Built for India's data-protection law.
Children's data is the most sensitive thing a school holds. This page says what we built to protect it, what each school controls, and where we have not yet filled in the detail.
Parent consent, captured and withdrawable.
Consent is asked for, recorded against the policy version the parent saw, and can be withdrawn. The school sees the whole picture in one dashboard.
- Essential school data: attendance, marks, fees and the diary. Not refusable, because the school cannot run without it.Live
- Photographs and Moments: your child in event photos and in Moments sent to families. Refusable, entirely, at any time.Live
- Communications beyond the essential: WhatsApp and optional notifications. Refusable, and the app keeps working as before.Live
- Withdrawal at any time, by the parentLive
- Policy versioning, so you know which wording each parent agreed toLive
- A consent dashboard for the schoolLive
Each school's data is isolated from every other school.
Schools share the platform, not their data. One school's staff and parents cannot see another school's records.
- Tenant isolation between schoolsLive
Data you no longer need is not kept forever.
Each kind of record has a retention period. The academic record is kept long-term, because schools must keep it. Short-lived data, such as Moments photos (about a week), bus location history and event photographs (a download window, then cold storage), ages out. Closed admission enquiries are kept for a limited period, and CPD evidence clips for three years by default.
- Automatic deletion on schedule, run as a background jobLive
- Erasure on request, from the app or a public page, aiming to finish within 7 days, with a certificateLive
We state the exception plainly: records a school is legally required to keep stay. Student and guardian records can be kept up to 7 years and staff records up to 10 where the law or board rules require it, and then identifiers are removed or anonymised.
Everything staff do is recorded. Our own staff are read-only.
An audit log records who did what and when. When our operations team looks into a problem on your account, impersonation is read-only and logged, so we can see what you see without changing it.
- Audit logLive
- Staff impersonation: read-only and loggedLive
Signed reports and a year-end inspection file.
Reports for trustee meetings are signed PDFs. At year end the school can produce an inspection file in one place.
- Signed PDF reportsLive
- Year-end inspection fileLive
If you leave, your data leaves with you.
You own your school's data.
- Families can ask for an export of their own data, delivered to their verified channelLive
- Year-end exports: the board return, the audited fee summary and the inspection bundleLive
On leaving, we hand over a full export of your school's records within 30 days of your request: tables as CSV, and documents such as report cards and receipts as PDF. Once you confirm you have received it, we delete the remaining data, except records we are required by law to keep.
Where the data lives.
Hosted in India, on AWS in Mumbai. Our deployment process refuses to run in any region outside India.
A named person for data-protection questions.
Write to privacy@gurukulam.ai with any question about your data or your child's data, including access, correction, erasure and withdrawal of consent.
Gurukulam, C/O Drutaya, 2nd Floor, Indiqube Helios Tower E, Helios Business Park, Kadubeesanahalli, Bengaluru, Karnataka 560103