Privacy Policy

Last updated: 22 May 2026

1. Who we are

Kindred is a school safety, communication, and learning platform operated by the school you are signed in with. This policy explains how we handle your personal information under India's Digital Personal Data Protection Act, 2023 ("DPDPA") and applicable child-safety regulations.

2. What we collect

To make Kindred work, we collect:

• Account info: your name, phone number (parents) or username (school staff), and which school + role you belong to.
• Your child's information: name, class/section, photo if you upload one, and the records the school enters — attendance, behaviour notes, homework, test marks, bus assignment.
• Bus location: when a driver starts a route, their device's GPS position is recorded every 15 seconds so parents on that bus can see where it is.
• Messages between parents and teachers, including voice notes you record. Stored privately to your conversation only.
• School-wide posts and event announcements posted by your school's staff.
• App usage: when you sign in, what device, what browser. Used only for debugging and security.

3. Why we collect it

Only to deliver the features of the app:

• Showing you where your child's school bus is right now.
• Notifying you of homework, attendance, behaviour notes, test marks, and school events.
• Letting you chat with your child's teacher directly.
• Keeping your account secure with phone-OTP login.

4. Who we share it with

No one for advertising. No one for marketing. We are not in the data brokerage business and we never will be.

We use a small number of essential service providers ("data processors") who only process the minimum information needed for their part:

• Supabase — stores all your data securely in an India-region database (Mumbai).
• Twilio — sends one-time-password SMS to your phone for login. Only your phone number is shared.
• Mapbox — renders the map on the bus-tracking screen. Sees only map tile requests, never your child's identity.
• Vercel — hosts the application. Sees that you opened the app, not what you did inside.

5. How long we keep it

We retain your data for as long as your child is enrolled with the school + a reasonable archival period after, unless you formally request deletion (see Section 7). Bus location pings, daily attendance, behaviour notes, and similar records are kept permanently by default — they form your child's school memory.

6. How we keep it safe

• All traffic is encrypted (HTTPS).
• The database enforces row-level security: each parent can only access their own child's records; each teacher only their class.
• Sensitive credentials (Twilio, server-side keys) are never visible to the app or to any user.
• The Supabase database itself is operated by Supabase, Inc. under SOC 2 Type II controls.

7. Your rights under DPDPA

You can, at any time:

• Ask to see all the data we hold about you and your child.
• Ask us to correct anything that's wrong.
• Ask us to delete your data. We honour deletion requests within 30 days; some information may be retained where law requires us to.
• Withdraw consent for any specific data use (location, photos, messaging) — features that depend on it will turn off.
• Lodge a complaint with the Data Protection Board of India.

Email your request to your school's office, or contact us at privacy@kindredschool.in.

8. Children's data

Kindred is built for parents to manage information about their children. The child is never the account holder — the parent always is. We do not collect information directly from children, do not show advertising to anyone, and do not allow third-party tracking. We treat the data of children with the heightened care DPDPA requires.

9. Changes to this policy

If we change anything material, we'll notify every parent in the app and via SMS before the change takes effect.

10. Contact

Questions or concerns: privacy@kindredschool.in. Your school office is also happy to help.