Data Privacy & Trust Assurance
Privacy Policy
This Privacy Policy explains how School ERP (referred to as "we", "our", or "the Platform") collects, protects, uses, and safeguards personal information of students, parents, guardians, teachers, and school administrators across our Web Portal and Mobile Applications.
Effective Date: January 1, 2026
•
Last Updated: September 2026
•
Jurisdiction: India (IT Act & DPDP 2023)
Encrypted & Secure
All sensitive school records, financials, and student data are protected with 256-bit encryption in transit and at rest.
Student & Child Safety
Zero third-party advertising or sale of data. Student records are only accessed by authorized guardians and school staff.
Institutional Control
Each educational institution retains full ownership and control over their student and staff directory data.
Compliant Standards
Fully compliant with India's Digital Personal Data Protection (DPDP) Act 2023 and App Store safety guidelines.
Scope of this Policy
This Privacy Policy applies to all services provided by the School ERP ecosystem, including:
- The School ERP Mobile Application distributed via the Indus Appstore and other authorized app marketplaces.
- The School ERP Web Portal and school administrative software accessible via licensed subdomains and portals.
- Parent, teacher, and student communication and digital notification channels.
Information We Collect
We collect only the information necessary to provide educational management, parent-teacher communication, attendance tracking, and school operations:
- Student Academic Information: Student full name, roll number, admission number, class/section, date of birth, attendance logs, exam grades, homework, and report cards.
- Parent / Guardian Information: Parent name, registered phone number, email address, emergency contact details, and fee payment histories.
- Staff & Faculty Information: Teacher name, staff ID, designated subject, attendance logs, and internal administrative communications.
- Financial & Fee Records: Tuition fee payment dates, installment amounts, transaction receipt numbers, and payment status (card/bank credentials are never stored on our servers; they are processed securely through RBI-licensed payment gateways).
- Device & App Diagnostics: Device model, operating system version, app version, network connectivity status, and crash logs to troubleshoot technical issues and optimize performance.
Device Permissions Required by the Mobile App
When using the School ERP mobile application, specific permissions may be requested for core app functionalities:
- Camera: Used exclusively when scanning QR codes for student attendance, uploading homework submissions, or capturing a student/staff ID profile photo. The camera is never accessed in the background.
- Storage / Media: Used to download and save offline copies of PDF report cards, fee receipts, assignment files, and academic schedules to your device.
- Notifications: Used to send push notifications regarding student absence, exam schedules, emergency school closures, homework assignments, and fee due reminders.
- Network & Internet Access: Required to securely connect to the school's cloud server and sync real-time academic records.
Important: You can manage or revoke these permissions at any time via your device's Android/iOS system settings.
How We Use and Process Information
Information gathered by School ERP is used strictly for legitimate educational and administrative purposes:
- To record, calculate, and present accurate student attendance and academic results.
- To facilitate transparent communication between parents, teachers, and school management.
- To generate official digital fee receipts and track institutional fee dues.
- To dispatch vital broadcast announcements, exam dates, circulars, and emergency school alerts.
- To provide technical support and ensure application stability and reliability.
No Data Monetization: We do NOT sell, lease, rent, or trade student, parent, or school data to third-party advertisers, data brokers, or marketing networks.
Children's Privacy (Under 18 Years)
Because School ERP is deployed in K-12 educational environments, safeguarding children's privacy is of paramount importance:
- Student profiles are created and administered exclusively by the school administration or verified parents/guardians.
- Students cannot make public profiles or share personal contact information publicly through the application.
- All personal identifiable information (PII) regarding minors is handled in accordance with India's Digital Personal Data Protection Act (DPDP Act, 2023) and international child data protection principles.
Data Security & Retention
We implement comprehensive technical and organizational security measures to protect school records:
- Encryption: All data transmitted between user devices and our servers is secured using modern TLS 1.3 encryption. Data at rest is encrypted using industry-standard AES-256 protocols.
- Tenant Isolation: Each school's database is logically isolated to prevent cross-school data access or leakage.
- Retention Policy: Educational records are retained for the duration authorized by the school administration or as required by state/national educational regulatory bodies. Schools may request complete archival or permanent deletion upon service conclusion.
User Rights & Access Controls
Parents, students, and staff have the following rights regarding their personal data:
- Right to Review: You may review the academic, attendance, and fee information stored in your account through the mobile app or school portal.
- Right to Rectification: If any information is inaccurate, you may contact your school's administrative office to update the master record.
- Right to Erasure / Account Deletion: Parents or staff who leave the institution may request account deactivation or deletion through their school administration or by contacting our support desk.