Privacy and account controls

User Data Deletion Instructions

You can request permanent deletion of your Campus Shield AI account and associated personal data. Choose the method that matches your role. You do not need to sign in to use the public request page.

Teachers, students, parents or guardians, and drivers

In the app: open Settings → Account → Delete Account, review the deletion information, and submit the request. The request goes to your institution administrator for review because the institution manages your account and its educational, attendance, and safety records.

You may also ask your institution administrator directly. The administrator can disable or delete your managed account. If you cannot sign in or cannot reach the institution, use the public request method below.

Institution administrators

In the app: open Settings → Account → Delete Institution Account, re-enter your password, and confirm. This permanently deletes the institution workspace, every account it manages, and its associated data. The administrator’s sign-in is deleted last.

Public request method

Open the public Campus Shield AI account-deletion form. Enter your institution code, login ID, and a recovery email address or phone number. Do not enter your password. Campus Shield AI may contact you to verify ownership before acting, which prevents another person from deleting your account.

Open account-deletion form

Alternatively, email campus.shield29@gmail.com with the subject “Account deletion request”. Include your institution code and login ID, but never your password.

What is deleted

Individual account: the Firebase sign-in and personal record, including name, login ID, email, phone and WhatsApp details and consent flag, roll number, class and section, assigned classes, subjects and routes, parent–child links, uploaded files, notification tokens, and search indexes derived from that data.
Institution account: the institution workspace, managed user accounts, records, and uploaded files. A person who also belongs to another institution keeps that separate membership and sign-in.
Device copy: signing out and choosing “Forget this device” clears the app’s local account copy.

What may remain

After an individual account is deleted, a non-identifying marker may remain so historical records do not point to a missing entry. Attendance references are anonymised and may be retained for up to seven years for institution recordkeeping and legal or security claims. After an institution is deleted, a non-identifying deletion audit containing hashed identifiers and counts—but no names, institution codes, emails, or user IDs—may be kept for no longer than seven years as evidence that deletion occurred. Seven years is a maximum, not a requirement; a shorter applicable period takes precedence.

Deletion is permanent. The public form does not delete data immediately. Ownership may need to be verified first. Verified public requests are completed within 30 days, consistent with the existing Campus Shield AI account-deletion process.

More information

See the Privacy Policy for complete information about data use, retention, children’s data, and user rights.