Privacy Policy
Last updated: 22 September 2026
1. Data we collect
- Account: full name, mobile number, optional email, school name, UDISE code.
- Recovery: your 3 chosen recovery numbers and 3 image ids — stored as a bcrypt hash. We cannot read them back.
- Payments: Razorpay order id, payment id, amount, currency, status, timestamps. We do NOT store card / UPI credentials.
- Daily entries: the attendance & calculation results you choose to save under your account.
- Usage limit: a SHA-256 hash of your IP and (if signed in) your mobile number, plus a counter — used to enforce the 7-free-report rule.
- Technical logs: timestamps and error metadata (no third-party analytics is currently active).
2. How we use it
To provide the service, deliver PDF reports, activate your Premium subscription, prevent abuse, send you receipts (if email provided), and provide support. We do not sell or share your data for advertising.
3. Third parties
- Razorpay processes payments — subject to their privacy policy.
- MongoDB hosts our database on secure managed infrastructure.
4. Security
Passwords and recovery answers are hashed with bcrypt. Payment signatures are HMAC-SHA256 verified server-side. Data is transmitted over HTTPS.
5. Retention
Account data is retained while the account is active. On request we will delete your account, daily entries and any linked recovery data within 30 days (payment history is retained for statutory accounting periods).
6. Your rights
You may view, edit or delete your profile, update your recovery details, change your password, and request account deletion by writing to TeacherUtilityToolKit@gmail.com.
7. Contact
Privacy queries: TeacherUtilityToolKit@gmail.com