1. Who we are
Rupantaram ("Rupantarm", "we", "us", "our") is a life-skills and personality transformation academy based in Karjat, Maharashtra, India, conducting programs in Karjat, Alibaug, Pen and Lonavala. We publish the Rupantarm Android application, which lets enrolled students and their parents or guardians access their program schedule, attendance, learning material, progress reports, fee records and communication with the academy.
This Privacy Policy explains what personal information we collect through the app, why we collect it, who we share it with, and the choices and rights you have. We act as the data fiduciary / controller for that information.
2. Scope
This policy applies to the website rupantaram.com — including its enquiry and registration forms and online fee payment — to the Rupantarm mobile app, and to the account backend at admin.rupantaram.com. It does not apply to third-party websites, payment gateways, or services that we link to but do not operate; those are governed by their own policies.
3. Information we collect
We collect only what is needed to run the academy relationship. We do not require you to give us information that is unrelated to your enrolment.
| Category | Examples | Why we collect it |
|---|---|---|
| Identity | Student and guardian name, date of birth, gender, profile photo, student ID / batch, centre location | Create and verify the account, issue the in-app ID card and certificates, place the student in the right batch and age-appropriate program |
| Contact | Mobile number (verified by OTP), alternate guardian number, email address if you provide one, postal or centre address | Sign-in, account recovery, batch and schedule announcements, administrative contact |
| Guardian / relationship | Linked parent or guardian accounts, relationship type, parental-consent records | Give guardians lawful access to a minor's records and record consent |
| Academic and program | Attendance, timetable, activities, worksheets, challenges, habits, goals, self-assessments, journal and reflection entries, progress and weekly reports, report cards, achievements, certificates, mentor questions and feedback, leave requests | Deliver the program, track progress, and share reports with the student and guardian |
| Financial | Fee plan, invoices, payment status, receipt references, transaction identifiers returned by the payment provider | Bill for programs and maintain accounting records required by law |
| Content you upload | Photographs taken with the camera or chosen from your gallery, documents you attach, messages you send in the app | Profile photo, submission of worksheets or documents, communication with the academy |
| Technical | App version, device model, operating-system version, language setting, coarse crash and error information, Firebase Cloud Messaging token, session and authentication tokens, IP address recorded by our servers | Deliver notifications, keep the account secure, diagnose faults, and prevent abuse |
| Preferences | Notification preferences, app language, favourites | Respect your choices inside the app |
We do not collect precise or background location, contacts, call logs, SMS content, microphone audio, health data, biometric identifiers, or advertising identifiers. The app contains no third-party advertising and no cross-app tracking.
4. Device permissions
- Internet / network access — to reach our servers so you can sign in, and so the app can show you what your centre holds about you. This is the only permission the app asks for.
It does not ask for the camera, your photos, your files, your location, your contacts, your microphone or your calendar, and it cannot read any of them. An earlier build declared camera and photo permissions for a profile picture; that feature was removed and the permissions were removed with it.
Habits, streaks and daily reflections are written to your phone's own storage. They are not sent to us, and uninstalling the app deletes them.
5. How we use information
- To create, verify and secure your account, including one-time-password (OTP) sign-in.
- To deliver the program you have enrolled in: timetable, attendance, learning material, assignments and mentoring.
- To generate progress reports, report cards, certificates and ID cards.
- To raise invoices, record fee payments and maintain statutory accounting records.
- To communicate with you and with a student's guardian about batches, schedules, results and administrative matters.
- To provide support, investigate complaints, and resolve disputes.
- To keep the service safe — detecting fraudulent sign-ins, misuse and abuse.
- To fix bugs and improve the app using aggregated, non-identifying diagnostics.
- To comply with applicable law and lawful requests from authorities.
We do not use your personal information for automated decision-making that produces legal effects, nor for profiling for advertising.
6. Legal bases and consent
We process personal data under the Digital Personal Data Protection Act, 2023 (India) and, where applicable, other data-protection laws. Our bases are:
- Consent — given in the app's consent screen for each stated purpose. The app records which purposes you consented to and when.
- Performance of a contract — delivering the program you enrolled in and billing for it.
- Legal obligation — tax, accounting and record-keeping requirements.
- Legitimate interests — security of the service, fraud prevention and fault diagnosis, balanced against your rights.
You may withdraw consent at any time from Settings → Consent in the app or by writing to us. Withdrawal does not affect processing already carried out, and some features may become unavailable.
7. Children and guardians
Our programs serve children, teenagers and young adults, so accounts for a minor are created and controlled by a parent or legal guardian.
- The app asks for date of birth. Where the user is below the age of digital consent, the app requires verifiable parental or guardian consent before the account can be used, and blocks access until that consent is recorded.
- A linked guardian can view the student's records, reports, attendance, fees and messages, and can exercise all privacy rights on the child's behalf.
- We do not use a child's personal data for tracking, behavioural monitoring for advertising, or targeted advertising of any kind.
- We collect the minimum data needed to run the program and to keep the child safe during sessions.
If you believe a child's data has been collected without proper guardian consent, contact us at info@rupantaram.com and we will delete it promptly.
8. Sharing and disclosure
We share personal information only in these situations:
- With the student's parent or guardian, and with the academy staff, mentors and centre coordinators who need it to deliver the program.
- With service providers acting on our instructions under contract — see the next section.
- Where you ask us to, for example issuing a certificate or report to a school or institution.
- Where the law requires it, including valid orders from a court, regulator or law-enforcement agency.
- To protect rights and safety, where disclosure is necessary to prevent harm, fraud or a security incident.
- In a business transfer, if the academy is reorganised, merged or transferred, subject to this policy continuing to apply.
We never sell personal information and never share it with data brokers or advertising networks.
9. Third-party services we use
- MSG91 (Walkover Web Solutions Pvt. Ltd., India) — sends and verifies the OTP SMS used for sign-in. It receives your mobile number.
- Google Firebase Cloud Messaging (Google LLC) — delivers push notifications. It receives a device notification token.
- Google Play services and the Google Play Store — app distribution and integrity checks.
- Our hosting and backend provider — stores the application database and uploaded files for
admin.rupantaram.com. - HDFC Bank payment gateway (HDFC Bank Ltd., India) — processes fees paid online. It receives the payer's name, mobile number, email address, the amount and an order reference so the payment can be made and matched to your registration. Card, UPI and net-banking details are entered on the bank's secure page; we receive only the transaction reference, payment mode and payment status, and never see or store your card number, CVV, UPI PIN or banking password.
Each provider is permitted to use the data only to perform its service for us.
10. Data retention
- Account and academic records — kept while the student is enrolled and for up to 3 years after the last active enrolment, so that certificates and reports can be reissued.
- Invoices and payment records — kept for 8 years, as required by Indian tax and accounting law.
- Consent records — kept for as long as needed to demonstrate that consent was validly obtained.
- Uploaded photos and documents — deleted with the account, or earlier if you delete them in the app.
- Technical logs — normally kept for up to 12 months.
When a retention period ends, data is deleted or irreversibly anonymised.
11. Security
We protect your information with encryption in transit (HTTPS/TLS) between the app and our servers, OTP-based authentication, expiring session tokens, role-based access so that staff see only what their role requires, and regular backups. Access to production systems is restricted to authorised personnel.
Online payments are made on the HDFC Bank payment gateway's own encrypted page, not on our servers, so payment credentials never pass through or rest on our systems.
No system is perfectly secure. If a personal-data breach occurs that is likely to affect you, we will notify you and the competent authority as required by law.
12. Your rights
Subject to applicable law, you (or the guardian of a minor) may:
- Access a summary of the personal data we hold about you and how it is processed.
- Correct inaccurate, incomplete or outdated data — most fields can be edited directly in the app's profile screen.
- Erase your data and delete your account (see the next section).
- Withdraw consent for any purpose you consented to.
- Nominate another person to exercise your rights in the event of death or incapacity, as provided by the DPDP Act, 2023.
- Complain to us, and thereafter to the Data Protection Board of India.
Write to info@rupantaram.com from your registered contact, or call +91 90116 58888. We respond within 30 days. We may ask you to verify your identity before acting on a request.
13. Account and data deletion
The short version: rupantaram.com/delete-account/ — a page you can open without the app and without signing in, listing every way to ask.
How to delete your Rupantarm account and data
In the app: open Settings → Delete my account, which shows you the routes below. The app does not delete the account by itself — an account belongs to a family and a centre, and a phone left unlocked on a desk should not be able to erase a child's record.
By email: send a request from your registered mobile number's email, or with your registered mobile number, to info@rupantaram.com with the subject "Delete my account".
What gets deleted: your account and the record behind it — name, date of birth, gender, phone number, email, address, and the link between a child and their parent — together with attendance, progress, mentor remarks and certificates. Habits and daily reflections live on the handset and go when the app is uninstalled.
What is retained, and why: invoices and payment records for the statutory period noted above, plus consent and deletion records needed to prove compliance. Retained records are locked to accounting access only. Anonymised, non-identifying statistics may be kept.
Timeline: deletion is completed within 30 days of a verified request; backups are purged within a further 90 days.
14. Notifications and communications
We send push notifications, SMS and, where you have given an email address, email for account verification, schedule and batch updates, attendance and report alerts, and fee reminders. Service and transactional messages are part of the enrolment and cannot be fully switched off while the account is active, but you can tune categories in Settings → Notification preferences or disable notifications in Android settings. Any promotional message will carry an opt-out.
15. Where your data is stored
Our servers and databases are hosted in India. Some service providers (for example push-notification infrastructure) may process limited data on servers outside India. Where that happens we rely on contractual safeguards and transfer only what the service requires.
16. No sale of personal data
We do not sell, rent or trade personal information. We do not share it with advertising networks or data brokers, and the app contains no third-party ad SDK.
17. Changes to this policy
We may update this policy as the app or the law changes. The "Last updated" date at the top will change, and material changes will be announced in the app or by notification before they take effect. Continuing to use the app after a change means you accept the updated policy; if you do not, you may delete your account.
18. Contact us
Rupantaram
Karjat, Raigad District, Maharashtra, India
Program centres: Karjat · Alibaug · Pen · Lonavala
Email / grievance officer: info@rupantaram.com
Phone: +91 90116 58888 · +91 90116 78888
Hours: Monday – Saturday, 10:00 – 19:00 IST
Website: rupantaram.com
If you are not satisfied with our response, you may complain to the Data Protection Board of India.