have your account deleted, ask the school or write to info@dijaschool.com with your name and the name of the school. The account is deleted within 30 days; data the school must keep by law (for example registers) stays with the school.

When a school stops using Dija, we hand the data over to it and delete it as instructed.

Your rights

You have the right to access, correct and delete your data and to object to its processing. Write to us or contact the school.

You can also complain to the supervisory authority: in Albania the Commissioner for the Right to Information and Personal Data Protection (IDP), in Kosovo the Information and Privacy Agency (AIP), in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

Changes

When the program changes, we update this page. The date above shows the current version.