Chora collects only the information required to deliver the service: user identity, contact details, and school-related records.

Personal data is never sold or shared with third parties for advertising.

Parents may request a copy or deletion of their data at any time by contacting support.

By using Chora, you agree to provide accurate information and to keep your account credentials confidential.

Schools are responsible for the accuracy of the data they upload.

Chora reserves the right to suspend accounts that violate these terms or applicable law.

Chora uses a single session cookie to keep administrators signed in. No advertising cookies are set.

The public website uses no tracking cookies.

All traffic is encrypted in transit with TLS. Passwords and PINs are hashed with bcrypt.

Administrative access requires OTP verification in addition to credentials.

Suspicious activity is logged and rate-limited.

Data is stored on servers within the region and backed up daily.

Access is restricted to verified school staff and the platform operators.

Personal data is retained only as long as the account is active, or as required by law.