Privacy Policy

Rena Softtech Private Limited is committed to protecting the privacy and security of all users of the AapliShala school management system. This Privacy Policy explains how we collect, use, store, and protect personal information of users who access our services through the AapliShala mobile application and web portal.

AapliShala is designed exclusively for parents, guardians, teachers, and school administrators while maintaining the highest standards of data protection and privacy. The app is not intended for children or minors and should only be accessed by authorized adults.

Services Provided by AapliShala

AapliShala offers comprehensive school management services including location-based attendance management, real-time curriculum updates, academic performance tracking, homework assignment distribution, fee management, timetable management, and school announcements. Administrative tools include session management, comprehensive dashboards, attendance reporting, exam scheduling, user management with role-based access, and analytics. Communication features enable real-time updates between teachers and parents, targeted announcements, and calendar integration.

Information We Collect

To provide a fully functional and secure system, AapliShala collects various types of data including personal information (names, email addresses, phone numbers, user credentials), academic data (student records, grades, attendance, homework, exam schedules), location data (GPS for teacher attendance verification), financial information (fee payments, transaction history), and usage data (device information, app usage patterns, session logs).

• Personal Information: Names, email addresses, phone numbers, user credentials
• Academic Data: Records, grades, attendance, homework, exam schedules
• Location Data: GPS verification for teacher attendance
• Financial Data: Fee payments, transaction history
• Usage Data: Device info, app usage, session logs

We prioritize accuracy and transparency in handling all user information and collect only data necessary for service functionality.

How We Use Collected Information

The data collected is used exclusively for managing school operations, facilitating attendance tracking, enabling curriculum updates and academic progress monitoring, processing fee payments, coordinating exam schedules, and enabling communication between teachers, parents, and administrators. We also use data for system enhancement, generating analytics, ensuring security, providing customer support, and complying with applicable laws and regulations.

• Managing school operations
• Attendance tracking
• Curriculum and academic monitoring
• Fee processing and reporting
• Exam coordination and scheduling
• Teacher-parent communication
• System enhancement and analytics
• Customer support
• Legal and regulatory compliance

We strictly limit data usage to these purposes and do not process personal information beyond what is necessary for service delivery.

Data Storage and Security

AapliShala implements comprehensive security measures including end-to-end encryption for all data transmission, secure authentication with role-based access controls, regular security audits, secure cloud storage with industry-standard protection, and multi-factor authentication for administrative access.

Data retention periods are: academic records for student enrollment duration plus 7 years, financial records as required by regulations, user account data while active plus 2 years, and usage logs for 12 months. Access controls include role-based permissions, regular access reviews, and audit trails for all data access and modifications.

• End-to-end encryption
• Secure authentication with role-based access
• Cloud storage with industry-standard protection
• Multi-factor authentication
• Data retention as per policy and law
• Audit trails for access and modification

Information Sharing and Disclosure

AapliShala does not sell, rent, or share personal data for marketing purposes. Data may be shared with school administrators and teachers for educational purposes, with parents regarding their child’s academic progress, with authorized service providers under strict confidentiality agreements, and with payment processors for transactions.

We may also share data to comply with legal requirements, protect user rights and safety, and in case of business restructuring. Third-party service providers include cloud hosting, payment processing, and analytics services (anonymized data only). All partners maintain the same level of data protection and are bound by confidentiality agreements.

We do not sell or share personal data for marketing. Data may be shared with:

• School administrators and teachers
• Parents for student progress
• Authorized service providers
• Payment processors
• Legal authorities when required

User Rights and Data Control

Users have comprehensive rights regarding their personal data including access and portability (request access to all personal data, download data in structured format), data correction and updates (update personal information, request correction of inaccurate data), data deletion (request deletion subject to legal requirements, deactivate accounts), and restriction and objection (restrict certain processing, object to specific purposes, opt out of non-essential communications).

• Access, download, and portability of data
• Correction and updates
• Account deactivation and data deletion
• Restrict/opt-out of non-essential data processing

To exercise these rights, users can contact our support team or use in-app data management tools.

Location Data and Privacy

Teacher location tracking is collected only when marking attendance within school premises for GPS verification within designated school radius. Location data is not tracked outside of attendance activities, and historical location data is not stored beyond verification. AapliShala does not track student location in real-time, and student attendance is marked digitally by teachers without location tracking.

Data Security Measures

We implement advanced security practices including SSL/TLS encryption for all data transmission, advanced firewall protection, regular security patches, secure backup procedures, employee training on data privacy, background checks for personnel with data access, secure data centers with restricted access, and environmental controls.

• SSL/TLS encryption
• Advanced firewalls and security patches
• Backups, staff training, and secure data centers

While we implement extensive security measures, users are encouraged to maintain secure passwords and follow cybersecurity best practices.

Verification Process

To ensure privacy and security, user identity is verified before processing data-related requests. Requests must be submitted from registered accounts, additional identification may be required for sensitive requests, school administration may need to verify student data requests, and two-factor authentication may be required for account changes.

• Requests must come from registered accounts
• Valid ID may be required
• School verification for student data
• Two-factor authentication for changes

Marketing and Communications

AapliShala does not sell user data for marketing purposes and collects only information necessary for service functionality. Marketing communications are subject to explicit user consent. Users can opt out of non-essential communications at any time, though service-related communications cannot be disabled.

Data Retention Policy

Personal data is retained only as long as necessary to provide ongoing educational services, maintain academic records, support parent-teacher communication, meet regulatory requirements, comply with financial obligations, and resolve disputes. Once data is no longer needed, it is securely deleted following industry best practices and regulatory requirements.

• Academic data: enrollment + 7 years
• Financial data: as required by law
• User accounts: active + 2 years
• Usage logs: 12 months

External Links and Third-Party Services

Our platform may contain links to external websites or integrate with third-party services. AapliShala does not control external sites, and users should review privacy policies of linked sites. Integration services include payment processors, cloud storage providers, and analytics services. All integrated services are carefully vetted and must meet our privacy and security standards.

Age Restrictions and Child Privacy

AapliShala is intended solely for use by parents, guardians, teachers, and school administrators to manage and monitor student activities. The application is not designed for direct use by students or minors under the age of 18.

We do not knowingly collect personal information directly from children. All student-related information available within the app is provided and managed by authorized school staff or parents/guardians for educational administration purposes.

Access to student data is strictly controlled and limited to authorized adults, with robust role-based access permissions in place.

If you believe that a child’s data has been submitted to AapliShala in violation of this policy, please contact us immediately at aaplishalaschoolapk@gmail.com so that we can take appropriate action.

International Data Transfers

Primary data storage is within India, though cloud services may involve international data transfers. All transfers comply with applicable data protection laws through appropriate legal agreements with international service providers, technical and organizational measures to protect data during transfer, and regular audits of international data handling practices.

Updates to This Privacy Policy

This policy may be updated periodically to reflect system changes, new features, legal updates, and compliance requirements. Users will be notified of significant updates through the app, and continued use implies acceptance of revised terms. Users can review the full policy history on our website.

Data Breach Response

In the event of a data breach, we provide immediate containment and assessment, notification to relevant authorities within 72 hours, and user notification for high-risk breaches. We conduct thorough investigation of the cause and scope, implement additional security measures, and provide ongoing monitoring and prevention measures.

• Immediate containment and investigation
• Authority notification within 72 hours
• User notification if risk is high
• Post-breach analysis and prevention

Contact Information

For privacy concerns, contact:

Regulatory Compliance

This Privacy Policy is designed to comply with the Information Technology Act, 2000 (India), Personal Data Protection Bill (India), General Data Protection Regulation (GDPR) where applicable, Children’s Online Privacy Protection Act (COPPA) principles, and other applicable local and international privacy laws.