Privacy Policy

1. Introduction

GurukulOS ("we", "our", or "us") is a product of Maba Digital Group, headquartered at 910 Sector 9, Faridabad, Haryana — 121006, India. We are committed to protecting the privacy of all individuals who use our school management platform, including school administrators, teachers, parents, students, and staff.

This Privacy Policy explains what information we collect, how we use it, how we protect it, and the rights you have over your data. By using the GurukulOS platform (web or mobile), you agree to the practices described in this policy.

2. Information We Collect

We collect information in the following ways:

2.1 Information provided by the school

• School name, address, contact details, and registration information
• Student records: name, class, section, admission number, date of birth
• Staff and teacher profiles: name, designation, contact information
• Parent and guardian contact details linked to student records
• Fee structures, payment records, and financial data
• Academic data: attendance, marks, homework, timetables

2.2 Information collected automatically

• Device information (device type, OS version, app version)
• Usage data (features accessed, session duration, click events)
• IP address and approximate location for security purposes
• GPS location data — only when the bus driver actively starts a live tracking session

2.3 Information from payment transactions

• Payment amount, date, and mode (UPI, card, bank transfer, cash)
• Transaction reference IDs from Razorpay
• We do not store card numbers, CVVs, or UPI PINs — all sensitive payment data is handled directly by Razorpay

3. How We Use Your Information

• To provide and operate the GurukulOS platform for your school
• To process fee payments and generate digital receipts
• To enable live school bus tracking for parents and admins
• To send attendance alerts, fee reminders, and school notices to parents
• To generate academic reports and analytics for school administrators
• To power the GurukulAI assistant for teachers and students
• To improve platform performance, fix bugs, and develop new features
• To comply with applicable laws and legal obligations

We do not sell, rent, or trade your personal data to any third party for marketing or advertising purposes.

4. Location Data

GurukulOS collects GPS location data solely for the school bus live tracking feature. Location data is collected only from the bus driver's device, and only when the driver explicitly starts a broadcast session. This data is:

• Transmitted in real time to parents and admins who have access to that route
• Not stored permanently — location history is not retained after a session ends
• Never used for any purpose other than live transport visibility

The driver can stop the broadcast at any time. Location access is requested explicitly and can be revoked from the device settings.

5. Data Sharing

We share data only in the following limited circumstances:

• Razorpay — for processing online fee payments. Razorpay's privacy policy governs their handling of payment data.
• AWS (Amazon Web Services) — our cloud infrastructure provider. Data is stored securely on AWS servers located in India.
• Legal obligations — if required by a court order, government authority, or applicable law.

All third-party vendors we work with are bound by data processing agreements and are required to handle data securely and only for the purposes we specify.

6. Data Security

We implement industry-standard security measures to protect your data, including:

• Encryption of data in transit using HTTPS/TLS
• Encrypted storage for sensitive credentials using AWS Secrets Manager
• Role-based access control — each user sees only what their role permits
• Regular security reviews and vulnerability assessments

While we take all reasonable precautions, no system is completely immune to security risks. In the event of a data breach, we will notify affected schools promptly as required by law.

7. Data Retention

We retain school and student data for as long as your school is an active GurukulOS subscriber. Upon termination of the subscription, school data is retained for 90 days to allow for data export, after which it is permanently deleted from our systems unless legally required to retain it.

8. Children's Privacy

GurukulOS is designed for use by schools and educational institutions. Student data, including data of minors, is managed exclusively by the school administration. We process student data only on behalf of the school (as a data processor) and in accordance with the school's instructions. Parents or guardians who wish to access, correct, or delete their child's data should contact their school administration directly.

9. Your Rights

Depending on your role, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal and contractual obligations)
• Object to or restrict certain processing activities
• Request a copy of your data in a portable format

To exercise any of these rights, contact us at support@gurukulos.com.

10. Cookies

Our website (gurukulos.com) uses minimal, essential cookies for session management and analytics (via Vercel Analytics). We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect some website functionality.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make significant changes, we will notify schools via email or an in-app notice. The updated policy will always be available at gurukulos.com/privacy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please reach out to us: