Privacy Policy
Version 1.1, effective 7 October 2026.
This policy explains how DeinX Technologies ("we", "us"), which provides the Dein School service, handles personal data when you use the Dein School website, the Dein School web application and the Dein School mobile app for Android and iOS (together, the "Service"). DeinX Technologies is the developer of the Dein School app on Google Play and the App Store.
In short: schools use Dein School to keep their records and to reach parents and staff. Your school creates your account and decides what it records. We do not sell personal data, we show no advertising, the app never tracks you across other apps, and we do not handle money. For any privacy question, write to info@deinxtechnologies.com.
1. Who is responsible for your data
Dein School is software that schools use to run their administration. Two different organisations are responsible for personal data, depending on what the data is.
Your school is responsible for school records. When a school uses Dein School, the school decides what information it records about its students, parents and staff, and why. Under the Digital Personal Data Protection Act, 2023 (the "DPDP Act"), the school is the Data Fiduciary for those records. We process them only on the school's instructions, as its Data Processor, under our Data Processing Agreement. If you want to see, correct or delete a school record, start with your school.
We are responsible for a small amount of data of our own. We are the Data Fiduciary for the data we collect for our own purposes: the phone numbers and sessions that let you sign in, product usage analytics, messages you send us, and contact details of schools that ask us about the Service.
2. What we process
Students
Students do not have accounts and never sign in. Everything about a student is entered by their school, or by a parent through a form the school sends. Depending on which features the school uses, this can include:
- name (in English and Tamil), date of birth, gender, photo, class and section, roll and admission numbers, and the history of class changes;
- attendance, marks and exam results, homework, certificates such as the Transfer Certificate, library loans, bus route and stop, and hostel room;
- fee dues, payments the school records and receipts;
- documents the school or parent uploads.
Some schools choose to record additional details during admission: religion, caste and category, disability, blood group, address, and parents' occupation and annual income. These are sensitive. They are collected only when the school turns the field on, and they are visible only to the school's authorised staff. Dein School does not collect identity card numbers or copies of identity cards.
Parents and guardians
- name, mobile number, email address if given, and relationship to the student;
- messages and inquiries you send the school through the app, and files you attach;
- a fee payment you report to the school: the amount, date, payment method, transaction or cheque number, and an optional image of the payment. It goes to your school for it to confirm, and we store it for the school;
- your choice to receive WhatsApp messages, including when you gave or withdrew it;
- a device token that lets us deliver push notifications to your phone.
School staff and administrators
- name, mobile number, designation, the classes and subjects you are assigned, and the features your school has granted you;
- staff documents your school uploads, your attendance and leave records;
- a record of changes you make to attendance, marks, staff records, access and the library, showing who made the change and when.
Visitors to a school
If a school uses the front office feature, it may record a visitor's name, phone number, purpose of visit and an optional photo.
Everyone who signs in
- the mobile number you sign in with and the one time passwords we send to it;
- your session, and a record of when you signed in;
- the IP address of sign in attempts and public form submissions, which we use to stop abuse such as repeated guessing.
Device and app information
When you use the mobile app we receive your device's operating system and version, the app version, and a push notification token for your device. We use them to deliver notifications, keep the app working on your device and fix problems. The web application keeps your sign in session in your browser's storage so you stay signed in.
Fees
Dein School is fee management software. It does not process, collect, hold or transfer payments, and it never asks for your card, UPI PIN or bank login. Parents pay the school directly, by the methods the school offers, such as cash, cheque, UPI or bank transfer. The school records the payment in Dein School, which keeps the fee ledger and issues the receipt. The school's own UPI ID, bank account details and payment QR code may be shown in the app so that parents know where to pay.
Product analytics
In the production apps we record how the Service is used: which screens are opened and which buttons are used, together with your user ID, role, school ID and platform, and the device, browser and approximate location (city or region) derived from your IP address. We do not record the contents of what you type, we do not record your screen, and we never send names, phone numbers or student details to analytics. On the web, analytics is sent through our own web address and kept in your browser's storage. We use analytics only to fix problems and improve the Service, never for advertising. Product analytics never runs on accounts in our internal back office.
App updates
The mobile app can download updates to its own code, such as bug fixes and wording changes, without a new download from the app store. To check for an update, the app contacts the Expo update service with an installation ID (a random number that identifies the installation, not you), your phone's operating system, and the app's version and update number. Your IP address is visible to that service, as it is to any website. No account, school or student data is sent. Updates never add permissions; anything that needs a new permission comes through the app store.
Location
- Bus drivers: while a driver runs a trip, the driver's phone shares its location so parents can see the bus. The location is broadcast live and is not stored. Location sharing stops when the trip ends.
- Parents: a parent may choose to show their own position on the bus map. That position is drawn by your phone's map and stays on your phone. It is never sent to us.
AI Connect
A school user on a plan that includes AI Connect can connect an AI assistant of their own choice. When they do, the assistant acts as that user. It can read only what that user's Dein School login is allowed to see, and the data it reads is sent to the AI provider the user chose, under that provider's own terms. Religion, caste and community are never shared with the assistant, and phone numbers are masked. Nothing is sent to an AI provider unless a school user connects an assistant.
Website visitors
On the marketing website (deinschool.com) we use Google Analytics to understand how the site is used: which pages are viewed, how far they are scrolled, which links are clicked, and the device, browser and approximate location (city or region) Google reports for each visit. Google Analytics sets cookies in your browser to tell repeat visits apart. We never send it your name, email address or phone number, and we use it only to improve the website. You can block these cookies in your browser settings, or with Google's opt-out add-on at https://tools.google.com/dlpage/gaoptout. The apps do not use Google Analytics.
If you email us or message us on WhatsApp, we receive what you send.
3. Permissions the app asks for
The Dein School mobile app asks for a permission only when you use the feature that needs it. Every permission is optional. You can refuse it, and you can take it back at any time in your phone's settings. The rest of the app keeps working.
| Permission | What it is used for |
|---|---|
| Camera | Taking a profile photo, photographing homework, or photographing a problem you want to report. Nothing is captured until you take a picture. |
| Photos | Choosing a picture for a profile photo, homework, a fee payment proof or a problem report. The app uses your phone's photo picker, so it sees only the pictures you pick. It never gets access to your whole photo library. |
| Location | Only for bus drivers, and only while a driver shares a trip. It keeps working when the screen is locked during that trip, and stops when the trip ends. A parent can also show their own position on the bus map. That position stays on the phone and is never sent to us. |
| Notifications | Alerts such as attendance, fees, results, announcements and bus updates. A notification can show your child's name on your lock screen. You can turn them off in your phone's settings. |
The app never reads your contacts, SMS messages, call logs or files other than the pictures you pick, and never uses your microphone. It does not use the advertising ID on Android or iPhone, and it shows no advertising.
4. Why we process it
We process personal data to:
- provide the Service to your school: keep its records, show them to the right people, and send the notices and alerts the school chooses to send;
- sign you in securely and keep accounts safe, including detecting and blocking abuse;
- deliver notifications by push, SMS and, if you opted in, WhatsApp;
- support you when you ask for help;
- understand which parts of the Service are used, so we can fix problems and improve it;
- meet our legal obligations, including tax and security incident reporting.
We do not sell personal data, we do not show advertising, and we do not use student data to build profiles, to track or monitor children's behaviour, or to target anything at children.
5. Children's data
Most students are under 18, so their data is children's data under the DPDP Act. The app is meant for parents and school staff, who must be 18 or older. Students never sign in to Dein School, so a child never uses the Service directly. The school collects the data, and under section 9 of the DPDP Act the school is responsible for obtaining verifiable consent from a parent or lawful guardian before it processes a child's data. We process it only to provide the Service to the school. We do not track or monitor children's behaviour, we do not direct advertising at children, and we never sell data.
6. Who we share it with
Inside a school, data is shown only to people the school authorises: its administrators, staff according to the permissions the school grants, and each parent for their own children. Each school's data is kept separate from every other school's.
We use the service providers below to run the Service. Each processes data only to provide its service to us or to the school, under contracts that require it to protect the data.
| Provider | What it does for the Service |
|---|---|
| Supabase | Database, sign in and file storage |
| Google Firebase Cloud Messaging | Push notifications to Android phones |
| Apple Push Notification service | Push notifications to iPhones |
| Expo push service | Routes push notifications to Google and Apple |
| PostHog | Product analytics in the apps |
| Google Analytics | Analytics on the marketing website only |
| Meta WhatsApp Business Platform | WhatsApp messages to parents who opted in |
| MSG91 | One time passwords and SMS |
| Expo update service | Delivers app updates to the mobile app |
| Google Maps Platform | Map display for live bus tracking |
If a school user connects their own AI assistant through AI Connect, the AI provider they chose also receives the data that assistant reads, as described in section 2. We do not choose that provider.
Some of these providers are located outside India, including in the United States. We may also disclose data when the law requires it, for example to comply with a court order or a lawful request from a government authority. Schools can ask us for this list at any time at info@deinxtechnologies.com.
7. Transfers outside India
Our database and file storage are in Mumbai, India. Some providers above process data outside India, including PostHog, Expo, Google and Meta. We transfer data only to countries the Government of India has not restricted under the DPDP Act, and only for the purposes in this policy.
8. How long we keep it
These periods apply to data we hold ourselves or on behalf of a school.
| Data | How long |
|---|---|
| School and account data | For the subscription, plus 30 days after the school leaves. Deletion of a school is permanent |
| Backups | 30 days |
| Product analytics | 1 year. Analytics records are pseudonymous and expire after this period |
| Sign in logs, including IP addresses | 1 year |
| Support tickets and deletion requests | 1 year |
| Push notification tokens | Until you sign out or your account is deleted |
| Live bus location | Never stored |
If you ask us to delete your account, we remove your sign in account and personal profile as described on the account deletion page. Records your school must keep, such as fee receipts or attendance, stay with the school.
9. How we protect it
We protect personal data with:
- encryption of all traffic with TLS, and encryption at rest by our hosting providers;
- database rules that keep each school's data separate, checked by an automated test suite;
- sign in by one time password, with rate limits and lockouts against guessing;
- access for staff that is off by default until the school grants it;
- private file storage, shown through links that expire after a few minutes;
- a record of who changed attendance, marks, staff records and access.
More detail is on our Security page. If a breach affects your data, we tell the affected schools within 24 hours and report it to CERT-In where the law requires.
10. Your rights
Under the DPDP Act you may:
- ask for a summary of the personal data processed about you and who it was shared with;
- ask for inaccurate or incomplete data to be corrected, completed or updated;
- ask for data to be erased when it is no longer needed, unless the law requires it to be kept;
- withdraw any consent you gave, for example to WhatsApp messages, as easily as you gave it;
- nominate another person to exercise these rights if you die or become unable to;
- have a complaint heard by our Grievance Officer.
For school records, contact your school first. It is the Data Fiduciary and decides what happens to those records. If you cannot resolve it with the school, or if your request concerns data we hold for our own purposes, write to info@deinxtechnologies.com. We may need to confirm your identity before acting on a request.
You can turn WhatsApp messages off at any time in the app under notification settings. To delete your account, see the account deletion page.
11. Grievance Officer
If you have a concern about how your data is handled, contact our Grievance Officer:
- Name: Saravanan Krishnasamy
- Email: info@deinxtechnologies.com
- Address: No. 22, Gopalsamy Kovil Street, Ganapathy, Coimbatore 641006, Tamil Nadu, India
We will acknowledge your complaint promptly and aim to resolve it within one month. If you are not satisfied with our response, you may complain to the Data Protection Board of India.
12. Changes to this policy
We will update this policy when the Service or the law changes. The version and effective date at the top show which version you are reading. If a change materially affects how we use your data, we will tell schools in advance and show a notice in the apps.
13. Contact
DeinX Technologies, No. 22, Gopalsamy Kovil Street, Ganapathy, Coimbatore 641006, Tamil Nadu, India. Email: info@deinxtechnologies.com. Phone: +91 82206 50780.