Privacy policy

Who is responsible for your data

The school you belong to decides what is recorded about you and who may see it. In the language of India's Digital Personal Data Protection Act, 2023, the school is the data fiduciary; Rixroent Private Limited operates Unistha on the school's instructions as its data processor. Questions about a specific record — a mark, an address, a fee entry — go to the school office first, because the school is the only party that can change it.

What information {site.name} holds

• Your account. Your name, the email address or mobile number the school registered you with, your role (parent, student, teacher, principal, administrator) and your password, stored only as a salted hash.
• Student records entered by the school. Name, date of birth, gender, class and section, admission number, guardian names and contact numbers, address, attendance, marks and report cards, homework and diary entries, fee bills and receipts, transport, hostel and library records, and a photograph where the school has added one.
• Staff records entered by the school. Employee details, designation, attendance, leave and, where the school uses it, payroll.
• What you send through the app. Messages to teachers or the office, complaints, leave requests, meeting bookings, and photos or files you attach to homework, complaints or a gallery post.
• Payment references. When a fee is paid online, the payment is handled by Razorpay. Unistha receives and stores the order and payment identifiers, the amount and the receipt number — never your card, UPI or bank details, which are entered on Razorpay's secure page and are not visible to us.
• Device token for notifications. If you allow notifications, the app registers a push token (issued by Google's Firebase Cloud Messaging) so the school can notify you about attendance, fees, homework and messages. Turning notifications off in your phone's settings stops this.
• Technical logs. Standard server logs (time, IP address, the request made) kept for security and troubleshooting, and an activity log of changes made inside a school's system, which the school's administrators can review.

Why it is used

Only to run the school. Attendance is recorded so parents can be told of an absence; fee bills are raised so they can be paid and receipted; marks are entered so report cards can be published; messages are stored so the conversation can be read again.Unistha does not show advertising, does not build profiles for marketing, and does not sell or rent personal information to anyone.

Who it is shared with

• Your school. Staff see what their role allows — a class teacher their own class, a parent only their own children. Access is enforced by the system, not by policy alone.
• Razorpay (Razorpay Software Private Limited), to process online fee payments under the school's own merchant account.
• Google Firebase Cloud Messaging, to deliver push notifications to your phone. The notification text passes through Google's service.
• Microsoft Azure, which hosts the servers and storage in India.
• Authorities, where the law requires it and only to the extent it requires.

No other third party receives personal information from Unistha.

Where it is kept and how it is protected

Data is stored on servers in India. Every school has its own isolated database schema, so one school's records are never mixed with another's. All traffic between your device and Unistha is encrypted (HTTPS). Sign-in tokens on the mobile app are kept in the phone's secure keystore. Access inside the company is limited to the engineers who maintain the service and is logged.

Children

Students use Unistha through accounts their school issues, with the consent of a parent or guardian obtained by the school at admission. We do not knowingly collect information from a child outside the records the school keeps, and a student account can see only that student's own records.

How long it is kept

For as long as the school uses Unistha, because a school record is a running record: this year's attendance is next year's transfer certificate. When a school leaves, its data is exported to the school on request and then deleted from our systems. Fee receipts and payment references may be retained for as long as Indian accounting and tax law requires the school to keep them.

Your choices and rights

• See and correct. Most of your information is visible in the app and on the school's website. To correct a record, ask the school office; they can change it immediately.
• Notifications. Switch them off in your phone's settings at any time.
• Delete your account. Ask the school office, or follow the steps on our account deletion page.
• Ask us. Write to [email protected] with your school's name and we will answer within 30 days.

Permissions the mobile app asks for

• Camera and photos — only when you choose to attach a picture to homework, a complaint or a gallery post. Nothing is read from your photo library without you picking it.
• Notifications — to tell you about attendance, fees, homework and messages from the school.
• Internet — to talk to your school's Unistha server.

The app does not use your location, contacts, microphone or call history.

Changes to this policy

When this page changes, the date at the top changes with it, and material changes are announced inside the product. Continuing to use Unistha after a change means you accept the updated policy.

Contact

Rixroent Private Limited, India. [email protected] · +91 6182 464 209