Privacy Policy

Effective Date: May 01, 2026

1. Introduction

GuruKhata ("we", "our", or "us"), operated by Tapas Dutta, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile application and related services.

2. Information We Collect

We collect the following types of information:

• Account Information: Name, email address, and profile picture obtained from your Google account when you sign in with Google. Phone number is optional and only collected if you choose to add it in your profile settings.
• Profile Information: Educational details, subjects taught, and other profile details you choose to provide.
• Transaction Data: Fees, lessons, attendance, and other educational records you create within the app.
• Student & Parent Data: Names of your students and their parents, and optionally their phone numbers and email addresses if you choose to enter them when adding a student. Fee amounts and payment records you record against each student are also stored.
• Device Information: Device tokens for push notifications, device type, and operating system version.
• Usage Data: App usage patterns, feature interactions, and error logs for improving our service.

3. How We Use Your Information

We use the collected information to:

• Provide and maintain the GuruKhata service.
• Process and manage your lessons, fees, and educational records.
• Enable the Parent-Teacher Connected Ecosystem for real-time updates.
• Send push notifications for lesson updates, fee reminders, and service alerts.
• Generate educational reports and analytics.
• Provide customer support and respond to your inquiries.
• Improve and optimize our application and services.
• Comply with legal obligations and enforce our terms.

4. Data Storage & Security

Your data is stored on secure servers with industry-standard encryption. We implement appropriate technical and organizational measures to protect your personal information, including:

• Encrypted data transmission using TLS/SSL.
• Secure token-based authentication (JWT).
• Encrypted storage of sensitive credentials on your device.
• Rate limiting to prevent unauthorized access attempts.
• Regular security audits and updates.

5. Third-Party Services

We may use the following third-party services:

• Google Sign-In: For account authentication. We receive your name, email address, profile picture, and a unique Google account identifier.
• Firebase Cloud Messaging (FCM): For delivering push notifications. We send your device's push token to FCM so notifications can be routed to your device.
• Google Play Billing: For purchasing and renewing in-app subscriptions. All payments are processed by Google Play; we do not see, store, or transmit your payment-card details.
• Expo: For delivering over-the-air JavaScript updates to the app. Expo's servers serve the latest app bundle to your device but do not receive your personal data.
• Cloud hosting providers: For secure data storage and processing of your records on our own servers.

These third-party services have their own privacy policies governing the use of your information.

6. Subscriptions & Billing

Paid subscription plans (Basic, Pro) are sold and managed exclusively through Google Play Billing. When you subscribe:

• Google Play handles your payment, renewal schedule, and cancellation. You can manage or cancel your subscription at any time from the Google Play Store account settings.
• GuruKhata receives only a Google Play purchase token and order ID tied to your account, which we store on our servers solely to verify your active plan and enforce student quota limits.
• We never receive credit-card numbers, debit-card numbers, UPI handles, bank-account numbers, or any other payment instrument data.
• If you cancel, your subscription remains active until the end of the current billing period; we are notified by Google Play and downgrade your plan automatically once it expires.
• Refunds are issued through Google Play in accordance with their refund policy. Refunded purchases revoke the associated subscription on our side automatically.

7. Your Rights

In accordance with India's Digital Personal Data Protection (DPDP) Act, 2023, you have the right to:

• Access: Request a summary of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete personal data.
• Erasure: Request deletion of your personal data, subject to legal retention requirements.
• Grievance Redressal: Lodge a complaint regarding the processing of your personal data.
• Nominate: Nominate another individual to exercise your rights in case of death or incapacity.

To exercise any of these rights, please contact us at tapasdutta@outlook.com.

8. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. Educational and financial records may be retained for a longer period as required by applicable laws in India. Upon account deletion, your personal data will be removed within 90 days, except where retention is required by law.

9. Children's Privacy

GuruKhata is intended for use by educators, tutors, and parents. While the service manages student data, accounts are managed by adults. We do not knowingly collect personal data directly from children under 13 without parental consent.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the app or via other communication channels. Continued use of the service after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us:

• Email: tapasdutta@outlook.com
• Company: Tapas Dutta