🏫 Privacy Policy

1 Introduction

Welcome to Schoolpay, operated by BlueCatalyst ("we", "us", or "our") via our website schoolpay.bluecatalyst.in. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application on Android and related services.

Schoolpay is a School ERP (Enterprise Resource Planning) and fee payment platform designed for schools, parents, guardians, and school staff. We are committed to protecting the personal data of all users, especially students who may be minors.

2 Information We Collect

2.1 Student Data

• Full name, date of birth, gender, student ID, roll number
• Class, section, academic year, admission date
• Marks, grades, academic performance records
• Attendance records (present, absent, late)
• Photograph (if provided during admission)
• Previous school details (for admission purpose)

2.2 Parent / Guardian Data

• Full name and relationship to student
• Mobile number and email address
• Residential address
• Payment history and transaction records

2.3 School Staff Data

• Name, employee ID, designation, department
• Attendance and leave records
• Payroll data (accessible by school admin only)
• Contact details

2.4 Financial / Payment Data

• Fee payment amounts, dates, and transaction reference numbers
• Fee category and payment status
• Digital receipt records

2.5 Device & Technical Data

• Device type, model, and Android OS version
• Unique device identifiers (Android ID)
• IP address and network information
• App version, crash logs, and usage analytics
• Firebase Cloud Messaging (FCM) token for push notifications

3 How We Use Your Information

• Process school fee payments and generate digital receipts
• Manage student admissions, academic records, and attendance
• Create and manage user accounts for parents and school staff
• Send push notifications for fee reminders, attendance alerts, exam schedules, and school announcements
• Generate fee collection and academic performance reports for school admin
• Provide customer support and resolve payment disputes
• Improve App functionality, performance, and user experience
• Detect and prevent fraudulent transactions and unauthorized access
• Comply with applicable laws and regulatory requirements
• Send SMS or email confirmations for payment and academic updates

4 Data Sharing and Disclosure

4.1 School Administration

Student, parent, attendance, academic, and fee-related data is shared with the respective registered school administration as part of core ERP service functionality.

4.2 Payment Gateway Providers

Transaction-relevant data is shared with certified payment gateways (such as Razorpay, PayU, or similar) solely for processing fee payments. These providers are PCI-DSS compliant.

4.3 Cloud & Technology Service Providers

We use cloud hosting, analytics (Firebase), and push notification services (FCM) under strict data processing agreements. These providers cannot use your data for their own purposes.

4.4 Legal Requirements

We may disclose your information if required by law, court order, or government authority, or to protect the rights and safety of our users and the public.

4.5 Business Transfer

In the event of a merger or acquisition, your data may be transferred to the acquiring entity. You will be notified before such transfer occurs.

5 Data Retention

We retain your personal information for as long as:

• Your account remains active on the platform
• It is necessary to provide the services you requested
• Required by applicable law — financial records are typically retained for up to 7 years per Indian regulations

You may request deletion of your account and personal data by contacting us at bluecatalystcare@gmail.com. Certain data may be retained for legal, audit, or regulatory compliance purposes even after deletion.

6 Data Security

We implement industry-standard security measures to protect your personal data:

While we strive to protect your data using commercially acceptable means, no method of electronic transmission or storage is 100% secure. We will notify you of any data breach as required by applicable law.

7 Children's Privacy

Schoolpay is a school management platform used by parents, guardians, and school staff to manage student records and fee payments. The App is not directly used by children under the age of 13.

Student-related data (name, class, attendance, marks) is collected from parents/guardians or authorized school administrators on behalf of students. We require schools to obtain written parental consent during student enrollment.

8 Your Rights

Depending on your location and applicable law, you have the following rights:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Deletion: Request deletion of your personal data
• Right to Restriction: Request restriction of processing in certain circumstances
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing for direct marketing purposes
• Right to Withdraw Consent: Withdraw consent at any time where processing is consent-based

To exercise any of these rights, email us at bluecatalystcare@gmail.com. We will respond within 30 days.

9 App Permissions

Schoolpay requests the following Android permissions. Each permission is used only for the stated purpose:

10 Third-Party Links and Services

The App integrates with third-party services including payment gateways and analytics tools. These third parties have their own privacy policies, and we do not accept responsibility for their data practices.

We encourage you to review the privacy policies of all third-party services you interact with through our App.

11 Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify you via in-app notification or registered email
• Post the revised policy on schoolpay.bluecatalyst.in

Your continued use of the App after changes constitutes your acceptance of the revised Privacy Policy.

12 Contact Us

For any questions, concerns, or requests regarding this Privacy Policy:

For grievances under the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, you may contact our Grievance Officer at the email address above.