Privacy Policy

WEBNIFY is a school management and learning platform. Schools use it to run academics, fees, attendance and communication, and students use it to access classes, study material and online video courses. We take the privacy of students, parents and staff seriously, and we comply with India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”).

Our role. For data belonging to a school’s own students and staff, the school is the data fiduciary and WEBNIFY acts as a data processor on the school’s behalf. For students who sign up directly to buy online courses (without a school), WEBNIFY is the data fiduciary.

1. Information we collect

Account & profile

• Name, guardian/student phone number, and (for direct course students) email address.
• A password you set for sign-in (stored only in hashed form).
• Class / exam, medium, and city/state you select when registering for courses.
• For school students: the academic profile your school maintains — class, section, roll number, attendance, marks, fees, homework and similar records you are entitled to view.

Payments

When you buy a course, payments are processed by our payment gateway, Razorpay. Card, UPI and bank details are entered directly with Razorpay and are never stored on our servers. We retain only a payment reference, the amount, and what was purchased, so we can grant access and show your purchase history.

Device & usage

• A push-notification token (via Expo/Google FCM) so we can send class and school updates. You can disable notifications at any time in your device settings.
• Course watch progress (which lessons you’ve watched and where you stopped) so you can resume.
• Basic technical logs needed to operate and secure the service.

Location (optional)

Some staff features let you save a school’s location. Location is used only when you actively use that feature and grant permission; it is never collected in the background. Most students never need to grant location access.

Downloaded content

If you download a lesson or notes for offline use, the files are stored in the app’s private storage on your own device, bound to your account, and are removed when you delete the download or sign out.

2. How we use your information

• To provide the service: sign you in, show your school records, deliver classes and notes, and play purchased courses.
• To process course purchases and grant the correct access for the validity period.
• To send school and class notifications you’ve opted into.
• To keep the platform secure, prevent fraud and abuse, and meet legal obligations.

We do not sell your personal data, we do not use it for third-party advertising, and we do not run ad-tracking or fingerprinting in the app.

3. When we share information

We share data only with service providers that help us run WEBNIFY, and only to the extent needed:

• Razorpay — to process payments (governed by Razorpay’s own privacy policy).
• Google Firebase Cloud Messaging / Expo — to deliver push notifications.
• Cloud hosting & storage providers — to host the app’s servers and store course media securely.
• Your school — a school student’s records are visible to authorised staff of that student’s own school.

We may also disclose information if required by law, or to protect the rights and safety of our users.

4. Children & students

WEBNIFY is used by school students who may be under 18. Under the DPDP Act, data of a child is processed on the basis of parental or school (guardian) consent, and we do not use children’s data for tracking, behavioural monitoring or targeted advertising. A school student’s account is created and managed under their school’s authority; a parent or the school can request correction or deletion at any time (see Section 7).

5. How we protect your data

• All traffic is encrypted in transit (HTTPS/TLS).
• Each school’s data is isolated from every other school at the database layer.
• Paid course videos are AES-encrypted and streamed through access-checked, short-lived secure links; they are not publicly downloadable.
• Sign-in uses signed session tokens; passwords are stored hashed.

6. Data retention

We keep your data for as long as your account is active or as needed to provide the service and meet legal/accounting obligations. Course-purchase records are retained as required by financial regulations. When data is no longer needed, it is deleted or anonymised. You can request deletion at any time (Section 7).

7. Your rights & choices

• Access & correction — you can view and request correction of your data; school records can be corrected by your school admin.
• Deletion — you can request deletion of your account and associated personal data at any time. See our Account & Data Deletion page.
• Notifications — turn push notifications on/off in your device settings.
• Grievances — contact our grievance officer below; we respond within the timelines required by the DPDP Act.

8. Permissions the app may request

• Notifications — to deliver school/class updates.
• Location (optional) — only for the save-school-location feature, only while in use.
• Storage / media — to save offline lesson downloads in the app’s private space.

9. Changes to this policy

We may update this policy from time to time. We will revise the “Last updated” date above and, for material changes, notify you in the app.

10. Contact us

For any privacy question or to exercise your rights, contact our Grievance Officer:

• Email: support@webnify.co.in
• Phone: +91 70994 48221
• WEBNIFY CYBROSYS PRIVATE LIMITED, Guwahati, Assam, India — 781001