Skip to content

Legal

Security & Safety

Last updated: 14 October 2026

ZustSkool (the "Service", available at getzustskool.com, its subdomains and the ZustSkool mobile apps) is owned and operated by GPRN Software ("ZustSkool", "we", "us", "our"). Questions? Email info@gprnsoftware.com.

Families trust centres with their children, and centres trust us with their records. Security and child safety are built into every part of ZustSkool.

Data protection

  • All traffic is encrypted in transit with HTTPS (TLS).
  • Data is hosted with a reputable cloud provider, backed up daily, and stored with encryption at rest.
  • Passwords are never stored in plain text; they are salted and hashed.
  • Card, UPI and bank details are handled by Razorpay, a PCI DSS compliant payment gateway. ZustSkool never stores full card numbers.

Access control

  • Role-based permissions: owners, directors, teachers and parents see only what their role allows.
  • Each centre's data is isolated from every other centre.
  • Parents see only their own children's records.
  • CAPTCHA and rate limits protect sign-in against automated attacks, and sessions time out.
  • Important changes are recorded in audit logs.

Child safety features

  • Digital check-in and check-out with time stamps, and optional geofencing so staff check in only at the centre.
  • Authorised pickup lists, so centres know who may collect each child.
  • Photos and updates are shared only with that child's guardians, never publicly.
  • Allergy, medical and emergency contact details are kept in the child's record for staff who need them.

Reliability

We monitor the Service around the clock, apply security updates promptly, and test backups so records can be restored.

Your part

Use a strong, unique password, never share your login, and remove access for staff who leave. Centres should collect the consents required from families before adding children's data.

Report a security issue

Found a vulnerability or a concern about a child's data? Email info@gprnsoftware.com with the subject "Security". We respond to security reports as a priority and ask that you give us reasonable time to fix an issue before disclosing it.