Samval Central Privacy Policy
Effective as of September 10, 2026
1. Who we are
Samval Central is the school management platform (web and mobile application) developed by Fundación Samval, a nonprofit organization based in Colombia. For the purposes of Colombian data protection law (Law 1581 of 2012 and Decree 1377 of 2013), Fundación Samval is the data controller of the platform, and each educational institution using it acts as controller of its own community’s data.
Data protection contact: [email protected].
2. Where the data lives
Samval Central works with a deliberate, uncommon model: academic information is stored on a server that runs inside the school’s own infrastructure, not on Fundación Samval’s servers. The mobile application discovers that server inside the school’s local network and communicates with it directly. Fundación Samval does not receive copies of the schools’ databases.
3. What data the platform processes
Academic accounts are created and managed by each educational institution. Depending on the role (student, teacher, guardian, administration), the platform processes:
- Identification data: name, role, class or grade, login username.
- Academic data: curriculum planning, assigned and completed activities, achievements, assessments and attendance.
- Minimal technical data: session credentials (tokens) stored on the device to keep the session active.
The academic application does not request or process: geolocation, contacts, background camera or microphone access, financial data or biometric data.
4. What we don’t do
- We do not show advertising.
- We do not use third-party trackers or analytics in the application.
- We do not sell, rent or share personal data with third parties for commercial purposes.
5. Children
Samval Central is a school tool. Student accounts — including those of children under 13 — are created by the educational institution as part of its educational duties and with the authorizations the law requires schools to obtain from students and guardians. Children’s data is processed exclusively for educational purposes, under the purpose-limitation principle of Law 1581 of 2012, and is never used for advertising or commercial profiling.
6. Your rights
As a data subject (or a minor’s representative), you may access, update, correct and request deletion of your personal data, as well as revoke the authorization for its processing. The most direct channel is your school’s administration, which manages the accounts; you can also write to [email protected] and we will respond under the terms of Law 1581 of 2012.
7. Security
Access to the platform requires authentication, and sessions are managed with short-lived tokens. Mobile app communication happens inside the school’s local network. We work continuously to strengthen our technical and organizational protection measures.
8. Changes to this policy
Any change to this policy will be published on this page with an updated effective date. Substantial changes will be communicated to the schools using the platform.
9. Contact
Fundación Samval — Colombia Email: [email protected] · Support: [email protected] Foundation website: samval.org
School commercial account and contact
The public portal allows a commercial account separate from academic accounts. The general administration database stores the responsible person’s name and email, school and billing details, purchase requests and messages submitted through the contact form. These details are used to authenticate access, respond to requests and manage the commercial relationship. This database does not contain student academic records.
Passwords are stored as salted hashes. The portal uses an HttpOnly session cookie and temporary verification and recovery links sent by email. These forms do not request card numbers or banking credentials. For questions about commercial account data, email [email protected].