Let's Catch Up Privacy Policy

1. Scope and operator

KANDHUGULE CONSULTANCY SERVICES PRIVATE LIMITED ("KCS", "we", "us", or "our") operates the Let's Catch Up mobile applications, website, and related school, learning, communication, social, and transport services (collectively, the "Platform"). This policy explains what personal data the Platform accesses, collects, uses, retains, and shares.

For institution-managed accounts, the school or organization generally decides why school records are processed and who may access them, while KCS provides and secures the Platform on its behalf. For public adult accounts and Platform administration, KCS may decide the relevant processing purposes. A school's own privacy notice may therefore also apply.

3. Other data we collect

• Account and identity data, such as name, email address, phone number, profile image, age or date of birth where required, role, school, campus, admission or employee identifiers, parent-child links, and membership information. A user may have more than one authorized role or institutional membership.
• School and learning data, such as class, attendance, grades, assignments, submissions, course progress, timetable, and teacher or parent feedback.
• Communications and content you provide, including messages, posts, files, images, audio, video, support requests, and meeting participation data.
• Fee and transaction records. Payment-card or banking details are handled by the applicable payment provider and are not stored by us unless expressly stated at collection.
• Device and usage data, such as device type, operating system, app version, IP address, authentication events, feature usage, notification token, crash information, diagnostic logs, and security events.
• Camera, microphone, photo-library, or media data only when you choose features such as profile photos, attachments, calls, meetings, or content creation and grant the relevant permission.

We receive data directly from users, parents or guardians, authorized schools and their personnel, device permissions, Platform activity, and contracted service providers. Please do not submit Aadhaar numbers, biometric templates, health records, or other sensitive information unless a clearly identified Platform feature and applicable school process specifically require it.

4. How we use personal data

• Provide, authenticate, maintain, and personalize the Platform.
• Operate school administration, attendance, learning, assignments, communications, meetings, fees, and transport.
• Send service, safety, academic, transport, and account notifications requested by the user or institution.
• Prevent fraud and abuse, protect children and users, enforce access controls, investigate incidents, and comply with law.
• Diagnose errors and improve reliability, accessibility, performance, and user experience.

We process personal data on the legal grounds available under applicable law, which may include consent, actions requested by the user, performance of school or service agreements, legitimate uses recognized by law, safety, and legal obligations. Where consent is required, it may be withdrawn as described below without affecting processing already lawfully completed.

5. When we share data

We do not sell personal data and do not share precise location for advertising. We share only as needed with:

• the school, campus, or organization that created or manages the account, subject to role-based permissions;
• authorized parents or guardians for their linked child and assigned school-transport trip;
• vendors that provide hosting, storage, notifications, communications, analytics, support, security, mapping, and payment processing under contractual safeguards;
• law-enforcement, regulators, courts, or other parties when required by law or necessary to protect rights, safety, and Platform integrity; and
• a successor in a merger, financing, reorganization, or sale, subject to applicable notice and legal requirements.

6. Data retention and deletion

We retain data only for as long as necessary to provide the Platform, meet school and contractual requirements, maintain security and audit records, resolve disputes, and comply with law. Retention differs by record type. When retention ends, data is deleted or de-identified unless preservation is legally required. Location-specific periods are described in Section 2.

• Account, academic, fee, communication, consent, and audit records are retained according to the applicable school agreement, operational need, and legal requirements.
• Deleted data may remain for a limited period in protected backups or be preserved where required for security, investigation, dispute, accounting, or legal obligations.
• De-identified or aggregated information that no longer identifies a person may be retained for analytics and service improvement.

7. Children and school accounts

Student accounts are created or managed through authorized educational institutions. We limit collection and access to what is needed for school services, apply role-based controls, and do not use school-minor data for targeted advertising. Schools and parents or guardians may contact us to exercise applicable access, correction, consent, or deletion rights for a child.

We do not sell children's personal data, use it for targeted advertising, or use student accounts for public behavioral profiling. Driver trip location is collected from the authorized driver's device, not from a child's device for transport tracking. Guardians receive only information available to their authorized child and assigned trip.

8. Security and international processing

We use technical and organizational safeguards including encrypted transmission, access controls, authentication, logging, and security monitoring. No system is completely secure. Data may be processed where we or our contracted service providers operate, subject to applicable safeguards and legal requirements.

9. Your rights and choices

Subject to applicable law and school record obligations, users, parents, and guardians may request access, correction, deletion, restriction, withdrawal of consent, or information about data handling. You may update certain information and notification preferences in the app. Account-deletion requests can also be submitted through our website. We may verify identity and institutional authority before completing a request.

• Device permissions can be changed in operating-system settings; notification preferences can be changed in the app or device settings.
• Institution-managed records may need to be corrected or deleted by the school, and some records cannot be deleted immediately where retention is legally required.
• You may submit an account-deletion request at our account deletion page.
• You may raise a grievance using the contact details below. We will verify and respond in accordance with applicable law.

10. Cookies and similar technologies

Our websites may use necessary cookies or similar local storage for authentication, security, preferences, and reliable operation. Optional analytics or similar technologies are used only where enabled and permitted. Browser or device controls may limit them, although essential functions may then be affected.

11. Changes to this policy

We may update this policy when our services, data practices, or legal obligations change. We will post the updated date and, where required, provide additional notice or request renewed consent.