Your data, in plain words

1. Who we are and what this covers

MyClassUp (“we”, “us”) gives coaching institutes, schools and colleges (“institutes”) a website, an admin panel and a mobile app for courses, tests, assignments, results and messages.

This policy covers this website, the MyClassUp admin panel, each institute’s MyClassUp address and the MyClassUp mobile app. It follows India’s Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and the rules made under it.

2. Your institute and us

When an institute adds students, parents or teachers to MyClassUp, the institute decides what details to add and why. Under the DPDP Act the institute is the Data Fiduciary for that information, and we process it on the institute’s behalf, only as the institute instructs and as this policy describes.

For institute owners and staff who sign up with us, and for anyone who writes to us or fills in a form on this website, we are the Data Fiduciary.

If you are a student or parent, your institute is usually the best first contact for questions about your details. You can also write to us, and we will help or pass the request to your institute.

3. What we collect

• Sign-in details: your name, mobile number and, if you give one, your email address. We send one-time codes to that number or address so you can sign in.
• Details your institute adds: such as a student’s name, roll number, batch and course, a contact number or email, and who the student’s parent or guardian is.
• Learning activity: lessons opened and watched, test answers, scores and ranks, assignments submitted and the marks and comments on them.
• Messages and notices that your institute sends through MyClassUp.
• Device and usage details: the app version, device type, a notification token so we can send you alerts, your internet address, and records of sign-ins and important actions, kept for security.
• Requests from this website: the institute name, web address, your name and the contact details you type into the demo form.

We do not collect payment card or bank details ourselves. If payments are taken online, a licensed payment provider handles them and tells us only whether a payment succeeded.

4. Why we use it

• To run MyClassUp for your institute: show courses, run tests, publish results and deliver messages.
• To sign you in and keep your account safe.
• To send notices you need, such as a new test or a marked assignment.
• To answer questions and fix problems you report.
• To keep the service secure, find misuse and meet our legal duties.
• To reply to a demo request and set up a new institute.

5. What we never do

• We do not sell personal data, or rent or trade it.
• We do not show advertising in MyClassUp, and we do not use your data to target ads anywhere.
• We do not track or profile children for advertising or for anything that could harm them.
• One institute can never see another institute’s students or data.

6. Children and parents

Many students are under 18. Before a child’s account is used, the institute must obtain the consent of the child’s parent or lawful guardian, as the DPDP Act requires. MyClassUp records when that consent is given and if it is later withdrawn.

A parent or guardian can see their child’s progress, ask for the child’s details to be corrected or erased, and withdraw consent at any time by contacting the institute or us.

7. Who we share it with

We share personal data only with:

• Your institute, and the teachers and staff it gives access to.
• Service providers who help us run MyClassUp: hosting and databases, SMS and email for sign-in codes, push notifications, and video and file storage. They work under contract, only on our instructions, and must keep the data safe.
• Authorities, when Indian law requires it or to protect someone’s safety.

We aim to keep data in India. If a provider stores some of it outside India, it is only in a country that Indian law allows.

8. How long we keep it

We keep personal data while the account is in use and your institute is with MyClassUp. When an institute removes a student, or when you ask us to delete your account, we delete the details from our live systems within 30 days. Copies in our backups are overwritten within a further 90 days.

Some records may be kept longer when the law requires it, such as invoices and tax records, or security logs needed to look into misuse. When an institute leaves MyClassUp, it can export its data for 30 days, after which we delete it.

9. How we protect it

• All traffic to and from MyClassUp is encrypted.
• Each institute’s data is kept separate from every other institute’s at the database level.
• Only staff who need access to do their job get it, and important actions are logged.
• Sign-in uses one-time codes, so there are no student passwords to steal.

10. Your rights

Under the DPDP Act you can:

• ask for a summary of the personal data we hold about you and who it was shared with;
• ask us to correct, complete or update it;
• ask us to erase it (see how to delete your account);
• withdraw consent you gave, which stops further use but does not undo what was lawfully done before;
• name someone to use these rights for you if you die or cannot act; and
• complain to us, and if you are not satisfied, to the Data Protection Board of India.

Write to myclassup.support@gmail.com from the mobile number or email your account uses. We may ask you to confirm with a one-time code before acting. We reply within 7 days, and resolve requests within the time Indian law allows.

11. Cookies

This website sets no cookies and no tracking or advertising tags. To see which pages are useful, it counts visits with Vercel Web Analytics, which uses no cookies, does not follow you to other sites, and does not keep your internet address; it records only the page, the referring site, and your country, browser and device type. The admin panel uses only the cookies needed to keep you signed in.

12. Changes to this policy

When we change this policy, we update the date at the top. If a change affects how we use your data in an important way, we will tell institutes and show a notice in the app before it takes effect.

13. Contact and complaints

For any privacy question, request or complaint, write to us: