1) Who We Are
INVENTRIX (“we”, “our”, “us”) provides the Smartschoolz (the “App”) to support school administration, teaching, and parent–school communication.
Controller/Data Fiduciary. For GDPR/UK GDPR, we act as Data Controller. Under India’s DPDP Act, we act as the Data Fiduciary. In some cases, we may process data on behalf of a school, acting as a Processor/Data Processor.
2) Information We Collect
Personal & Academic Data
- Student profile: name, roll no., class/section, identifiers issued by the school;
- Parent/guardian: name, relationship, contact details;
- Academic records: attendance, timetable, assignments, assessments, results, feedback;
- Communication content: messages, announcements, activity logs.
Technical & Optional Data
- Device and log data: app version, OS, IP, timestamps, diagnostics;
- Media you upload (homework photos, project videos) where enabled;
- Optional permissions: camera, microphone, storage, notifications, location (if a feature needs it).
Minimisation. We collect only what is necessary for educational purposes and school operations.
3) How We Use Information
- Operate the App: attendance, homework, grading, reports, fees, transport (if applicable);
- Communicate with parents/guardians and students (alerts, circulars, reminders);
- Ensure safety, integrity, fraud prevention, and abuse detection;
- Improve features, accessibility, performance, and security;
- Comply with legal obligations and respond to lawful requests.
No selling of personal data. We do not sell personal information or use student data for targeted advertising.
4) Legal Bases & Consent
DPDP (India)
- Consent: Parental/guardian consent for children’s data; ability to withdraw consent.
- Legitimate uses: Performance of educational functions, compliance with law, and emergencies.
GDPR / UK GDPR
- Legal bases: Consent (esp. children), performance of a task in public interest/official authority (for public schools), contract, legitimate interests, legal obligation, vital interests.
- Transfers: Appropriate safeguards for cross-border transfers (SCCs or equivalent).
COPPA (US). For users under 13 in the US, we obtain verifiable parental consent before collecting personal information where required.
6) Data Retention
We retain personal data only as long as necessary for educational and administrative purposes, or as required by law. When no longer needed, we securely delete or de-identify it.
| Category | Typical Retention | Basis |
|---|---|---|
| Student academic records | Duration of enrolment + statutory period | Education law / school policy |
| Communication logs | 12–24 months | Operational necessity |
| Backups | Rolling backups (e.g., 30–90 days) | Security & resilience |
7) Security
- Encryption in transit (HTTPS/TLS) and at rest where applicable;
- Role-based access controls; staff training & confidentiality;
- Regular patching, logging, and audits.
If we become aware of a data breach that risks harm, we will notify affected users and regulators as required by law (e.g., DPDP, GDPR).
8) Your Rights
Parents/Guardians & Students
- Access, correction, update, and deletion (subject to school/legal requirements);
- Withdraw consent and opt out of optional features;
- Portability (where applicable), and restriction/objection to certain processing.
How to Exercise
- Use in-app controls (where available) or contact us (see Contact);
- We may verify your identity and relationship to the student;
- We respond within statutory timeframes.
Supervisory Authorities & Redress
India (DPDP): You may lodge a complaint with the Data Protection Board of India if you believe your rights are infringed.
EU/UK (GDPR): You may complain to your local Data Protection Authority, without prejudice to other remedies.
9) Children’s Privacy
The App is used in an educational context. Children use the App under school and/or parental supervision. We do not knowingly collect personal data from a child without the school’s authorisation and (where required) verifiable parental consent.
11) Changes to this Policy
We may update this Policy to reflect changes in law or our services. Significant changes will be notified in-app or by email. Please review this page periodically.
12) Contact & Grievance / DPO
Primary Contact
INVENTRIX
Email: admin@inventrix.co.in
Phone: [+91-9440177456]
Address: SPCA Road, Kakinada
Grievance Officer / DPO
Name: Krishna
Email: admin@inventrix.co.in
Phone: 9440177456
Address: SPCA Road, Kakinada