Privacy Policy

This policy covers data processed by Acadengine, built and operated by EngiGrow, for schools that use it to manage attendance, marks, fees, bus tracking and communication with parents.

The school you are enrolled with, or that employs you, is the Data Fiduciary under the DPDP Act — they decide what is collected and why. EngiGrow is the Data Processor — we run the software on the school's instructions and do not sell, rent or use the data for our own purposes.

For a student: name, date of birth, gender, admission number, class, attendance records, exam marks, homework records, fee payment history, and a guardian's name and phone number.

For a parent or guardian: name, phone number, and a password (stored as an irreversible cryptographic hash — we cannot see or recover it).

For a teacher or headmaster: name, email, phone number, and the records they create (marks entered, attendance marked, messages sent).

If a bus route is in use: the driver's device sends GPS coordinates while actively tracking, shown live to parents on that route and kept for a short rolling window — see Retention, below.

• To run the school's core operations: attendance, marks, fees, homework, timetable.
• To let a parent see their own child's records and nothing else.
• To notify a parent of things that concern their child — an absence, a new mark, a message from a teacher.
• To show a bus's live location to the parents on that route, while it is running.
• To keep the records a school is required to keep for accreditation and audit.

Within the school: a teacher sees their own classes; a headmaster sees the whole school; a parent sees only their own children. These boundaries are enforced by the software itself, not left to staff discretion.

Outside the school, data is shared only with the infrastructure that runs the product:

• Cloudflare R2 — stores uploaded files (homework attachments, the school's logo, a student photo if one is added).
• A push notification service — delivers notification text to a parent's phone; it does not retain the content.

We do not sell personal data, and we do not share it with advertisers. A government or legal request is honoured only where the law requires it.

• Attendance and exam marks: kept for the duration a school needs them for a student's academic record — typically the length of their enrollment plus several years for transcript requests. A school can request deletion; see Your Rights, below, for what that means when history is involved.
• Bus location history: 7 days, then automatically deleted. Live tracking is real-time; it is not kept as a movement history.
• Session logins: expire after 7 days of inactivity and are then removed.
• Audit logs (who did what, for security and dispute resolution): 2 years.
• A notice, event or homework post you delete: recoverable for 30 days, then permanently removed.

As a parent, you can:

• See what we hold. Download a full copy of your child's data at any time from your Profile page.
• Ask us to delete it. The same page lets you send a deletion request, which the school reviews. If your child has attendance or exam history that the school is required to retain, we remove every personally identifying field (name, contact details, photo) and keep the academic record anonymised — not identifiable as your child's.
• Withdraw consent. Withdrawing is the same action as requesting deletion — we cannot process a child's data without consent, so withdrawing ends processing.

As a teacher or headmaster, contact your school's administrator, who can reach us on your behalf.

Passwords are hashed, never stored in plain text. All traffic to the application is encrypted. Database backups are encrypted in transit and kept for 7 days. Access to a school's data is scoped by school — staff at one school cannot see another's records, and this is enforced in the software itself, not only by policy.

Most of the personal data this product handles belongs to children. We do not knowingly collect more than a school provides for its own operational and academic purposes, and we do not use a child's data for advertising, profiling, or any purpose outside running the school.

If we make a change that affects what is collected, how it is used, or how long it is kept, every parent is asked to review and re-agree before continuing — you will see the agreement screen again the next time you sign in.

Questions about this policy, or a request concerning your own data: [email protected] or +91 9353466456.