Privacy Policy

Last updated: July 22, 2026

1. Who this policy covers

Larnup ("we", "us", "our") provides a school management platform used by schools ("School"), and a companion app and web portal used by parents, students, teachers, and drivers (collectively, "Users"). This policy explains what data we collect through the Larnup platform, why, how it is stored, who it is shared with, and what rights you have over it.

For each School, the School is generally the data controller for its students' and staff's data, and Larnup acts as a data processor providing the platform. Account credentials (phone number, password) and payment data for the platform subscription itself are handled directly by Larnup as described below.

2. Data we collect

We collect the following categories of data, all tied directly to features actually built into the platform:

2.1 Account and identity data

• Phone number (used as your login identity and for OTP verification)
• Full name, email address (optional, where provided)
• Role (parent, student, teacher, staff, school administrator, or driver)
• Password (stored as a one-way cryptographic hash — we never store or can retrieve your plain-text password)

2.2 Student data

• Name, roll number, class/section, house, blood group, date of birth, gender, and photo (entered by the school)
• Attendance records (daily present/absent/late/half-day/excused status)
• Academic records: homework, assignments and submissions, exam results, marks, and rank
• Timetable and calendar data relevant to the student's class
• Leave requests and their approval status
• Uploaded documents (e.g. report cards, certificates) associated with the student
• Hostel room allocation, where applicable

2.3 Location / GPS data (school transport)

If your school uses Larnup's bus tracking feature, we collect real-time GPS location data from the driver's device during an active trip, so that parents can view their child's bus on a live map. This location data is tied to the vehicle and trip, not continuously collected outside of active trips. Trip history (route, stops, and timestamps) is retained as described in Section 5.

2.4 Fee and payment data

• School fee structure, installment amounts, and payment status (for fees owed to your school)
• Payment transaction records processed via Razorpay, including transaction IDs and payment status (not full card/bank details — see Section 4)
• Platform subscription status and billing history, where a parent has an active Larnup subscription
• GST invoice details generated for subscription payments

2.5 Communication data

• Direct messages sent through the in-app chat feature, between a parent and a teacher or school administration
• Notices and announcements published by the school

2.6 Device and technical data

• Device push-notification tokens (used to deliver notifications via Firebase Cloud Messaging)
• Basic technical data such as IP address and app/browser version, for security and diagnostics

3. Why we collect this data

• To provide the core functionality of the platform — attendance, fees, transport tracking, homework, exams, and the other features described on our Features page
• To authenticate you securely (phone + OTP, and password login thereafter)
• To process payments for school fees and platform subscriptions
• To send notifications relevant to your child's school activity (e.g. an absence, a published exam result, a new notice)
• To respond to support requests and communicate with you about your account
• To comply with legal, tax (GST), and regulatory obligations

We do not sell personal data to third parties, and we do not use student data for advertising.

4. Who we share data with

We share data only with the specific third-party services required to operate the platform, listed here by name:

• Razorpay (payment processor) — processes school fee payments and platform subscription payments. Razorpay receives payment amounts and transaction details necessary to process a payment; we do not receive or store your full card number, CVV, or bank credentials — those are handled directly by Razorpay under its own security standards.
• MSG91 (communications provider) — sends SMS one-time passwords (OTPs) for login and verification, and SMS/email notifications (e.g. payment confirmations, subscription reminders). MSG91 receives your phone number (and email, for email notifications) to deliver these messages.
• Firebase Cloud Messaging (Google) — delivers push notifications to your mobile device. Firebase receives a device-specific push token, not your personal profile data.
• Google Maps — used only by the Larnup Android app to render the live bus-tracking map. This applies to the mobile app specifically; the admin and parent web dashboards use OpenStreetMap map data instead, which does not involve sharing your data with Google.

We also use cloud infrastructure (Amazon Web Services) to host the platform and database. AWS acts as our infrastructure provider and does not independently use your data for its own purposes.

We do not share your data with any other third party for their own marketing or commercial purposes. We may disclose data if required by law, court order, or to protect the rights, safety, or property of Larnup, our Users, or others.

5. Data retention

We retain School and student data for as long as the School's account with Larnup remains active, and for a reasonable period afterward to comply with legal/tax retention requirements (typically up to 8 years for financial records, consistent with Indian tax record-keeping norms) or to resolve disputes. GPS trip history is retained for a limited period sufficient for dispute resolution and safety review, not indefinitely. If a School or parent account is deleted, we will delete or anonymize personal data within a reasonable period, except where retention is required by law.

6. Your rights

Subject to applicable law, you have the right to:

• Access the personal data we hold about you or your child
• Request correction of inaccurate data
• Request deletion of your data, where not otherwise required to be retained by law
• Withdraw consent for optional data processing (e.g. push notifications) at any time
• Raise a concern or complaint about how your data is handled

To exercise any of these rights, contact us at rj.ramakant.sharma@gmail.com (see Section 9). Some requests may need to be routed through your School, since the School is the data controller for student academic records. To request deletion of your account and data specifically, see our Account Deletion page for step-by-step instructions and what is retained afterward.

7. Children's data

Larnup is used by schools to manage student records, and by necessity, we process personal data belonging to students who are minors. This data is provided and controlled by the School as part of its educational relationship with the student's parent or guardian — parents/guardians are the ones who hold accounts and access student data through Larnup, not students themselves in most cases. We do not knowingly allow a minor to independently create an Larnup account without school/parental involvement, and student personal data is used solely for legitimate educational, administrative, and safety purposes (such as bus tracking) described in this policy — never for advertising or sold to third parties.

Parents/guardians may contact their School or Larnup directly to review, correct, or request deletion of their child's data, subject to the School's own record-keeping obligations.

8. Data security

We use industry-standard measures to protect your data, including encrypted connections (HTTPS/TLS) between your device and our servers, encrypted database storage at rest, password hashing (your password is never stored in plain text), and role-based access controls so that, for example, one school's data is never visible to another school, and a parent can only see their own child's records. No system is perfectly secure, and we cannot guarantee absolute security, but we take reasonable and appropriate measures to protect your data against unauthorized access, alteration, or loss.

9. Contact us

If you have questions or concerns about this Privacy Policy or how your data is handled, contact us at:

Email: rj.ramakant.sharma@gmail.com
Phone: +91 96106 97724
Address: Sarsar, Sardarshahr, Churu, Rajasthan - 331402

10. Changes to this policy

We may update this Privacy Policy from time to time as the platform evolves. We will update the "Last updated" date above when we do, and for material changes, we will make reasonable efforts to notify Schools and Users directly.