What changed, and when

Classfold recorded four kinds of institute. It now records eight: school, college or university, coaching institute, arts academy, play school or preschool, special-needs school, private tutor or small batch, and other.

The type is no longer only a label.

• Vocabulary follows the type. An arts academy sees Level, Batch, Discipline, Instructor and Director where a school sees Class, Section, Subject, Teacher and Principal. A play school sees Child, Group, Activity, Session and Observation. A coaching institute sees Batch. The terms come from one table on the server and are used by the console, the exports and both mobile apps, so one thing has one name everywhere.
• Any term can be overridden per institute. If your academy says Grade rather than Level, set it once.
• The starting module set comes from the type. A play school opens without exams, library or hostel; an arts academy keeps inventory for instruments and costumes but drops transport and hostel. An administrator can change the set at any time.
• The type is never a permission. It decides what the console shows and what it calls things. Who may view, create, edit, delete or export is still the staff permission map, and the server authorises every request against it.

Existing institutes keep the type they already had and see no change in vocabulary unless an administrator switches it.

Until now the Android and iOS apps supported students and teachers, and every other staff role landed on a screen telling them to use the web console. Two of those roles no longer do.

Accountants open a money workspace: collections, the day's receipts, student balances and defaulter lists, with search by student.

Academic coordinators open an academic workspace: classes, exam schedules and results progress, with the same student search.

Two things hold for both:

• Screens follow the permission set the server returns for the signed-in user, so a coordinator without the results module does not see results. The backend authorises every call again regardless of what the app displays.
• Every other web-only role still lands on the web-console screen. This is two roles, not all of them.

App changes reach a phone with the next store update.

Two-step sign-in. Any staff account can now add a six-digit authenticator code to its password. Setup is in Profile → Security: scan a QR code with Google Authenticator, Microsoft Authenticator, Authy or 1Password, then confirm with a code from the app — the setup only completes once a code verifies, so a mis-scan cannot lock anyone out.

• Recovery codes are issued at the end of setup. Each signs the account in once without the phone, and rotating the set invalidates every earlier code.
• The account holder is emailed when two-step sign-in is enabled, disabled or when the recovery codes are replaced, so a change is never silent.
• An administrator can disable it for an account whose phone and codes are both gone.

Start with the accountant: that login reaches every fee record in the institute.

Account security in the apps. The Android and iOS apps now let a signed-in person change their own password and sign out of every device at once, instead of needing the web console for both.

School-branded legal pages. Privacy policy, terms of service and security pages now render on each institute's own site, under that institute's name and branding, rather than pointing families at a Classfold-branded page. The content is generated from one reviewed source, so an update reaches every institute at once instead of drifting per site.

Account deletion requests. /delete-user is a page a signed-in person reaches directly to request deletion of their account and the data held against it. The request is recorded with who made it and when, so the institute has an auditable record of the ask and of what was done about it.

Both exist because an app store and a data-protection regime ask the same two questions — where is your privacy policy, and how does a person delete their account — and a link to someone else's page is not an answer to either.