Privacy Policy
NAALAI shows parents what their child needs for tomorrow: homework, notices, things to bring and forms to sign. To do that we handle information about schools, teachers, parents and children. This page explains what we collect, why, who we share it with, how we protect it and how you can control it.
- No ads, everWe do not show ads and never sell or rent anyone's data.
- Children come firstWe do not track children or build profiles of them. A parent gives consent for each child.
- Stored in IndiaThe main database and files are kept in Mumbai, India.
- You stay in controlSee, correct or delete your data, and withdraw consent, from the app or by email.
1. Who we are
NAALAI is run by Prakash K, a sole proprietor trading as “NAALAI”, based in Chennai, Tamil Nadu, India. Contact: [email protected].
Grievance Officer: Prakash K, [email protected]. Write to this person with any question or complaint about your data.
2. Our role and the school's role
- School information (classes, students, homework, notices, attendance) is decided by the school. For this information the school is responsible for having the right to share it, and NAALAI handles it on the school's behalf and only on its instructions.
- Your own NAALAI account (your login, app settings, consents and subscription) is handled by NAALAI directly, and NAALAI is responsible for it.
3. What we collect
| Information | Examples | Where it comes from |
|---|---|---|
| Account | Name, mobile number or email, role (teacher, parent, admin), language | You, or your school when it invites you |
| Child's school details | Child's name, school, class and section, roll number | The school |
| School posts | Homework, notices, events, due dates, attached files and links | Teachers and school staff |
| Hand-ins | Photos or files of the child's work, and the teacher's review | Parents, students and teachers |
| Consents and signatures | Your ticks, drawn signature, the time, device and a one-time code check | You, when you sign a form or give consent |
| Subscription status | Plan, trial and renewal dates, receipt ID | Apple App Store or Google Play. We never see your card, UPI or bank details. |
| Device and security | Notification token, app version, device type, IP address, sign-in times, error reports | Your device, automatically |
What we do not collect
- No precise location, contacts, advertising IDs or browsing history.
- No government ID numbers, birth certificates or home addresses.
- No photos of children, except work that a parent or student chooses to hand in.
4. Why we use it
- To show each family the right homework, notices and reminders for their child.
- To let parents and students hand in work, and teachers review it.
- To send notifications you have switched on.
- To record consents and signed forms so the school has proof.
- To check subscriptions and unlock the app.
- To keep NAALAI safe: stop misuse, scan files, check links and fix errors.
- To meet legal duties.
We do not use anyone's data for advertising, and we do not train AI models on school or family data.
5. Children
- Children use NAALAI only through a parent's account or an account the school creates. Kid mode on a parent's phone is protected by the parent's PIN.
- For every child, a parent or guardian gives consent before the child's details are shown in the app. See Parent consent.
- We do not track children's behaviour, build profiles of them or target anything at them.
6. Who we share it with
Only with the people and services needed to run NAALAI:
- Your school: the teachers and staff who teach your child, within the class and section they are assigned to.
- Service providers that work for us under contract:
- Supabase: database, sign-in and file storage, hosted in Mumbai, India.
- Cloudflare: website hosting and protection.
- Google Firebase Cloud Messaging and Apple Push Notification service: notifications.
- Apple App Store and Google Play: subscriptions and payments.
- Email and WhatsApp or SMS providers: sign-in codes and messages you asked for.
- Google Web Risk: checks web links for danger. Only the link address is sent.
- Authorities, only when the law requires it.
Some of these providers may process small amounts of data outside India (for example, notification delivery). They are bound to protect it.
7. How we protect it
- Encryption when data travels (HTTPS) and when it is stored.
- Database rules that let each school see only its own data, and each parent only their own children.
- Private files, opened only through short-lived links after a permission check.
- Every uploaded file is checked for viruses and wrong file types before anyone can open it. Every web link is checked against lists of harmful sites.
- One-time codes for sign-in and for signing forms, records of who changed what, and daily backups.
If a breach affects your data, we will tell you and the Data Protection Board of India as the law requires.
8. How long we keep it
- Account and school data: while your account or the school's plan is active.
- After you delete your account, or the school ends its plan: deleted or made anonymous within 90 days. Backups expire within 7 days after that.
- Signed forms and consent records: kept for as long as the school needs them as proof, or the law requires.
9. Your rights
Under India's Digital Personal Data Protection Act, 2023 you can:
- Get a summary of the data we hold about you and your child.
- Correct or complete it.
- Delete it, and delete your account from inside the app.
- Withdraw consent at any time. It is as easy as giving it.
- Name someone to act for you if you cannot.
- Complain to our Grievance Officer. If you are not satisfied, complain to the Data Protection Board of India.
Use Settings → Privacy in the app, or email [email protected]. We reply within 7 days and resolve requests within the time the law allows.
10. Changes to this policy
When we change this policy we update the version and date above. For important changes we tell you in the app and, where needed, ask for your consent again.