Privacy Policy

1. Introduction

EduNest provides a school management software platform used by schools to manage day-to-day operations, including student records, attendance, fees, academics, homework, timetables, and communication. This Privacy Policy explains what information we process, how we use it, how we protect it, and the rights available to schools, parents, and students.

Because EduNest is used to process information about children, we treat that information with particular care. For questions, contact hello@edunest.online.

2. Who This Policy Is For

This policy applies to schools, parents or guardians, students, staff, and administrators who use EduNest.

• Schools subscribe to and control the use of EduNest. In data-protection terms, the school is the Data Fiduciary.
• EduNest acts as the Data Processor, processing school data only to provide the service and only on the school's instructions.
• Parents, guardians, and students access only the information the school makes available through the service.

The school is responsible for obtaining any consents required from parents, guardians, students, or staff before entering personal data into EduNest. EduNest supports the school but does not replace the school's legal responsibilities.

3. Information We Process

We process only the information needed to provide and secure the service. This may include:

• student information such as name, admission number, roll number, date of birth, gender, class, section, photograph if uploaded, address, attendance, marks, homework, timetable, fee records, and health information such as blood group if the school records it;
• parent and guardian information such as name, relationship, phone number, and email address;
• staff and administrator information such as name, email, phone, role, and login information;
• technical information such as IP address, browser, device information, and logs needed to operate and secure the service;
• payment-related information processed through payment providers. EduNest does not store full card numbers, UPI PINs, or bank credentials.

4. Children's Data

• We process children's data only to provide EduNest to the school, on the school's instructions.
• We do not use children's data for advertising.
• We do not track, profile, or monitor children for advertising or unrelated commercial purposes.
• We do not sell children's data or any other personal data.
• The school is responsible for obtaining verifiable parental consent where required by law.

Our approach is intended to align with India's Digital Personal Data Protection Act, 2023. As rules and guidance continue to evolve, we will update this policy and our practices where needed.

5. How We Use Information

• to provide, operate, maintain, and secure EduNest;
• to let schools manage students, attendance, academics, fees, homework, timetables, and communication;
• to send operational notifications configured by the school, such as attendance alerts, homework alerts, leave updates, fee reminders, and result updates;
• to process subscription and fee payments;
• to provide support and troubleshoot issues;
• to maintain security, integrity, reliability, and audit logs;
• to comply with applicable law.

6. How We Share Information

• with the school that owns the data and the users authorised by that school;
• with service providers who help us run EduNest, under arrangements requiring them to protect the data;
• when required by law, such as a valid legal order from a competent authority.

We do not sell personal data or share it for advertising.

7. Where Data Is Stored

EduNest is designed to host school data in India, currently using Supabase infrastructure in the Mumbai / ap-south-1 region. Some providers may process limited operational data, such as email or messaging logs, outside India where needed to provide their service. Where that happens, we take steps to keep the data protected.

8. Data Security

• HTTPS/TLS encryption in transit;
• role-based access for school admins, teachers, parents, and students;
• database-level school isolation so one school cannot access another school's data;
• parent and student access limited to linked student records;
• restricted administrative access;
• audit logs for important operational activity;
• backup practices designed for recovery from operational failure.

More detail is available on our Data Protection & Security page.

9. Data Retention

We retain a school's data while the school has an active subscription and for a reasonable period afterward for reactivation, dispute resolution, audit, support, and legal compliance. A school may request export or deletion at any time. When retention is no longer needed, data is deleted or irreversibly anonymised, subject to legal requirements.

10. Access, Export, Correction, and Deletion

A registered school administrator may request CSV export or deletion of school data by emailing hello@edunest.online from the registered school administrator email address. We verify the request before processing it.

Parents and students should generally ask their school to access, correct, or delete student data because the school is the Data Fiduciary. Parents or students may also contact EduNest, and we will coordinate with the relevant school before taking action.

Deletion is permanent and cannot be undone, subject to any records EduNest or the school is legally required to retain.

11. Cookies

EduNest uses cookies and similar technologies needed to keep users signed in and to operate securely. We do not use advertising cookies or third-party advertising trackers.

12. Grievance and Contact

For privacy questions, support, export requests, deletion requests, or grievances, contact hello@edunest.online.

We will acknowledge and address grievances within the timelines required by applicable law.

13. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify schools through the service or by email and update the last updated date above.