Privacy Policy
Contents
Jump to a section
⚖️ Legal Document

Your Privacy
Matters to Us

We are committed to protecting your personal information and being fully transparent about how it is collected, used, and protected across the HelloSchool platform.

📅
Effective
January 2026
🔖
Version
1.0.0
📍
Jurisdiction
India
👳️
Data Sales
Never
🎓

HelloSchool ("we", "our", or "us") operates the HelloSchool mobile application (the "Service"). This Privacy Policy explains, in plain language, how we collect, use, store, and protect your personal information — and what rights you have over it. By using the app, you agree to the practices described below.

01
Information We Collect
📥
A. Personal Information
Full name
Mobile number
Institution code
Login credentials
Student name & class
Parent name
Address details
Complaint & chat messages
B. Usage Data
App usage logs
Error logs
Device information
OS version
C. Uploaded Files
Timetable files (PDF/Image)
Admin/Staff documents
02
How We Use Information
⚙️

We only use your data for purposes directly related to running HelloSchool:

  • 🔑Account management — authenticate and manage your account securely
  • 📚School operations — manage assignments, attendance, notices, and exam schedules
  • 💬Communication — enable seamless parent–staff messaging
  • 🔧App improvement — diagnose technical issues and improve performance
  • 👳️Security — detect and prevent fraudulent or unauthorised activity
🚫
We NEVER sell or share your data with advertisers.
Your information is used solely to power the HelloSchool service.
Legal Basis for Processing (DPDP Act 2023)

Under India's Digital Personal Data Protection Act, 2023 and internationally recognised principles, we process your data on these bases:

Consent
When you register and use the app, you provide informed consent for us to collect and process your personal data.
🎯
Legitimate Interest
We process usage logs and error data to maintain and improve our service, where this does not override your rights.
⚖️
Legal Obligation
We may retain or disclose data to comply with Indian law, court orders, or government authorities.
ℹ️

You can withdraw consent at any time by requesting account deletion. See Section 10 — Your Rights for how to do this.

03
Data Storage & Security
🔐

We use industry-standard security measures to keep your data safe both at rest and in transit:

🗂️
MongoDB Atlas — encrypted cloud database
🔐
bcrypt password hashing
🔛
JWT-based authentication tokens
🔒
HTTPS for all data transmission
☁️
Cloudinary secure file storage
ℹ️

No internet transmission or electronic storage is 100% secure. We continuously review our security practices to keep your data protected.

04
Data Sharing
🤝

We do not sell, rent, or trade your personal information. Your data is only ever shared in these specific, limited situations:

  • With your institution for legitimate school management purposes
  • When required by Indian law, court order, or government authority
  • To investigate or prevent fraud or violations of our terms of service
05
International Data Transfers
🌐

HelloSchool uses trusted third-party cloud infrastructure to store and process data. Some of these services operate servers in locations outside India. As a result:

🌐

Your personal data may be stored and processed on servers located in India and other countries (including the United States and European Union regions), depending on the infrastructure of our service providers.

Where Your Data May Be Processed
🇮🇳
India
Primary region
🇺🇸
United States
MongoDB Atlas, Cloudinary, Render
🇪🇺
European Union
Possible backup regions
How We Protect Cross-Border Transfers
  • 👳️All data is encrypted in transit using HTTPS/TLS regardless of location
  • 🔒Our providers comply with their respective data protection regulations (SOC 2, GDPR-equivalent)
  • 📋Data is only transferred to providers listed in Section 09 — no undisclosed third parties
  • ⚖️We apply the same privacy protections regardless of which country your data is processed in
ℹ️

By using HelloSchool, you acknowledge that your data may be transferred to and processed in countries outside India. We take all reasonable steps to ensure your data is handled securely and in accordance with this policy wherever it is processed.

06
Data Retention
📅

We keep your data only for as long as needed to provide the Service or as required by Indian law. Here are the exact timeframes:

Retention Periods by Data Type
Data Type Retention Period Reason
Account & profile data While account is active Service operation
After account deletion Up to 90 days Deletion & backup clearance
App usage & error logs Up to 12 months Security & performance
Uploaded files Until deleted by admin Institution control
Legally mandated records As required by law DPDP Act 2023

After account deletion, your data is fully purged from our active systems within 90 days. You will receive a confirmation email once complete. Any data held beyond this is due to a binding legal obligation only.

07
Children's Privacy
👪

HelloSchool is built for educational institutions, staff, and parents — not directly for children. Here's how we protect minors:

  • 👪Student data is entered and managed by authorised administrators or parents, never collected directly from children
  • 🔒No child's data is processed without appropriate parental or institutional authorisation
  • 🚫We do not knowingly allow children to create accounts independently
👪

If you believe we have inadvertently collected data from a child without proper consent, contact us immediately at Helloschoolvarious@gmail.com and we will take proper action to delete it.

08
Cookies & Tracking Technology
🍪
🚫
HelloSchool does not use advertising cookies or third-party trackers.
No ad networks, no retargeting, no behavioural tracking of any kind.
What We Do and Do Not Use
✓ We Use
  • Session tokens — secure JWT tokens in app memory to keep you logged in. They expire automatically.
  • Essential app storage — minimal local storage for preferences and session state only.
  • Crash & error logs — anonymised reports used only to fix technical issues.
✕ We Do Not Use
  • Advertising or marketing cookies
  • Third-party analytics (e.g. Google Analytics)
  • Tracking pixels or social media trackers
  • Cross-site behavioural profiling
  • Device fingerprinting
How to Clear App Data
📱 On Android
Go to Settings → Apps → HelloSchool → Storage and tap Clear Data to remove all locally stored app data.
🌎 On Web Browser
Use Settings → Privacy → Clear Browsing Data in Chrome, Firefox, or Safari to clear any site data.
ℹ️

HelloSchool is a mobile app and does not use browser cookies. All session management is handled through server-issued JWT tokens that expire automatically and are never shared with third parties.

09
Third-Party Services
🌐

We use the following trusted providers to operate HelloSchool. Each has its own privacy policy. We only share the minimum data required for each service to function.

🗃️
MongoDB Atlas
Database Hosting
🖼️
Cloudinary
File Storage
🌐
Render
App Hosting
📧
Resend
Email Service
10
Your Rights
⚖️

Under India's DPDP Act 2023, you have the following rights over your personal data. All requests are free and processed within 30 days:

👁️
Access
Request a copy of the personal data we hold about you
✏️
Correction
Request correction of any inaccurate or incomplete data
🗑️
Deletion
Request full deletion of your account and personal data
🚫
Withdraw Consent
Withdraw your consent to data processing at any time
✉️

To exercise any right, email us at Helloschoolvarious@gmail.com with the subject "Data Subject Request". We will respond within 30 days.

11
How to Lodge a Complaint
📋

We take every privacy concern seriously. If you feel your data has been mishandled, here's exactly how to raise it with us — step by step:

Step-by-Step Complaint Process
1

Email Our Privacy Help Desk

Send your complaint to Helloschoolvarious@gmail.com with the subject line "Privacy Complaint". Describe what happened, which data is involved, and what outcome you are seeking.

2

We Acknowledge Within 48 Hours

You will receive an acknowledgement email confirming we have received your complaint and a reference number for tracking.

3

Investigation & Resolution Within 30 Days

We will investigate the issue and aim to resolve it within 30 calendar days. You will be kept informed of progress throughout.

4

Escalate to the Data Protection Board (If Needed)

If you are not satisfied with our resolution, you have the right to escalate to India's Data Protection Board of India (DPBI) as established under the DPDP Act 2023. Visit meity.gov.in for guidance on filing a formal complaint.

Types of Requests We Handle
  • Data Subject Access Request (DSAR) — ask us what data we hold about you
  • Correction Request — ask us to fix incorrect personal information
  • Deletion / Erasure Request — ask us to delete your account and associated data
  • Consent Withdrawal — withdraw permission for us to process your data
  • General Privacy Complaint — report any concern about how your data is handled

All requests are handled free of charge and responded to within 30 calendar days from the date of receipt. For complex cases, we may extend this by an additional 30 days and will notify you if so.

12
Policy Updates
🔄

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do:

  • 📅The effective date at the top of this document will be updated
  • 📱Significant changes will be notified via the app or by email
  • Continued use of the app after an update constitutes acceptance of the revised policy
13
Contact Us
✉️

For any questions, concerns, or data requests regarding this Privacy Policy, reach out to us directly: