Privacy Notice

When you register or use this system, we ask for and store the following:

• School profile — School ID, complete school name, address, division, district, school category, and email. These are needed to match your records to the correct office.
• Account details — Your full name, username, password (hashed), position or role, and the school or office you belong to. This controls what screens you can open.
• SBM forms you fill out — Checklist answers, TA form narratives, TANA scores, priority rankings, and action plan items. These are the core outputs of the system.
• SGC status — Whether your School Governance Council is organized, functional, or not yet formed.
• Login records — Timestamps of when you signed in and which fiscal year you selected. We use this only for session management and basic audit trails.

The system uses your data only for SBM monitoring and technical assistance. Nothing else:

• Your login credentials are checked on every page load so you only see what your role allows.
• Checklist and TANA results are rolled up into division and region reports so supervisors can see where help is needed.
• TA forms and action plans are shared upward (school → district → division → region) so coaches and supervisors can follow up on flagged priorities.
• Login timestamps help us troubleshoot account issues and detect unusual access patterns.
• We do not use your data for advertising, marketing, or any commercial activity.

Access is locked to your level in the DepEd hierarchy. Nobody outside your chain can browse your records:

• School — You see only your own school's checklist, TA, TANA, and action plan.
• District — You see summary counts and school lists for your district only. You cannot open another district's data.
• Division — You see district summaries and the full school directory under your division.
• Region / Admin — You see division-level dashboards and region-wide completion reports.

We apply the same safeguards used in DepEd ICT systems:

• Passwords are hashed before storage. Plain-text passwords are never saved.
• Session tokens on the mobile app are encrypted and expire automatically.
• Every data request is checked against your role before any record is returned.
• The database is backed up regularly. If hardware fails, we can restore up to the last backup point.
• Server-side validation prevents users from editing records that do not belong to them.
• Access logs are kept so we can trace who changed or finalized a record.

Under the Data Privacy Act of 2012, you may:

• Update your school profile at any time through the system.
• Request correction of incorrect entries by contacting your district or division coordinator.
• Ask for a copy of your own records. The system can export most SBM forms to PDF.
• Request deactivation of your account if you are no longer assigned to the school or office.

We keep finalized SBM records for the current and previous fiscal years for compliance tracking. Older records may be archived.

If something about your data doesn't look right, or you want your account deactivated, reach out to:

Field Technical Assistance Division (FTAD)

You may also contact your Schools Division Office ICT coordinator or the regional ICT unit for faster response on account issues.