EduNexa
Privacy Policy
1. Who we are
EduNexa (edunexa.pk and the EduNexa mobile apps) is operated by Muhammad Rayyan, EduNexa, PGSHS, Adyala Road, Rawalpindi.. This policy explains what personal data we handle and how we protect it. It should be read with our Terms of Service.
Our role. Schools and colleges (“institutes”) use EduNexa to manage their students, parents and staff. For that data, the institute decides what is collected and why, and EduNexa processes it on the institute’s behalf. Questions about a specific student’s records should go to the institute first. For institute admin accounts and our own website visitors, EduNexa decides how data is used.
2. Data we collect
| Whose data | Examples | Source |
|---|---|---|
| Institute admin and principal | Name, institute name, email, phone, address, billing records | Registration and payments |
| Students | Name, roll number, class, date of birth, photo, attendance, marks, fee records | Entered by the institute |
| Parents / guardians | Name, phone, email, relationship to student | Entered by the institute or parent |
| Teachers and staff | Name, contact details, designation, subjects, attendance, leave and payroll records (HR & Staff module) | Entered by the institute |
| All users | Login details (password stored encrypted), IP address, device and browser type, activity logs | Collected automatically |
| App users | Push-notification token, app version, crash reports | Collected by the mobile app |
| Website visitors | Contact-form details, cookies for login and preferences, and anonymous visit statistics on our public pages (pages viewed, approximate country and city, device and browser type, how the visitor arrived) | Website |
We do not store payment card numbers. If online payment is offered, payments are processed by the payment provider, and only the payment status reaches EduNexa.
3. How we use data
- To provide EduNexa’s features: attendance, fees, results, timetables, HR and staff records, notices and messaging
- To send account, billing and service emails and notifications to institutes, principals, parents and staff (for example, the welcome email after registration)
- To keep the platform secure, prevent fraud and fix errors
- To provide customer support
- To improve the service using anonymised, combined statistics
- To meet legal and tax obligations
We do not sell personal data, and we do not use student or parent data for advertising.
4. Children’s data
Many students on EduNexa are under 18. Student accounts are created by the institute, not by children directly. The institute is responsible for getting consent from parents or guardians where needed. Student data is visible only to authorised staff of that institute and to the student’s linked parents. We show no ads in EduNexa. A parent who wants a child’s data corrected or removed should contact the institute, and we will help the institute act on the request.
5. Sharing and service providers
We share data only with providers we need to run EduNexa, under confidentiality, and only for that purpose:
| Provider | Purpose |
|---|---|
| Hostinger | Servers where EduNexa and its database run |
| Cloudflare | DNS, security protection and email forwarding |
| Email delivery provider | Sending account and notification emails |
| Google (Analytics, Search Console) | Anonymous visit statistics and search performance for our public website pages. These are not used inside logged-in dashboards or the parent and student portals, and visitors who send a “Do Not Track” signal are not counted |
| Cloudflare Web Analytics | Cookie-free visit statistics for our public website pages, if enabled |
| Google (Firebase / Play services) | Push notifications and crash reports in the mobile app |
| SMS / WhatsApp provider | Sending alerts, only if the institute enables them |
| Payment provider | Processing payments, only if online payment is used |
We may also disclose data when required by Pakistani law or a valid order from a court or authority, or to protect the safety of users. If EduNexa is sold or merged, this policy continues to apply to existing data.
6. Security, storage and retention
- Data is sent over encrypted HTTPS connections, and passwords are stored only as secure hashes.
- Each institute’s data is kept separate, and access is limited by user role.
- We take regular backups and limit staff access to what is needed for support.
- Data is stored on our hosting provider’s servers, which may be located outside Pakistan.
- Retention: we keep data while the institute’s subscription is active. After cancellation, the institute can export its data for 30 days, after which it is deleted, except billing and tax records we must keep by law.
No system is completely secure. If a data breach affects an institute’s data, we will inform the Institute Admin promptly.
7. Your rights, app permissions and contact
Your rights. You can ask to see, correct or delete your personal data. Students, parents and staff should ask their institute first; institute Admins and Principals can also ask for a full copy of the institute’s data, or for its deletion, from Security & Data in the dashboard menu, or contact us directly. We reply within 30 days.
Mobile app permissions. The app asks only for what it needs:
- Notifications — to deliver notices, attendance and fee alerts
- Camera / photos (optional) — to upload a profile photo or assignment
- Internet — to connect to EduNexa
The app does not access contacts, location or microphone.
Deleting an account. To delete your account and its data, email support@edunexa.pk with the subject “Account deletion request”, or ask your institute. We confirm and complete the request within 30 days.
Changes. We will post updates on this page with a new effective date, and email institute admins about important changes.
Contact: help@edunexa.pk · support@edunexa.pk · WhatsApp 0371-3386392 · EduNexa, PGSHS, Adyala Road, Rawalpindi.