Privacy Policy

Last updated: March 2026

1. Information We Collect

Pehchaan collects the following information to operate the school management platform: student names, class, section, date of birth, parent/guardian phone numbers, fee payment records, attendance records, academic assessments (including Holistic Progress Card data), school event information, and teacher/staff details. Photo uploads are optional and stored securely.

2. How We Use Your Data

Data is used exclusively to operate school management features: fee collection, attendance tracking, homework delivery, exam management, AI-powered Holistic Progress Cards, parent communication, and transport safety. We do not sell, share, or transfer personal data to third parties for marketing or advertising.

3. Children's Data Protection

Student data is collected and processed with the knowledge and consent of the school administration, who act as data fiduciaries under the Digital Personal Data Protection Act, 2023 (DPDP Act). Parents/guardians can view their child's data via the parent portal and request corrections through the school. We implement age-appropriate data handling for all student records.

4. AI-Powered Features

Our AI features (Holistic Progress Cards, voice transcription, homework enhancement) process educational data using Sarvam AI APIs. Voice recordings are processed for transcription only and are not stored after processing. AI-generated narratives are stored as part of the student's academic record.

5. Data Security

All data is encrypted in transit (HTTPS/TLS). Data is stored in Supabase (PostgreSQL) with Row-Level Security policies ensuring schools can only access their own data. Authentication uses industry-standard JWT tokens. QR tokens for parent portal access use cryptographically secure random generation.

6. Data Retention and Deletion

School data is retained for the duration of the school's subscription. Schools can request complete deletion of all their data by contacting us. Upon subscription cancellation, data is retained for 90 days before permanent deletion. Parents can request erasure of their child's data through the school administration.

7. Your Rights

Under the DPDP Act, 2023, you have the right to: access your personal data, request correction of inaccurate data, request erasure of your data, and withdraw consent. To exercise these rights, contact us at privacy@pehchaan.io or through the school administration.

8. Contact

For privacy-related queries, contact us at privacy@pehchaan.io.