Janacode Technologies LLP (“Company”, “We”, “Us”) is committed to protecting the privacy and security of all personal data processed through Abhyas OS. This Privacy Policy explains what information we collect, how we use and protect it, and your rights as a data subject. This Policy is incorporated into and forms part of the Terms and Conditions of Use.
This Privacy Policy applies to all Users of Abhyas OS including Principal Users, Teacher Users, and Parent Users, as well as the personal data of students processed by Institutions through the Platform.
17. Information we collect
17.1 Principal Portal — data collected
- Identity data: full name, designation, employee ID, and contact details.
- Authentication data: username, hashed password, session tokens, two-factor authentication data.
- Administrative data: branch configurations, timetable data, notice content, proxy assignments, calendar events.
- Usage data: login timestamps, IP addresses, device identifiers, browser and app information, feature usage logs.
17.2 Teachers’ Portal — data collected
- Identity data: full name, employee ID, assigned subjects and classes, contact details.
- Authentication data: login credentials and session management data.
- Teaching data: attendance records marked, notices issued, subject assignments, timetable data.
- Communication data: content of notices and messages composed and sent through the Platform.
- Usage data: login patterns, feature access logs, session durations.
17.3 Parents’ Application — data collected
- Identity data: full name, relationship to student, contact number, email address.
- Authentication data: login credentials, session tokens.
- Linked student data: name of linked student(s), enrollment details, class and section.
- Engagement data: content viewed (notices, attendance records, performance reports, leaderboards, study plans, career guidance modules), interaction timestamps.
- Device data: device model, operating system version, push notification token, app version.
17.4 Student data processed on behalf of Institutions
Abhyas OS processes the following Student Data on behalf of Institutions as a Data Processor under their direction:
- Student identity information (name, enrollment number, class, section, date of birth).
- Attendance records (date-wise, subject-wise presence, absence, or late markers).
- Academic performance data (subject scores, grades, examination results, progress reports).
- Career assessment and study plan recommendations.
- Leaderboard ranking data (where enabled by the Institution).
The Institution is the Data Controller for Student Data. The Company processes such data only in accordance with Institution instructions and applicable law.
17.5 Automatically collected data
- Log data including IP addresses, access times, pages viewed, and errors encountered.
- Device information including hardware model, operating system, and unique device identifiers.
- Analytics data to improve Platform performance and user experience.
18. How we use your information
The Company processes personal data for the following lawful purposes:
- Platform provision: to authenticate Users, provide access to authorized features, and deliver the core functionality of Abhyas OS.
- Institutional operations: to enable Institutions to manage attendance, timetables, communication, academic tracking, and student-parent engagement.
- Communication delivery: to route notices, announcements, and updates from the Institution and Teachers to Parent Users.
- Security and fraud prevention: to monitor for unauthorized access, detect anomalies, and protect the integrity of the Platform.
- Technical operations: to maintain, troubleshoot, backup, and improve the Platform.
- Legal compliance: to comply with applicable laws, court orders, and regulatory requirements.
- Analytics and product improvement: aggregated, anonymized usage analytics to improve Platform features. No individual User is identified in such analytics.
We do not sell, rent, or commercially exploit personal data of Users or students to third parties for advertising, marketing, or commercial profiling purposes.
19. Data sharing and disclosure
19.1 Within the Institution
Principal Users have administrative access to data within their authorized Institution branches. Teacher Users have access only to data of students in their assigned classes and subjects. Parent Users have access only to data of their registered children.
19.2 Service providers
The Company engages trusted third-party service providers (cloud hosting, database services, push notification services, analytics) who process data solely on the Company’s instructions under appropriate data processing agreements with equivalent data protection standards.
19.3 Legal obligations
We may disclose personal data where required by law, court order, government authority, or regulatory directive, to the extent required and permitted by applicable Indian law.
19.4 Business transfers
In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred to the successor entity, which shall be bound by equivalent data protection obligations. Users will be notified of any such material change.
19.5 No third-party advertising
Abhyas OS does not share User Data or Student Data with advertisers, data brokers, or third-party marketing entities.
20. Data security
Janacode Technologies LLP implements industry-standard technical and organizational security measures to protect personal data from unauthorized access, disclosure, alteration, or destruction, including:
- Encryption of data in transit using TLS/SSL protocols.
- Encryption of sensitive data at rest.
- Role-based access controls limiting data access to authorized personnel.
- Regular security audits, vulnerability assessments, and penetration testing.
- Secure password hashing using industry-standard algorithms.
- Multi-factor authentication options for administrative accounts.
- Incident response procedures for data breaches.
No system is entirely immune to security risks. Users are encouraged to maintain strong passwords and report suspicious activity immediately. In the event of a data breach affecting Users’ rights, the Company will notify affected Users and the relevant regulatory authority as required by applicable law.
21. Data retention
The Company retains personal data only for as long as necessary for the purposes described in this Policy, or as required by applicable law, including:
- Active User account data is retained for the duration of the Subscription and User account.
- Student academic records are retained for the duration of the Subscription, and for such period thereafter as mandated by applicable educational regulations or the Institution agreement.
- Attendance and notice logs are retained for a minimum of three (3) academic years for compliance and audit purposes.
- Authentication and security logs are retained for twelve (12) months.
Following account or Subscription termination, non-regulatory data is purged within ninety (90) days in accordance with the data deletion policy below.
22. Right to data deletion
This section sets out the data deletion rights and procedures applicable to all Users of Abhyas OS.
22.1 Individual user deletion requests
Parent Users and Teacher Users have the right to request deletion of their personal account data by submitting a written request to:
- Email: info@janacode.com
- Subject line: Abhyas OS — Data Deletion Request
- Response time: within 30 (thirty) working days of a verified request
Upon receiving a verified deletion request, the Company will:
- Delete the User’s personal profile data, contact information, and authentication credentials.
- Remove access to the Platform permanently.
- Anonymize or delete engagement and usage data associated with the account.
- Confirm completion of deletion via email to the requesting User.
22.2 Limitations on deletion
Certain data cannot be deleted immediately or at all, where:
- Retention is required by applicable law, court order, or regulatory directive (for example, educational records mandated by state boards or the Ministry of Education).
- The data constitutes part of institutional audit trails that the Institution is legally required to maintain.
- Deletion would prejudice ongoing legal proceedings or regulatory investigations.
- The data relates to Student Data for which the Institution (as Data Controller) has not authorized deletion. In such cases, the request must be directed to the Institution Administrator.
Where full deletion is not possible, the Company will notify the User of the specific data that cannot be deleted and the legal basis for retention.
22.3 Institutional data deletion
Upon termination of an Institution’s Subscription:
- The Institution Administrator may request a full data export within 30 days of termination.
- Following the 30-day export window, all Student Data, User Data, and Institutional Data associated with the account will be permanently and irreversibly deleted from the Company’s production systems within 60 days.
- Residual copies in encrypted backup systems will be purged within 90 days of the next backup cycle.
- The Company will provide written confirmation of deletion upon request.
22.4 Application store account deletion
In compliance with Google Play Store and Apple App Store requirements:
- Parent Users accessing Abhyas OS through the mobile application may initiate account deletion directly within the application through Settings, then Account, then Delete My Account.
- Alternatively, deletion may be requested via email to info@janacode.com with the subject “Abhyas OS — In-App Account Deletion Request.”
- Upon verification, account data will be deleted within 30 working days and a confirmation will be sent to the registered email address.
- Users will be informed of any data categories that must be retained for legal compliance and the applicable retention period.
22.5 Data deletion verification
All deletion requests require identity verification to prevent unauthorized deletion of accounts. Verification may include confirmation of the registered email address, institutional enrollment information, or OTP authentication.
23. Children’s data
Abhyas OS processes personal data of students who may be minors (under 18 years of age) solely in its capacity as a Data Processor acting under the instruction and authority of Institutions (as Data Controllers) and Parent Users. The Company does not independently collect personal information from minors without parental consent. If you believe your child’s information has been improperly processed, please contact us immediately at info@janacode.com. We will investigate and take appropriate remedial action promptly.
24. Cookies and tracking technologies
The web-based portals of Abhyas OS use session cookies and local storage for authentication and session management. We do not use third-party advertising cookies or tracking pixels. Analytics tools used are configured to anonymize IP addresses and do not identify individual Users. Users may configure browser settings to restrict cookies; however, disabling session cookies may impair Platform functionality.
25. User rights
Subject to applicable Indian law (including the Digital Personal Data Protection Act, 2023, upon its operative implementation), Users have the following rights:
- Right of access: to receive confirmation of whether we process your personal data and obtain a copy thereof.
- Right to correction: to request correction of inaccurate or incomplete personal data.
- Right to erasure: to request deletion of personal data in accordance with section 22 of this Policy.
- Right to data portability: to request export of your personal data in a commonly used machine-readable format.
- Right to restrict processing: to request restriction of processing in specified circumstances.
- Right to object: to object to processing where the Company relies on legitimate interests as its lawful basis.
- Right to withdraw consent: where processing is based on consent, to withdraw such consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at info@janacode.com. We will respond within 30 working days. Where we are unable to fulfill a request, we will explain the reason and any available redress.
26. Cross-border data transfers
Abhyas OS is primarily hosted on servers located within India. In the event that data processing involves transfer of personal data outside India (for example, through cloud service providers with global infrastructure), such transfers are governed by appropriate contractual safeguards including Standard Contractual Clauses or equivalent mechanisms as prescribed by applicable Indian data protection law.
27. Changes to this Privacy Policy
The Company reserves the right to update this Privacy Policy to reflect changes in law, technology, or our data practices. Material changes will be communicated to Users via in-app notification and/or email to registered addresses at least 15 days prior to the change taking effect. The “Last Updated” date at the top of this page will be revised accordingly. Continued use of Abhyas OS following notification constitutes acceptance of the updated Privacy Policy.
28. Contact information
For all privacy-related queries, data deletion requests, grievances, or to exercise data rights, contact:
- Company name: Janacode Technologies LLP
- Product: Abhyas OS
- Privacy contact: info@janacode.com
In accordance with the Information Technology Act, 2000 and applicable rules, our designated Grievance Officer is responsible for addressing User grievances regarding data handling. Grievances must be submitted in writing to info@janacode.com and will be acknowledged within 24 hours and resolved within 30 days.
By accessing or using Abhyas OS, you acknowledge that you have read, understood, and agree to be legally bound by the Terms and Conditions and this Privacy Policy, including the data deletion provisions set out in section 22.