Skip to content

Legal

Privacy Policy

Last updated: 14 October 2026

ZustSkool (the "Service", available at getzustskool.com, its subdomains and the ZustSkool mobile apps) is owned and operated by GPRN Software ("ZustSkool", "we", "us", "our"). Questions? Email info@gprnsoftware.com.

1. Scope

This policy explains how we collect, use, share and protect personal data when you visit our website, use the Service as a centre owner, staff member or parent/guardian, or contact us. It is written to meet the Information Technology Act, 2000 and its rules and the Digital Personal Data Protection Act, 2023 (India), and the privacy laws of other countries where the Service is offered.

2. Centres control their records

Each childcare centre or organisation that subscribes to ZustSkool decides what records it keeps about children, families and staff. For those records the centre is the data fiduciary (controller) and we process the data on its behalf and on its instructions. Centres are responsible for obtaining the consent of parents or guardians before entering a child's data. Parents should contact their centre first about their child's records.

3. Data we collect

  • Account data: name, email, phone number, role, password (stored hashed) and login history.
  • Centre records: children's details, attendance, daily reports, photos, messages, announcements, enrolment, guardians and authorised pickup persons, invoices and payments, staff, payroll and expense records that a centre enters.
  • Payment data: payment amounts, status and references. Card, UPI and bank details are collected and processed by our payment partner Razorpay; we do not store full card numbers.
  • Location data: when a centre enables geofenced attendance, the device location at check-in and check-out only.
  • Technical data: IP address, device and browser information, app version, push-notification tokens and cookies used to keep you signed in and secure.
  • Enquiries: details you send through our demo request or contact forms.

4. How we use it

To provide and support the Service, create and secure accounts, process subscription and fee payments, send the notifications, emails and messages you or your centre configure, prevent fraud and abuse, comply with law, and improve the Service. We do not sell personal data and we do not use children's data for advertising.

5. Who we share it with

Only with service providers who help us run the Service, under confidentiality obligations: payment processing (Razorpay), cloud hosting and storage, email and SMS delivery, and push notifications (Google Firebase). We also disclose data when required by law or to protect rights and safety. Within the Service, data is visible only to the users a centre authorises.

6. Cookies

We use essential cookies for sign-in, security and your region preference, and no third-party advertising cookies. See our Cookie Policy.

7. Retention

We keep centre data while the centre's subscription is active. After a centre closes its account we delete or anonymise its data within 90 days, except records we must keep by law (for example tax and payment records).

8. Security

Data is encrypted in transit (HTTPS), access is restricted by role and centre, passwords are hashed, and we keep audit logs and backups. No system is completely secure; we will notify affected centres and authorities of a personal data breach as the law requires.

9. Your rights

You can ask to access, correct, update or erase your personal data, withdraw consent, or nominate a person to exercise your rights. Write to info@gprnsoftware.com. Where a centre controls the data, we will pass your request to that centre and help it respond.

10. Grievance officer

Write to our Grievance Officer at info@gprnsoftware.com. We acknowledge grievances within 48 hours and resolve them within 30 days.

11. Changes

We will post changes on this page and update the date above. Material changes are notified to centre owners by email.