Privacy Policy & Data Protection
Effective Date: October 16, 2026 | Version 2.4 | Applicable across Web & Mobile platforms.
1. Principle of Data Minimization (What We Collect)
In strict adherence to the Data Minimization doctrine, Skuul collects only the bare minimum data strictly required to perform educational operations, attendance tracking, and fee collection:
Student & Parent Data
- Student Full Name, Admission/Roll Number, Class & Section
- Guardian/Parent Name, Verified Phone Number (for SMS/Push notices)
- Daily Attendance status (Present/Absent/Leave)
- Academic marks & exam report cards submitted by class teachers
- Optional profile photo and address for ID cards
What We NEVER Collect
- NO Aadhaar biometric data or government biometric records
- NO continuous background GPS tracking when outside school transport
- NO browser search history, device contacts or call logs
- NO behavioral ad identifiers (IDFA or Google Advertising ID)
- NO personal banking passwords, card PINs or CVV numbers
2. Age Consent & Children's Data Protection (Under 18 Years)
Skuul is built for K-12 education, where many users are minors under the age of 18. We operate in strict accordance with the Digital Personal Data Protection (DPDP) Act 2023 (Section 9) and the principles of the Children's Online Privacy Protection Rule (COPPA):
- Verifiable Parental Consent (In Loco Parentis): Student accounts are created and provisioned exclusively by the affiliated School Authority or with direct guardian consent during admission.
- No Targeted Advertising: Skuul does not track, profile, or deliver targeted advertisements to children under any circumstances.
- Child-Safe AI Tutor: Academic doubt queries asked in the built-in AI tutor are filtered for child safety, age-appropriate language, and educational curriculum boundaries.
3. Comprehensive Audit of Third-Party SDKs & Infrastructure
To ensure absolute transparency, below is an exhaustive list of all sub-processors and external technologies integrated into Skuul:
| Partner / SDK | Function | Data Handled | Location & Security |
|---|---|---|---|
| Cloudflare Workers & D1 | Edge API backend, database & encrypted object storage | School records, encrypted session tokens, receipts | APAC / India edge nodes; ISO 27001, SOC2 |
| Google Firebase (FCM v1) / Expo | Push notifications for notices & attendance alerts | Anonymized device push token & notification title/body | Google Cloud Platform; TLS 1.3 |
| National Payments Corp of India (UPI) | Direct school fee settlements via VPA intents | 12-digit UTR bank reference number, amount | Direct bank-to-bank UPI rail; RBI regulated |
| Groq AI (Llama 3 API) | AI Tutor academic doubt resolution assistant | Transient question text (strictly zero training on student data) | Stateless inference; no persistent retention |
4. Right to be Forgotten & Data Deletion Requests
Under Section 12 of the DPDP Act 2023, every student, parent, and educational institution possesses the fundamental Right to Erasure (Data Deletion).
How to request complete data deletion:
- Parents/Students: You may submit an erasure request directly through your school administration, or email our Grievance Officer at privacy@getskuul.com with your student ID and school name.
- Schools terminating subscription: Upon school offboarding, an automated 30-day export window is provided, after which all database records, attendance logs, and student media files are permanently purged from our Cloudflare storage servers.
- Response SLA: All valid deletion requests are confirmed and completed within 15 calendar days.
5. Security Architecture & Ethical UX (Zero Dark Patterns)
- 256-Bit TLS & At-Rest Encryption: All HTTP network interactions occur over HTTPS with TLS 1.3. Database credentials use PBKDF2/SHA-256 salted hashing.
- Multi-Tenant Tenant Isolation: Every school database query is sandboxed using unique tenant scopes (
scopeOfandfeeTenant), preventing cross-school data leakages. - Zero Dark Patterns & No Hidden Fees: Skuul does not employ forced continuations, hidden charges, deceptive countdown timers, or pre-selected recurring fee subscriptions.
6. Grievance Redressal & Business Details (DPDP Act Compliance)
In accordance with Rule 3 of the Information Technology Rules, 2021 and the DPDP Act 2023, the details of the appointed Grievance Officer are published below:
Nitin Kumar
Skuul Technologies Pvt. Ltd.
Skuul Campus ERP
Patna, Bihar 800001, India
Operating Hours: Monday – Saturday (9:00 AM – 7:00 PM IST)
Emergency Redressal Turnaround: Within 24-48 business hours.