Privacy Policy

Eduo is a school management service used by participating schools, administrators, teachers, parents, guardians, and students. This policy applies when you use Eduo or when a participating school places information about you or a student in Eduo.

For school records, the participating school decides why and how the information is used and generally acts as the data fiduciary or controller. CGT operates Eduo for the school and generally acts as its data processor or service provider. The school’s own privacy notices and policies may also apply. CGT may act independently for account security, service operations, support, abuse prevention, and compliance with law.

Depending on your role and the features your school enables, we process:

• Identity and contact details: names, mobile and WhatsApp numbers, email addresses, postal addresses, profile photographs, employee identifiers, admission numbers, and school roles.
• Student and guardian records: date of birth, gender, blood group, admission information, emergency contacts, medical notes, transport details, and parent or guardian relationships.
• Academic and school activity: academic year, grade, class, division, stream, subject and teacher assignments, attendance and late/absence records, examination schedules, marks, grades, report information, assignments and completion status, announcements and read status, and study materials.
• Fees and payments: fee categories, amounts due, payment status, transaction references, notes, and supporting payment evidence when that feature is available.
• Files and content: documents, spreadsheets, images, links, descriptions, school branding, and other content uploaded or submitted by authorised users.
• Account and technical data: sign-in and one-time-password records, session and installation identifiers, device platform, push-notification token, IP address, browser or device user agent, timestamps, audit events, and error or delivery records.

Most information comes from your school or from authorised administrators, teachers, parents, or guardians. Some technical information is generated automatically when Eduo is used. We do not use Eduo to collect precise location, contact lists, call logs, or SMS message contents.

We process information to:

• provide, personalise, maintain, and support Eduo for your school;
• authenticate users, manage roles and sessions, and protect accounts;
• manage classes, attendance, examinations, assignments, study materials, announcements, fees, and related school workflows;
• send service messages, one-time passwords, announcements, reminders, and other school notifications by app, push notification, email, or SMS;
• respond to support requests, diagnose errors, prevent misuse, and maintain audit and security records;
• meet contractual and legal obligations and enforce applicable terms.

Eduo does not sell personal information and does not use personal information for behavioural advertising, targeted advertising, or advertising profiles.

Information may be disclosed only as needed to the following recipients:

• Your school and authorised users. Access is based on roles and school relationships, such as administrator, teacher, class teacher, parent, or guardian.
• Service providers. These may include cloud hosting and database providers such as Vercel and Neon; communication providers such as Twilio, Mailjet, and Expo; Google for school-connected Drive storage; and content-delivery, monitoring, and support providers. They process information to provide services to us and are expected to protect it. We may replace a provider with an equivalent provider as the service evolves.
• Legal and safety recipients. We may disclose information when reasonably necessary to comply with law, lawful process, protect rights and safety, investigate misuse, or secure Eduo.
• Business successors. Information may transfer as part of a merger, acquisition, financing, reorganisation, or sale of relevant assets, subject to appropriate confidentiality and legal protections.

We do not make school records public. A user may choose to open or share an external link, such as a YouTube resource; the destination service then handles information under its own terms and privacy policy.

A school administrator may connect a school-managed Google account so that authorised administrators and teachers can upload and manage study materials in a selected Google Drive folder. For this feature, Eduo receives the connected account’s email address and authorisation credentials, records the selected folder, and accesses files and folders created, selected, or managed through Eduo. Refresh credentials are stored in encrypted form.

Google user data is used only to provide the visible Google Drive study material feature, maintain its security, and comply with law. It is not used for advertising, sold, or used to train generalised artificial-intelligence or machine-learning models. Human access is limited to cases authorised by the user, necessary for security, or required by law.

Eduo’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

A school administrator can disconnect Google Drive in Eduo and may revoke Eduo’s access from the connected Google account. Disconnecting prevents new access but does not by itself remove files already stored in the school’s Drive. Those files can be managed or deleted in Google Drive.

Eduo processes student information, including information about children, only for educational and school-administration purposes. Student records are supplied and managed by participating schools and authorised adults. Schools and parents or lawful guardians are responsible for providing required notices and obtaining any consent or other lawful authority required for the school’s use of Eduo.

We do not knowingly use children’s information for targeted advertising, behavioural profiling, or sale. If you believe a child’s information was entered without appropriate authority, contact the relevant school or us so the matter can be reviewed.

Subject to applicable law, you may ask to access, correct, update, or delete personal information; withdraw consent where processing relies on consent; or raise a concern about its handling. Because schools control most Eduo records, the fastest route is normally to contact your school. You may also contact CGT using the details below, and we will assist the school or respond directly where appropriate.

You can manage notification permission in your device settings. A school administrator can disconnect Google Drive, and the connected Google account can revoke access through Google’s account settings. Some processing is necessary to provide Eduo or comply with legal obligations; disabling it may limit available features.

We retain school records while needed to provide Eduo to the school, follow the school’s documented instructions, resolve disputes, maintain security, and meet legal or contractual requirements. Retention periods vary according to the record type and the school’s requirements. We delete or de-identify information when it is no longer needed, subject to legal obligations and limited backup and audit retention cycles.

Eduo accounts are provisioned and managed by participating schools rather than created through public self-registration. To request account and associated data deletion, contact your school administrator or email[email protected]. We may need to verify your identity and coordinate with the school. Deleting the mobile app from a device does not itself delete an Eduo account or school records.

We use administrative, organisational, and technical safeguards designed to protect information. These include encrypted network transport, role-based access, session controls, hashed passwords and one-time-password values, encryption of Google authorisation credentials, audit logging, and restricted production access. No storage or transmission method is completely secure, so we cannot guarantee absolute security.

Eduo and its service providers may process information in India or other countries where they operate. When information is processed across borders, we use the protections required by applicable law and our provider agreements.

We may update this policy to reflect product, provider, or legal changes. We will publish the revised version here and update the “Last updated” date. We will provide additional notice through Eduo or the participating school when required.

For privacy questions, requests, or grievances, contact the participating school or:

Please include your name, school, role, and enough detail to identify the relevant record. Do not email passwords, one-time passwords, medical records, or payment evidence.