Privacy Policy

1. Who We Are

NaySha EduCore is a school management platform developed and operated by Groenics. This policy explains how NaySha EduCore collects, uses, shares, protects, retains, and deletes data in the web app and Android app.

Privacy contact: support@naysha.online

2. Data We Collect

Schools, admins, teachers, and parents may provide or generate:

• Account data such as names, email addresses, roles, login identifiers, and authentication records.
• Student data such as name, date of birth, admission details, class, section, roll number, parent details, address, and photo.
• Academic data such as attendance, homework, exams, marks, results, subjects, notices, and certificates.
• Teacher and staff data such as name, email address, phone number, assigned classes, and attendance records.
• Parent or guardian data such as name, phone number, email address, and student relationship.
• Fee and payment records such as fee heads, amounts due, payment dates, receipt numbers, and payment mode. We do not store full card or bank account details.
• Communication data such as email, WhatsApp, notice, OTP, and notification delivery logs.
• School data such as school name, logo, address, phone number, academic year, classes, sections, and school GPS coordinates for attendance setup.
• Location data when an admin sets school coordinates or when a teacher marks attendance using GPS. Location is collected only after the user taps the location button.
• Files uploaded by authorized users, including student photos, school logos, and document templates.
• Basic technical data needed to operate the service, such as session cookies, device/browser information, IP-derived security logs, and error logs.

3. How We Use Data

• To provide school ERP features including admissions, student records, attendance, fees, exams, documents, notices, and reports.
• To authenticate users, manage roles, protect school workspaces, and prevent unauthorized access.
• To send school-related messages by email or WhatsApp, including OTPs, notices, fee reminders, and attendance updates.
• To verify teacher attendance against the configured school location.
• To generate documents, ID cards, receipts, reports, and AI-assisted school content when requested by authorized users.
• To troubleshoot, secure, maintain, and improve the platform.

We do not sell personal or sensitive user data. We do not use student, parent, teacher, or school data for advertising.

4. Sharing and Third Parties

We share data only as needed to provide the service, comply with law, or protect the platform. Service providers may process data for us under their own security and privacy terms:

• Supabase for authentication, database, storage, and backend services.
• Hosting and infrastructure providers used to run the web app and APIs.
• Meta WhatsApp Cloud API for WhatsApp Business messaging requested by schools.
• Resend or configured SMTP providers for email delivery.
• Anthropic when authorized users use AI features for text, insights, or document layout assistance.
• Legal, regulatory, or safety authorities when required by applicable law.

5. Location Data

NaySha EduCore uses location only for attendance features. Admins may use their current location to set school coordinates. Teachers may use their current location to check in or check out. We collect latitude, longitude, accuracy, timestamp, and distance from the configured school location. We do not collect location in the background, and we do not use location for advertising or tracking outside attendance.

6. Security

We use HTTPS/TLS in transit, provider-managed encryption at rest where available, role-based access controls, school-level access checks, and authentication sessions. Sensitive operational secrets are stored on the server side. No security method is perfect, but we use reasonable technical and organizational safeguards for the data handled by the platform.

7. Cookies and Local Storage

We use essential cookies and browser storage for login sessions, security checks, account routing, user preferences, and short-lived OAuth or verification flows. We do not use advertising cookies in the app.

8. Data Retention and Deletion

School records are retained while the school account or subscription is active, unless deletion is requested earlier by an authorized person. Account deletion requests are processed after verification. Associated personal data is deleted within 30 days unless we must retain limited records for legal, security, fraud-prevention, accounting, audit, or dispute-resolution reasons.

You can request deletion from within the app where available, or outside the app through our Data Deletion Instructions.

9. Children and Students

NaySha EduCore is intended for schools, staff, and parents. Students and children do not create public accounts directly. Student data, including data about minors, is provided by schools or authorized users for school administration. Parents or guardians may contact the school or Groenics to request access, correction, or deletion of their child's data, subject to school records requirements and applicable law.

10. Your Choices and Rights

• Access, correct, or update account and school records through authorized app features.
• Request deletion of account or personal data.
• Withdraw from optional WhatsApp or email communications by contacting the school or Groenics.
• Deny location permission; attendance GPS features will not work without location access.

11. Changes to This Policy

We may update this policy from time to time. We will post the updated policy on this page with a new effective date. Material changes may also be communicated to school administrators through the app or email.

12. Contact Us

Groenics
NaySha EduCore privacy contact: support@naysha.online