Privacy Policy

Effective date: 20 October 2026 · Applies to the EDZO mobile app (Android and iOS)

This policy explains what personal data the EDZO mobile app processes, why, and the choices you have.

Who we are

The EDZO mobile app is published by Ashwin Varghese Mathew, an individual developer based in Bengaluru, Karnataka, India ("we", "us"). On Google Play the app is listed under the developer name Immerse Digital Solutions. On the Apple App Store the seller is Ashwin Mathew.

Contact for anything in this policy: [email protected].

How EDZO works: your school is in charge of your data

EDZO is a campus management (ERP) system used by schools and colleges ("your school"). Your school creates your account and decides what information is kept about students, parents and staff. You cannot sign up in the app on your own.

Your school decides why and how school records are used. Under India's Digital Personal Data Protection Act, 2023 (DPDP Act) it is the Data Fiduciary.
We run the app and its servers for your school and use personal data only to provide the service. We act as the school's Data Processor.

For questions about the records your school keeps (for example a mark, an attendance entry or a fee balance), contact your school office first. We will help your school answer you.

Data the app processes

What the app shows depends on your role (student, parent, teacher, staff or school leadership) and the modules your school uses.

Account and identity

Name, username, role, school or institution, profile photo set by the school
Email address and phone number, if your school has them
Your password and 6-digit MPIN. They are sent over an encrypted connection and stored only as protected hashes on our servers. The app does not store them on your phone.

Student records (students, parents and authorised staff)

Admission number, class and section, roll number, subjects, timetable, digital ID card (QR code)
Attendance, leave requests and attendance correction requests
Homework, your homework answers, exams, marks and results
Notices and memos from the school, and whether you have read or acknowledged them
Library loans and renewal requests, transport route and stop
Fee information: invoices, balances and receipts, shown for information only (see "Payments")
Guardian names and contact details linked to a student

Staff records (teachers and staff)

Employee code, designation, department, attendance, leave and corrections
Payslips (pay, deductions)
HR details you can view or update yourself: date of birth, gender, blood group, current and permanent address, emergency contact, bank account details and PAN, and HR documents you upload
Lesson logs, marks entry, homework, memos, personal notes and reminders you create

Technical data

Our servers log requests (IP address, time, the action requested and errors) to keep the service secure and working.
The app uses a secure, httpOnly session cookie so you stay signed in. The short-lived access token is held in memory only.
The app contains no advertising, analytics, tracking or crash-reporting software development kits (SDKs). It does not collect your location, contacts, photos library, microphone or advertising identifiers.

Permissions the app may ask for

Notifications (teachers): used only to remind you about your own notes when you set a reminder time. The app asks the first time you set a reminder. You can say no and the rest of the app still works.
Files (teachers and staff): when you upload an HR document, you choose the file with the system file picker. The app reads only the file you pick.
Downloads: when you save a PDF (for example a payslip), you choose where it is saved.

Why we use the data

To run the features your school has enabled for you: sign-in, attendance, homework, exams, notices, leave, HR self-service and so on
To keep accounts secure (sign-in checks, session management, audit logs, abuse prevention)
To provide support when you or your school contact us
To meet legal obligations

We do not sell personal data, use it for advertising, or build profiles for marketing. We do not track you across other apps or websites.

Children

Students under 18 use EDZO through their school. Schools are responsible for obtaining any consent required from parents or guardians (for example verifiable parental consent under the DPDP Act) before giving a child an account. EDZO does not show advertising and does not track or monitor children's behaviour for advertising. If you believe a child's data was provided without proper consent, contact the school or write to us.

Who we share data with

Your school. Authorised staff of your school see data according to the roles and permissions your school sets.
Service providers who host and operate our servers and email, under contracts that require them to protect the data and use it only for us.
Authorities, when the law requires it.

We do not share personal data with advertisers or data brokers.

Payments

The EDZO mobile app does not take payments. It shows fee invoices, balances and receipts for information only. Fees are paid directly to your school by the methods your school offers.

How long data is kept

School records are kept for as long as your school instructs us and as required by law (for example academic, attendance, fee and payroll records).
When a login is deleted (see "Deleting your account"), we close the login and erase the email, phone number and photo stored on it, and sign it out everywhere. Records your school must keep by law stay with the school.
Server logs are kept for a limited period for security and then deleted.

Security

All traffic between the app and our servers is encrypted (HTTPS). Sign-in needs a password and an MPIN. Access within a school is limited by role, and important actions are logged. No method of storage or transmission is completely secure, but we work to protect your data and fix issues quickly.

Your rights and choices

Depending on the law that applies to you (including the DPDP Act), you can ask:

to access a summary of your personal data
to correct or update inaccurate data. Many details can be corrected by your school. Staff can update some HR details in the app.
to erase your data or delete your account
to withdraw consent where processing is based on consent
to nominate another person to exercise your rights if you die or become incapacitated
to raise a grievance, and to complain to the Data Protection Board of India if your grievance is not resolved

Send requests to your school or to [email protected]. We may need to confirm your identity and will work with your school to respond.

Deleting your account

You can ask for your EDZO account to be deleted at any time:

In the app: Profile → Privacy & support → Delete my account
On the web: follow the steps at myedzo.com/delete-account

What is deleted, what is kept and the timelines are explained on that page.

Where data is stored

Data is stored on servers operated by our hosting providers. If data is processed outside India, we do so only as permitted by applicable law.

Changes to this policy

We may update this policy when the app or the law changes. We will change the effective date above and, for important changes, tell you in the app or through your school.

Grievance officer and contact

Ashwin Varghese Mathew, Grievance Officer
Bengaluru, Karnataka, India
Email: [email protected]

We aim to acknowledge requests within 72 hours and to resolve them within 30 days.