Privacy Policy

Who we are

• App name: Punjab Educare (Android)
• Controller/Developer: BXAMRA
• Contact: bxamra@icloud.com | support@punjabeducare.co.in
• Grievance Officer (India DPDP 2023): Jasamrit Singh Bhamra, bxamra@icloud.com

Scope

This policy covers data handled by the mobile app, backend APIs, and supporting services used for teacher authentication, question submission workflows, content management, and administrative functions. It applies to registered teachers and administrators only.

Data we collect

Data collected from registered teachers and administrators may include:

• Account and profile: name, email/phone, teaching subjects, school/institution affiliation, role (teacher/admin), language preferences.
• Authentication: hashed credentials, tokens, one-time codes, and session identifiers.
• App activity: content submitted, question submissions, approval workflows, progress tracking, and timestamps.
• Question submissions: educational content, questions, answers, explanations, and metadata submitted by teachers for academic purposes.
• Device and diagnostics: app version, device model, OS, crash logs, performance metrics, and coarse network information.
• Communications: messages to support, feedback, error reports, and attachments voluntarily provided.
• Optional permissions: camera (for content submissions), photos/files (upload/download materials), notifications (FCM).

How we use data

• Provide and improve core features: question submission workflows, content management, and approval processes.
• Authenticate teachers and administrators, enforce role-based permissions, and secure accounts.
• Process and review submitted educational content for inclusion in the platform.
• Monitor system reliability, diagnose issues, and prevent fraud and abuse.
• Send essential service messages (e.g., submission status updates, password resets) and administrative notifications.

Question submissions and intellectual property

• Teacher submissions: Questions and educational content submitted by teachers for academic purposes become the property of the Punjab Educare team once accepted and approved.
• Permanent retention: Accepted educational content will be permanently retained in our database and cannot be requested for removal, as it becomes part of the evaluation process.
• Academic integrity: Submitted content may be used for educational purposes, curriculum development, and assessment creation.
• Attribution: While content becomes our property, we may maintain records of contributing teachers for internal purposes.

Data sharing

Data is not sold. Limited sharing may occur with:

• Service providers (processors) for hosting, storage, crash reporting, analytics, notifications, and security scanning, bound by data protection agreements.
• Punjab Department of Education and authorized educational authorities for curriculum oversight and quality assurance.
• Legal and safety: to comply with law, defend legal claims, or prevent harm and abuse.

Retention

• Teacher account data: retained while the account is active; deleted within 4 weeks after confirmed deletion request unless retention is required by law.
• Submitted educational content: permanently retained once accepted, as it becomes part of the educational curriculum and cannot be deleted.
• Submission records: maintained for academic integrity and audit purposes as required by educational authorities.
• Logs and diagnostics: typically 30–180 days unless needed longer for security investigations.

Security

• Encryption in transit (TLS) and at rest for sensitive data.
• Credential hashing (bcrypt/Argon2) and scoped access tokens.
• Role-based access control for teachers and administrators.
• Monitoring, rate limiting, and safeguards against unauthorized access.

Account and data deletion

• Email requirement: Send a deletion request to accounts@punjabeducare.co.in from the same email address you used to register your teacher account.
• Processing time: Account deletion requests will be processed within 4 weeks of receiving a verified request.
• Verification: Requests must come from the registered email address for security purposes.
• Content retention: While your account will be deleted, any educational content you submitted that was accepted and approved will remain permanently in our database as it has become part of the curriculum.
• What gets deleted: Personal account information, login credentials, and submission history records.
• What remains: Approved educational content, questions, and materials you contributed (de-identified).