Where is Schoolwale managed from?

Schoolwale is run and supported by our team in India. Data is backed up continuously with point-in-time restore.

Can Schoolwale staff see our data?

Only for support, through a separate administrative role, and that access is recorded.

Does Schoolwale sell or share school data?

No. Your school’s data is never sold and is used only to provide the service to your school.

How do you handle the DPDP Act?

Parents’ consent is recorded, parents can download their child’s data, and erasure requests are handled by the school admin while keeping records the law requires.

Data security and DPDP Your school’s data stays your school’s

You hold the records of hundreds of children. This is how Schoolwale keeps them separate, private and accounted for, and how it helps you meet India’s Digital Personal Data Protection Act.

Book a free demo See all features

Each school walled off by the database itself

Every school’s records are separated inside the database with row-level security, not only by the application. A query that forgets which school it is for returns nothing.

Separation enforced by PostgreSQL itself
Parents see only their own children; staff only what their role needs

Identity numbers encrypted and masked

Aadhaar, PEN and APAAR numbers are stored encrypted and shown masked. Seeing a full number is a separate permission, and every view is recorded.

Encrypted at rest
Every reveal written to the activity log

A record of every change

Who changed a fee, a mark, an attendance entry or a phone number, when, and the old and new values. The record cannot be edited or deleted.

Append-only activity log
Fee corrections are reversals, never edits

Strong sign-in

Staff can protect their accounts with an authenticator app; Sentriqo’s own staff must. Parents sign in with their mobile number and a one-time code, with limits on attempts.

Two-step sign-in for staff
Rate-limited one-time codes for parents

Photos shared with care

Photos are re-encoded with location and camera details removed, served only to signed-in families, and a child without photo consent is shown only to their own family.

No GPS data kept
Consent-aware albums

Tools for the DPDP Act

Parents can download a copy of their child’s data and ask for erasure; the school admin reviews the request and keeps only what the law requires. Consent answers are kept and never overwritten.

Data export for parents
Erasure with legal retention
Consent log

Security questions

Where is Schoolwale managed from?: Schoolwale is run and supported by our team in India. Data is backed up continuously with point-in-time restore.
Can Schoolwale staff see our data?: Only for support, through a separate administrative role, and that access is recorded.
Does Schoolwale sell or share school data?: No. Your school’s data is never sold and is used only to provide the service to your school.
How do you handle the DPDP Act?: Parents’ consent is recorded, parents can download their child’s data, and erasure requests are handled by the school admin while keeping records the law requires.

Read our plain-language guide: DPDP Act 2023: what it means for Indian schools.

Report a security issue

If you think you have found a weakness in Schoolwale, tell us and we will look at it straight away. Please give us a chance to fix it before telling anyone else.

Email hello@schoolwale.in

What helps us

What you found, and the page or app screen where it happens.
Steps to see it again, and what someone could do with it.
Use only your own or a test account. Do not open, change or keep other schools’ or families’ data, and do not disrupt the service.
We reply within three working days and keep you updated until it is fixed.

Our contact details for researchers are also at /.well-known/security.txt. To close your own account, see Delete your account.

See it with a school like yours

A 30-minute call with a sample school set up to match your size and board. Free, and no obligation.

Book a free demo How pricing works