Privacy Policy — Kirihat EduCare

Effective Date: 1 May 2026

This Privacy Policy explains how Kirihat ("we", "our", "us") collects, uses, and protects information when you use the Kirihat EduCare and Kirihat EduTrack mobile applications.

1. Information We Collect

Account information: Mobile phone number (used for OTP-based login), guardian name.
Student data: Student name, class, section, roll number, date of birth, guardian contact, attendance records, fee payment records, exam results, NFC card identifiers, and student photograph (uploaded by school administrators).
Device information: Device type, operating system version — collected anonymously for crash reporting (Firebase Crashlytics).
Voice/audio: Microphone access is used only for KiriChat AI voice input. Audio is not stored on our servers.
Camera: Camera access is used for capturing student photographs. Photos are uploaded to secure cloud storage.

2. How We Use Your Information

To provide attendance tracking, fee management, result viewing, and school communication features.
To send push notifications for attendance alerts, fee reminders, and school updates.
To improve the app via anonymous crash reports.
We do not sell, rent, or share your personal data with third parties for marketing or advertising.

3. Data Storage & Security

All data is stored in Google Firebase (Firestore & Cloud Storage) on servers in the asia-south1 (Mumbai) region. Data in transit is encrypted via TLS. Access is controlled by Firebase Authentication and strict Firestore Security Rules.

4. Account Creation (Sign-Up Process)

Accounts are created in two ways:

Guardian accounts: Created automatically when a school administrator links a guardian's mobile number to a student. The guardian logs in using OTP sent to their registered mobile number — no password required.
School staff accounts: Created by a school administrator and linked to a staff member's mobile number or email address.

No account can be self-registered by a guardian or parent without prior enrollment by the school.

5. Guardian Access & Children's Data

Guardians can view attendance records, fee status, exam results, and school updates for their linked child. All guardian access is read-only. Guardians cannot modify any student records.

Student data belongs to the enrolling school. We handle this data on behalf of the school as a data processor.

6. Data Retention

School data is retained as long as the school's account is active. Student records are retained for the duration of the student's enrollment. After a school closes its account, data is deleted within 90 days.

7. Account Deletion

You may request deletion of your guardian account and associated data at any time:

In-app: Go to Profile → Delete My Account.
Web: Visit kirihateducare.web.app/delete-account.html and submit a deletion request.
Email: Send a request to support@kirihat.com with the subject "Account Deletion Request" and your registered mobile number.

Account deletion removes your login credentials and guardian profile. Student records (attendance, fees, results) remain with the school and are not deleted by a guardian account deletion request.

8. Firebase Services Used

Firebase Authentication: Phone OTP-based login
Cloud Firestore: Structured data storage
Firebase Cloud Storage: Student photo storage
Firebase Cloud Messaging (FCM): Push notifications
Firebase Crashlytics: Anonymous crash reporting
Firebase App Check: App integrity verification

9. Third-Party Services

We use Google Firebase (Google LLC) as our primary infrastructure provider. Google's privacy policy is available at policies.google.com/privacy.

10. Children's Privacy

Our apps are used to manage children's educational data. We do not knowingly allow children to create accounts directly. All student data is entered by school administrators. We comply with applicable laws regarding children's data, including India's Digital Personal Data Protection (DPDP) Act 2023.

11. Your Rights (DPDP Act 2023)

Right to access your personal data
Right to correction of inaccurate data
Right to erasure of your data
Right to grievance redressal

To exercise these rights, contact us at support@kirihat.com.

12. Contact Us

For privacy questions or concerns:
Email: support@kirihat.com
Address: Kirihat, Assam, India

13. Changes to This Policy

We may update this policy periodically. Continued use of the app after changes constitutes acceptance of the revised policy. We will notify users of material changes via in-app notification.