Privacy Policy

At ClassRoots, operated by Aadyash Technologies Private Limited, we are committed to protecting the privacy of every parent, student, teacher, and school using our platform.

1. Information We Collect: We collect information that schools provide about students (name, class, roll number, date of birth, photo, parent contact details) and information parents provide when they sign in (phone number, name, email if shared). We collect activity inside the app — circular reads, push token registrations, attendance marks, fee payments, leave/pickup requests, homework submissions, canteen orders, and basic device or usage data needed to operate and secure the platform.

2. How We Use Your Information: We use this information to deliver school announcements, mark and report attendance, process fee payments, manage leave and pickup approvals, share homework and class updates, run the canteen wallet, send notifications, prevent fraud or abuse, improve service quality, provide customer support, and comply with legal or regulatory obligations.

3. Children's Data: ClassRoots is operated through schools. Schools are responsible for collecting any consent required from parents or guardians of minor students before enrolling them on the platform. Information about students is treated as sensitive and is only visible to (a) the student's linked parents, (b) authorised staff at the student's school, and (c) the ClassRoots operations team where strictly required for support, security, or legal compliance.

4. Data Sharing: We do not sell your personal data. We share information with the school you are linked to (so they can serve you) and with trusted third-party service providers — payment providers (Razorpay), SMS providers (MSG91), cloud hosting and storage (Amazon Web Services), notification providers (Expo Push, FCM, APNs), email providers, and security or analytics tools — only where reasonably necessary to run the platform.

5. Data Security: We use appropriate technical and organisational safeguards, including encryption in transit, access controls, hashed passwords and one-time codes, and audit logging. No system is perfectly secure; we work continuously to reduce the risk of unauthorised access, disclosure, or misuse of your data.

6. Data Retention: We retain data only for as long as reasonably necessary for operational, legal, financial, fraud prevention, security, and dispute resolution purposes. Certain attendance, payment, audit, or compliance records may be retained even after account deletion where required by law or legitimate business needs (for example, statutory school records).

7. Account Deletion: Parents can request account deletion in-app (Profile → Delete Account) or by writing to support@classroots.ai. School-side accounts are managed by the school. When an account is deleted, personal data is removed or anonymised where appropriate, access is disabled, and certain limited records may still be retained for legal, financial, or security purposes.

8. Your Rights: Subject to applicable law, you may request access to, correction of, or deletion of your personal data by contacting us at support@classroots.ai.

9. International Processing: Depending on our service providers and infrastructure, your data may be processed or stored in jurisdictions outside your immediate location. We use providers that maintain industry-standard protections.

10. Updates: We may update this Privacy Policy from time to time. The revised version will be reflected by the updated “Last updated” date at the top of this page.

11. Contact: For privacy-related questions or requests, contact us at support@classroots.ai.