Who this covers

This policy applies to everyone who uses StudyBuddy: institute owners and admins, teachers, students, and the parents/guardians who receive attendance and fee updates — on the web app, the Android app, and over WhatsApp.

What we collect

An institute enters this information about the people it teaches; StudyBuddy does not buy or scrape it from anywhere else.

• Names and phone numbers — of students, guardians, teachers and staff. A phone number is how someone signs in and how attendance, fee and announcement alerts reach them. Many fields (a student's own number, a guardian's number) are optional and are commonly left blank, especially for younger students.
• Email and password — for institute owners/admins who sign in with a password rather than a phone OTP. Passwords are stored as salted hashes, never in plain text.
• Attendance records — present/absent/late marks per student per class session.
• Fee schedules and payment records — amounts due and what an institute has recorded as received. StudyBuddy has no payment gateway: it never collects, processes or touches an actual payment. Parents pay the institute directly, and staff log what was paid.
• Shared study material links — titles and URLs a teacher chooses to share (e.g. a Google Drive link), not the files themselves.
• Device push token — issued by Firebase Cloud Messaging to a phone that installs the Android app, so it can receive notifications. Removed when a device stops being used.
• Basic usage data — sign-in timestamps and standard server request logs (IP address, timestamp, endpoint), kept for security and debugging.

Children's information

A coaching institute inherently manages information about students who are often minors. That information is entered by the institute (or a parent), never collected directly from a child by us, and is used only to run that institute's own attendance and fee records — never for advertising, and never shown to anyone outside that student's own institute and guardians. A parent or institute admin can ask us to delete a student's data at any time (see “Your choices” below).

How we use it

• Mark and show attendance to teachers and parents.
• Send fee-due reminders and attendance/announcement alerts, over push notification and WhatsApp.
• Let a student or parent sign in and see only their own child's records.
• Operate, secure and improve the product — for example, seeing which features fail.

We do not sell personal data, and we do not run advertising inside StudyBuddy.

Who we share it with

• Meta (WhatsApp Business Platform) — to deliver approved message templates (attendance alerts, fee reminders, invites) to the phone numbers an institute has on file.
• Google (Firebase Cloud Messaging) — to deliver in-app push notifications to the Android app.
• Other people at the same institute — a student's data is visible to that institute's admins and to the teachers of the batches they are enrolled in, and to their own linked guardians. It is never visible across institutes.

We do not share personal data with anyone else, and never with data brokers or advertisers.

Where it lives, and how it's protected

Data is stored on servers we operate, in a database with row-level tenant isolation — one institute's data is not queryable by another institute's account, enforced at the database level, not just in application code. All traffic to the app and API is encrypted (HTTPS). On the Android app, your sign-in token is stored in the device's secure Keychain/Keystore, not in plain storage.

How long we keep it

A student who leaves an institute is marked left rather than deleted outright, so the institute can still answer questions about past attendance or fees — this is the same reason a school keeps old records. An institute admin can request full deletion of a person's data (see below), which we carry out unless we are required to keep financial or attendance records for a legally mandated period.

Your choices

• An institute admin can edit or remove any student, guardian or staff record directly in the app.
• A student's own login can be turned off at any time without affecting their guardians' access.
• Anyone — parent, student, teacher or admin — can write to hello@anantahq.com to request a copy of, correction to, or deletion of their personal data.

Changes to this policy

If this policy changes in a way that matters, we'll update the date at the top and, for material changes, notify institute admins directly.

Contact

StudyBuddy is built and operated by AnantaHQ. Questions or requests: hello@anantahq.com.