Privacy policy
What Educational Institute — the website, the web app, and the Staff and Student & Guardian mobile apps — collects, why, who it is shared with, how long it is kept, and how to have it corrected or deleted.
Last updated 28 September 2026
Who is responsible
Educational Institute is software that schools, colleges, coaching centres, madrasas and training institutes use to run their work. Each institution decides what it records about its students, guardians and staff, and is responsible for that information; we store and process it on the institution's behalf, and only as this policy says. For what an institution tells us when it registers, and for this website, we are responsible.
What we collect
Account details: name, phone number, email address, and a password, which is stored only as a one-way hash. Records an institution keeps: students' and guardians' names and contact details, admissions, classes and batches, attendance, fees, receipts and payments, exam results, notices and messages, and files its staff upload. When an institution registers: its details, its owner's contact details and address, and the verification documents it uploads. Technical records: the device and browser used to sign in, IP addresses and times, kept to protect accounts.
The mobile apps
The Staff app and the Student & Guardian app are for people their institution has given an account. They show the same records as the web app and send what is entered in them to the institution's workspace. They keep your sign-in securely on the phone, and a copy of recent information so they work without a connection; both are erased when you sign out or uninstall the app. They do not use your location, contacts, camera, microphone or photos, show no advertising, and contain no advertising, analytics or tracking code.
How we use it
To run the service for the institution: signing people in, keeping its records, producing receipts, reports and documents, and sending the notices, receipts and codes it asks us to send by SMS, email or WhatsApp. To review registrations, give support, bill institutions, and keep the service secure — detecting abuse and investigating problems. We do not sell personal information, use it for advertising, or build profiles of anyone.
Who it is shared with
Inside an institution, each person sees only what their role allows, and students and guardians see only their own records. Outside it, information goes only to the providers that run the service for us — our server host, Cloudflare for file storage, our email provider and our SMS gateway — who may use it only to provide that service; and to the authorities when the law requires it. Nothing is sold or shared for advertising.
How it is protected
Every connection is encrypted (HTTPS). Passwords are stored as Argon2id hashes, never in a form that can be read. Access is checked by the database itself as well as by the app, so only the people an institution has given an account can reach its records. Backups are encrypted before they leave the server. Signing in from a new device can require a one-time code.
How long it is kept
An institution's records are kept while it uses the service, because an institution has to keep them. If it stops using the service, we write first, and archive it only after 90 days' notice; a year later it may be removed, and the final copy we keep in case it comes back is erased two years after that. Security and audit records are kept as long as they are needed to protect accounts and settle disputes.
Seeing, correcting or deleting your information
Your institution can show you, correct or remove what it holds about you — ask its office. You can also write to us, and we will help or pass the request on and see it through.
Children
The apps are meant for staff, for guardians, and for students aged 13 and over. For a younger student it is their guardian who signs in; the institution enters the student's information and is responsible for it.
Changes to this policy
When this policy changes, we update it here and change the date at the top. If a change is significant, we tell institutions before it takes effect.
Contact us
For any question or request about privacy, use the contact page, or the phone, WhatsApp or email shown there.
Nothing is locked and nothing is deleted. An unpaid invoice marks the account overdue, and it keeps working. If an institution then stops using it altogether, we write first — more than once, by email and by SMS — and only after 90 days of silence is it archived: closed but unchanged, and restorable. A year after that it may be removed, but only once a complete copy has been made and set aside for two years, and only with a second owner's approval on our side.
Start free. Take attendance today.
Register your institution, add a group and a handful of students, and mark your first session. Upgrade when you need what the paid plans add, not before.