Privacy Policy — Namma Vidyalaya

Last updated: 18 May 2026 · Developer: VTPL (Vincent Thrives Pvt Ltd) · Contact: vincentthrives@gmail.com

Namma Vidyalaya ("the App") is a school management application provided by VTPL ("we", "us"). This policy explains what data we collect, why we collect it, how it is used, and your rights.

1. Who uses this app

The App is provided to schools that subscribe to our service. School administrators, teachers, parents, and students log in using credentials issued by their school. The school, not VTPL, decides which data is recorded. VTPL acts as a data processor on behalf of each subscribing school.

2. Data we collect

We collect only what is needed to operate the school management features each school enables:

Type	Examples	Purpose
Account info	Name, email, phone number, school-assigned role (admin/teacher/parent/student)	Sign-in, identifying you within your school
Academic info	Class, section, attendance, exam marks, assignments, fee records	Core school management
Messages & notifications	Notification titles and bodies sent to or by you, in-app inbox read status	Communication between school and parents/students
Device identifiers	Firebase Cloud Messaging (FCM) push token	Sending push notifications to your device
Technical info	App version, OS version, crash reports (if you opt in)	Diagnostics and improvements
Phone number (SMS module)	Only if the school enables SMS notifications	Sending SMS via MSG91 (DLT-compliant)

We do not collect: location, contacts, photos, microphone audio, browsing history, financial information, or biometrics.

3. How we use your data

Provide the school management features your school has enabled
Authenticate you and keep your session secure (JWT tokens, stored on your device)
Send notifications you have not opted out of
Maintain audit logs required by the school

We do not sell your data. We do not use your data for advertising.

4. Who we share data with

Your school. All academic data is visible to authorized staff within your school's tenant.
Service providers that help us operate the app (with binding confidentiality terms):
- Google Firebase Cloud Messaging — push delivery
- MSG91 — SMS delivery (only if SMS feature is enabled by your school)
- Render — application hosting
- MongoDB Atlas — database hosting
Legal authorities when required by Indian law.

5. Data retention

Data is retained for as long as your school remains a customer plus 90 days. On account deletion, your personal data is removed within 30 days; anonymized aggregate statistics may be retained.

6. Your rights

You may:

Request a copy of your data
Request correction of inaccurate data
Request deletion of your account
Withdraw consent for non-essential data (e.g. push notifications) at any time

Contact your school administrator first; for unresolved requests email vincentthrives@gmail.com. We respond within 30 days.

7. Children's data

Many users of the App are students under 13. Schools obtain parental consent at enrollment. Children's data is treated with the same protections as adult data and is never used for marketing.

8. Security

All network traffic uses HTTPS (TLS 1.2+).
Passwords are hashed with bcrypt; we never store them in plaintext.
Access to production data is restricted to authorized engineers.
We log security-sensitive events for audit.

9. Changes to this policy

We update this page when our practices change. The "Last updated" date at the top reflects the most recent revision. Material changes will be announced in-app.

10. Grievance officer

For grievances under India's IT Rules 2021:

Vincent Thrives Pvt Ltd
Email: vincentthrives@gmail.com
Acknowledgement within 24 hours; resolution within 15 days.