Legal

Privacy Policy

Last updated: 3 August 2026

In one line: your center's data belongs to your center. We store it so the software works, we never sell it, we never share it with another center, and you can export or delete it at any time.

1. Who we are

EduFlow ("EduFlow", "we", "us") provides software that helps coaching classes, abacus centers, computer institutes, yoga centers, dance academies, drawing and music schools, tuition centers, preschools and multi-activity centers manage admissions, fees, attendance and communication.

This policy explains what we do with personal data. It applies to our website and to the EduFlow application.

Two different roles matter here. For the account holder — the center owner and their staff — we are the data controller. For the student and parent records a center enters into EduFlow, the center is the controller and we are the processor: we hold and process that data on the center's instructions and for no purpose of our own.

2. What we collect

From the center owner and staff

Name, email address, mobile number, username and a securely hashed password
Center details: name, type, address, city, logo, UPI ID, fee amounts and payment QR image
Billing details: the plan you are on and your payment history with us
Support messages you send us

From the records a center enters

Student name, photo (if uploaded), date of birth, gender, address, admission date, batch and level
Parent or guardian name and contact number
Fees, payments and receipts; attendance; test scores; certificates; materials issued

Automatically

Basic technical logs — IP address, browser type, pages visited, timestamps — used to keep the service running and to investigate errors and abuse
Aggregate, anonymous usage statistics (for example, how many centers use a given feature)

We do not collect biometric data, government ID numbers, location tracking, or anything from your device beyond what is described above.

3. Why we collect it

To provide the service — generate fees, record attendance, produce receipts and certificates, and show you your reports.
To keep your account secure — authenticate logins, prevent unauthorised access, keep an audit trail.
To support you — answer your questions and fix problems you report.
To bill you — if you are on a paid plan.
To improve EduFlow — using aggregate, anonymised usage patterns only.

We do not use student or parent data for advertising, profiling, or training any AI model, and we never sell data to anyone.

4. Student and parent data

Student and parent records belong to the center that entered them. We access them only when it is necessary to operate the service, fix a fault, or when the center asks us to help — for example during onboarding or a support request. We never disclose one center's records to another center, and each center's data is isolated in the system.

If you are a parent and want to know what a center holds about your child, or want it corrected or removed, please contact the center directly — they control that record. If they need our help to action it, we will assist them.

5. WhatsApp messages and payments

WhatsApp. EduFlow prepares reminder messages and opens them in your own WhatsApp for you to send. We do not send messages on your behalf, we do not connect to your WhatsApp account, and we do not read, store or have access to your WhatsApp conversations. Once you press send, the message and its delivery are governed by WhatsApp's own privacy policy.

Payments from parents. Fee collection happens directly between the parent and the center — for example by scanning the center's own UPI QR code, or in cash. Money does not pass through EduFlow, and we never see or store card numbers, UPI PINs, bank credentials or any payment instrument. EduFlow records only that a payment of a given amount was received, so the center's books stay correct.

Your subscription payments to us, where applicable, are handled by a regulated payment gateway. The gateway processes the card or UPI details; we receive only the outcome and a transaction reference.

We share personal data only with the service providers needed to run EduFlow, and only to the extent required:

Cloud hosting and database providers — to store and serve your data
File storage — for logos, photos and documents you upload
Payment gateway — to process your subscription payment to us, if you are on a paid plan

These providers are bound to use the data only to provide their service to us. We may also disclose data if we are legally required to by a court or a competent authority, or to protect our rights or someone's safety. We do not sell, rent or trade personal data. Ever.

7. Cookies

The EduFlow application uses strictly necessary cookies only — to keep you signed in and to know which center you are working in. There are no advertising or tracking cookies inside the application.

This marketing website may use privacy-friendly analytics to count visits, and — if we run advertising — an advertising pixel. You can block cookies in your browser; the application will simply ask you to sign in again.

8. How we protect data

All traffic is encrypted in transit with HTTPS/TLS
Passwords are stored only as salted one-way hashes — nobody, including us, can read them
Each center's data is isolated; a login can only reach its own center
Access is role-based: teachers see attendance and marks, financial data stays with the owner
The database is backed up regularly
Deleted records go to Trash and can be restored, so a mistake does not become a loss

No system is perfectly secure. If a breach ever affects your data, we will tell you promptly and tell you what happened and what to do.

9. How long we keep data

We keep your data for as long as your account is active, because that is what makes your history and reports useful. If you cancel, you can export everything first. After cancellation we retain the account for a short grace period in case you return, then delete or irreversibly anonymise it on request. We may keep basic billing records longer where tax or accounting law requires it.

10. Your rights

You can, at any time:

Access and export your data — every table in EduFlow downloads to Excel or CSV in one click
Correct anything inaccurate, directly in the application
Delete records, with Trash as a safety net, or ask us to delete the whole account
Object or restrict — ask us to stop a particular processing activity
Complain — to us first, and to the relevant data protection authority if we do not resolve it

Write to us using the contact below and we will respond within 30 days.

11. Children's data

EduFlow is used by centers that teach children, so records about minors are entered by the center. Those records are provided and controlled by the center, which is responsible for having the parent's or guardian's consent to hold them. Children do not create accounts on EduFlow and we do not market to children.

12. Contact us

Questions about this policy, or a request about your data:

Email: privacy@eduflow.in
WhatsApp: +91 98042 43159

We may update this policy as EduFlow changes. When we do, we will change the "last updated" date above and, for anything significant, tell you inside the application.

← Back to EduFlow Terms of Service