The short version
- We collect what is needed to build and run your school's timetable, and to sign you in. Nothing more.
- schedU works with class sizes, not student records. It has no place to enter a student's name, roll number or contact details.
- We do not sell data, show advertising, or use analytics or advertising trackers.
- A school's timetable data belongs to the school. We look after it on the school's behalf.
What we collect
Your account. Your name and email address, and your sign-in details, which are handled by our sign-in provider (see below). If you sign in with Google or your school's single sign-on, we receive your name and email from it.
Your school's timetable data. What a school enters to build its timetable: the school's name, address and logo; classes and their sizes; subjects; rooms; teachers' names and, where the school adds them, their email addresses; working days, bells and breaks; the timetables themselves; and day-to-day records such as a teacher marked unavailable, who covered a lesson, and syllabus progress.
Colleagues you invite. When a school invites a colleague, we keep their email address and role so they can sign in to that school.
Payments. If a school pays for a plan, the payment is taken by Razorpay. We receive the plan, the amount, the subscription's status and dates, never your card, bank or UPI details.
Messages you send us. When you use the contact form or write to us, we keep your name, email and message. The contact form also records your IP address and browser type, to deal with spam.
Technical records. Our servers keep short-lived logs of requests (time, address requested, IP address) to keep the service working and secure.
Why we use it
- To provide the service you asked for: build, share, print and keep your timetables, and sign you in.
- To bill a school that chooses a paid plan.
- To answer your messages and send the emails the service needs (sign-in, share codes, replies). We do not send marketing emails unless you ask for them.
- To keep schedU secure and working, and to meet our legal obligations.
We process it because you or your school asked us to provide the service, and you consent to that when you sign up. You can withdraw consent at any time by asking us to delete your account.
Who helps us run schedU
These providers process data for us, only to run schedU:
- Clerk: sign-in and account security.
- Railway: our servers and database.
- Cloudflare: delivers the website and the app.
- Razorpay: payments for paid plans.
- Our email provider: sends the emails the service needs.
- GitHub: keeps our encrypted nightly backups.
- Google Fonts: the app loads its typefaces from Google, which sees your IP address when it does.
Some of these providers store data on servers outside India. They protect it under their own security and privacy commitments.
How long we keep it
- Account and school data: while the account is open. When a school or a person asks us to delete it, we delete it within 30 days, and it leaves our backups within a further 30 days as they expire.
- Contact messages: until they are dealt with, and no longer than 24 months.
- Payment records: as long as Indian tax and accounting law requires.
- Server logs: a few weeks.
How we protect it
Connections are encrypted. Each school's data is kept separate, and the server checks on every request that you belong to the school whose data you ask for. Backups are encrypted before they are stored. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.
Your rights
You can ask us to show you the personal data we hold about you, to correct it, to delete it, or to tell you who we have shared it with. A school can ask for a copy of its data, and schedU already lets a school export its timetables at any time. Under India's Digital Personal Data Protection Act, 2023, you can also name someone to act for you, and complain to the Data Protection Board of India if you are not satisfied with our answer.
If you are a teacher whose details were added by your school, the school decides what it keeps about you; please ask your school first, and write to us if you need help.
Children
schedU is for schools and their staff. It is not meant for students to sign up, and it does not ask for students' personal details.
Cookies and storage in your browser
We use only what the service needs: cookies that keep you signed in, and storage in your browser that keeps your work and preferences on your device. No advertising or tracking cookies.
Changes to this policy
If we change this policy in a way that matters, we will say so in the app before the change takes effect. The date at the top shows when it last changed.
Contact and grievances
Write to Jugal Sunar, who handles privacy questions and grievances, at hello@bhusku.com. We acknowledge every request within 2 working days and resolve it within 30 days.