Privacy Policy

Your school is responsible for the records it keeps about you — student, parent and staff information, attendance, marks, fees and communications. The school decides what is collected and how it is used, and acts as the data fiduciary for that information.

Your Company Pvt Ltd operates EduOS and processes that information on the school's behalf, to provide the service the school has subscribed to. We do not use school records for our own purposes, and we do not sell personal data.

Depending on your role and what your school has enabled:

• Account details — name, email address, phone number, role, and the school you belong to.
• Student records — class and section, attendance, marks and report cards, homework, and links between students and their parents or guardians.
• Fees — invoices, payments and receipts. Card and bank details are handled by the payment provider (Razorpay) and are never stored by EduOS.
• Staff records — for staff, employment and attendance details, including biometric attendance punches where the school uses a terminal.
• Transport — where the school uses bus tracking, the live location of the school vehicle. The app does not track the location of your own phone.
• Messages — notices and alerts the school sends you by in-app notification, email, SMS or WhatsApp.
• Device information — a push-notification token, if you allow notifications, and crash diagnostics when an error occurs.

Students use EduOS through accounts created by their school, not by signing up themselves. Children cannot create an account on their own.

Under India's Digital Personal Data Protection Act, 2023, a child is anyone under 18. Schools are responsible for obtaining the consent of a parent or guardian before processing a child's data. EduOS does not show advertising, does not build profiles for marketing, and does not share children's data with third parties for their own use.

• To sign you in and show only the information your role at your school permits.
• To run the school's operations — attendance, fees, exams, timetables and communication.
• To send notifications you or your school have enabled, such as fee reminders and absence alerts.
• To keep the service secure, investigate errors, and meet legal obligations.

Each school's data is kept separate from every other school's. Within a school, access depends on role — a parent sees their own children, a teacher sees their classes, and school leadership sees what their role allows.

We use service providers to run EduOS, under contract and only for that purpose:

• Hosting and storage providers
• Messaging providers for email, SMS and WhatsApp (including Meta)
• Push notification services (Google Firebase, Apple)
• Payment processing (Razorpay)
• Error monitoring

We disclose information to authorities only where the law requires it.

Records are kept for as long as your school uses EduOS and as its policies and applicable law require. Push-notification tokens are removed when you sign out or the token stops working. Encrypted backups are retained for a limited period and then deleted.

• All connections use HTTPS.
• Each school's data is isolated at the database level.
• Passwords are stored as one-way hashes. Sensitive credentials and backups are encrypted.
• Access is limited by role and recorded in a tamper-evident audit log.

You can ask to:

• access the personal data held about you,
• correct information that is inaccurate,
• have your account and data deleted,
• withdraw consent where processing relies on it, and
• raise a grievance about how your data has been handled.

The quickest route is your school's office. To request deletion without signing in, use the account deletion form — it is sent directly to your school, which will verify your identity before acting.

Grievance Officer, Your Company Pvt Ltd
Email: [email protected]
Mumbai, India

If your concern is not resolved, you may approach the Data Protection Board of India once it is receiving complaints.

We will post any changes on this page and update the effective date above. If a change is significant, we will tell you in the app before it takes effect.