Privacy Policy

This Privacy Policy explains how NOOBAITECH (“we”, “us”) handles personal data in Bachpan Saathi — our school management website (bachpansaathi.com), the school web panel and the Bachpan Saathi mobile app (together, the “Service”). It is written to meet the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 of India. Words such as “personal data”, “Data Fiduciary”, “Data Processor”, “Data Principal” and “consent” have the meaning given in the DPDP Act.

Who we are

NOOBAITECH, Delhi, India · Email support@noobaitech.com · Phone +91 93118 59134.

Our role and the school's role

• School account data (the school's name and the main contact's name, email, phone, city, state and login details given at sign-up): we decide why and how this is used, so for this data we are the Data Fiduciary.
• Records a school keeps in Bachpan Saathi (students, parents, staff, drivers, attendance, fees, salary, exams, homework, activity photos, transport and documents): the school is the Data Fiduciary and decides what is collected and why. We act as the school's Data Processor and process this data only to provide the Service, under the school's instructions and our Terms.
• If you are a parent, student or staff member, please contact your school first about your data. We will help the school respond, and you may also write to our Grievance Officer (section 12).

Data we process

a) Given by the school at sign-up and in its profile

School name, address, city, state, board, logo; the main contact's name, email address, mobile number and password (stored only as a secure hash); email and mobile verification status.

b) Entered by the school about students and parents

Student name, class, roll number, gender, date of birth, admission date, photo, address, documents and any custom fields the school adds; parents' or guardians' names, phone numbers and email; attendance, leave, fee and payment records, exam answers and results, homework, activity photos and transport assignment.

c) Entered by the school about staff and drivers

Name, role, phone, email, address, qualification, photo, documents, joining date, salary and salary payment records, attendance and leave; for drivers, driving licence, vehicle and registration numbers; app or web access settings.

d) Collected automatically when the Service is used

Login times, IP address, device and app version, push-notification token, and security and error logs. Face ID / fingerprint unlock is handled by your phone's operating system — we never receive your biometric data.

e) Payments for plans

Plan purchases are paid through our payment partner (Razorpay). We receive the payment status, amount and reference — we do not receive or store card, UPI PIN or bank login details.

We ask schools not to store sensitive identifiers such as Aadhaar numbers, health records or financial account details in custom fields unless the law requires it.

Children's data

• Most students are under 18, so their data is children's data under the DPDP Act. The school, as Data Fiduciary, is responsible for obtaining verifiable consent from a parent or lawful guardian where the DPDP Act and Rules require it, or for relying on an exemption that applies to educational institutions.
• We process children's data only to provide the school's educational, administrative and safety functions (for example attendance, fees, exams, homework and transport).
• We do not track or monitor children's behaviour, build profiles of them, or show them any targeted advertising, and we do not sell anyone's personal data.

Why we use data

• To create and run the school's account and provide the features it uses.
• To verify email and mobile numbers and keep accounts secure (one-time codes, login alerts, fraud and abuse prevention).
• To send service messages: one-time codes, login details, notices, fee and homework reminders, salary slips, exam results and receipts that the school or the Service sends.
• To process plan payments and issue invoices with GST details.
• To provide support, fix errors and keep the Service working.
• To meet legal duties, such as tax law or a lawful request from a government authority.

We do not use personal data for advertising and we do not sell it.

Consent and notice

• Schools: the person who registers a school must tick “I agree” to this Privacy Policy and the Terms; a school cannot be registered without it. We record the version, date and time.
• Staff, teachers, drivers and parents: before logging in, you must tick “I agree” to this Privacy Policy and the Terms on the login screen; you cannot log in without it. We record your agreement (version, date and time) on your first login.
• Consent is free, specific and can be withdrawn at any time as easily as it was given — by emailing support@noobaitech.com or from the school's account. Withdrawing consent does not affect processing done before it, but we may then need to close the account because the Service cannot run without the data.
• Schools must give their own notice to parents, students and staff about how the school uses Bachpan Saathi, and obtain consent where required.

Who we share data with

We share personal data only with service providers who help us run the Service, under contracts that require them to protect it and use it only for us:

• Cloud hosting and database — Oracle Cloud Infrastructure.
• Website delivery, security and file storage — Cloudflare.
• Push notifications and app crash reports — Google Firebase.
• Email delivery — our email service provider.
• Payments — Razorpay (plan purchases only).

Data the school enters is visible to that school's authorised users only, according to the roles and permissions the school sets. We may disclose data if required by law, a court order or a lawful request from a government authority. We do not sell, rent or trade personal data.

Where data is stored

We aim to store Service data on servers in India. Some providers (such as Cloudflare and Google Firebase) may process limited data outside India to deliver their services. Any transfer outside India follows the DPDP Act and any restrictions notified by the Government of India.

How long we keep data

• We keep school records while the school's account is active, or until the school deletes them.
• When an account is closed, we delete or anonymise its personal data within 90 days, unless the law requires us to keep some of it longer (for example tax and invoice records).
• Security and access logs are kept for at least one year, as required by the DPDP Rules, and then deleted.
• Backups are overwritten on a rolling basis.

Security and breaches

• Encrypted HTTPS connections, passwords stored only as secure hashes, one-time-code verification, role-based access, separation of each school's data, access logs and regular backups.
• Access to production data is limited to people who need it to run and support the Service.
• If a personal data breach happens, we will inform the affected schools and people without delay — what happened, the likely impact, what we are doing and what they can do — and report it to the Data Protection Board of India as the DPDP Rules require.

Your rights

Under the DPDP Act you can:

• Access a summary of your personal data we process and who it has been shared with;
• Correct, complete or update your personal data;
• Erase your personal data when it is no longer needed or you withdraw consent, unless the law requires us to keep it;
• Withdraw consent at any time;
• Nominate another person to exercise your rights if you die or become unable to;
• Raise a grievance with us, and if you are not satisfied, complain to the Data Protection Board of India.

For data your school entered, please send your request to your school; we will help the school act on it. You can also email us and we will pass it to the school.

Grievance Officer

Grievance Officer, NOOBAITECH, Delhi, India
Email: support@noobaitech.com (subject “Privacy grievance”)
Phone: +91 93118 59134

We will acknowledge your grievance within 7 days and resolve it as soon as possible, and in any case within 90 days.

Cookies and device storage

This website does not use advertising or analytics cookies. The school web panel and the mobile app keep your login session on your device so you stay signed in; logging out removes it.

Changes to this policy

We may update this policy when the Service or the law changes. We will show the new version and date here, and for important changes we will notify schools; the new version is recorded at each user's next login.