Privacy Policy

1. Who is responsible for what

• Information a school adds about its children, parents and staff is controlled by that school. Under India's Digital Personal Data Protection Act, 2023 the school is the "data fiduciary" and myTiny processes the information on the school's behalf.
• School owner accounts and visitors to mytiny.in: for this information myTiny decides how it is used and is responsible for it.

If you are a parent and have a question about your child's information, please contact your school first. We will help the school answer you.

2. What we collect

• School account details: school name, address and contact details; the owner's name, email and mobile number; plan and payment records.
• What schools add: for example children's names, dates of birth, classes, photos, allergies or medical notes the school chooses to record, parents' and pickup persons' contact details, staff details, fees and receipts, events, notices and gallery photos.
• Technical details: IP address, browser type and the pages used, kept in security logs.

We do not ask for Aadhaar numbers, and we ask schools not to add them.

3. How we use it

• to run myTiny for the school: show the right information to the right people, send receipts, notices and reminders the school asks us to send;
• to keep accounts secure, prevent misuse and fix problems;
• to bill schools for their plans, and to meet legal and tax duties.

We never sell personal information, never show advertising, and never track or profile children. School pages, the parent portal and the admin panel have no advertising or third-party tracking tools.

4. Who can see it

• Each school's information is kept separate. Staff and parents of one school cannot see another school's data.
• Parents only see information about their own children, and photos and notices meant for them.
• We use trusted service providers to run myTiny (such as hosting, email delivery and payment processing by Razorpay). They may only use the information to provide their service to us.
• We may share information if the law requires it, for example a valid order from a court or government authority.

5. Keeping it safe

myTiny runs over HTTPS, stores data on servers in or near India, keeps daily backups, and removes location data from uploaded photos. Private files such as children's photos are only shown to people allowed to see them. Our staff access a school's data only to help that school, and every such access is recorded.

6. How long we keep it

We keep a school's information while its account is open. When an account is closed we keep it for a limited time so the school can export it, then delete it; backups are removed within 30 days after that. We may keep billing records for as long as tax law requires.

7. Your rights

You can ask to see, correct or delete your personal information, and to withdraw consent. Parents should ask their school, which is responsible for their child's information; school owners can write to us directly.

8. Cookies

We only use the cookies needed to keep you signed in and to protect forms from misuse. We don't use advertising cookies.

9. Grievances and contact

If you have a concern about how your information is handled, contact our grievance officer at privacy@mytiny.in. We aim to reply within 7 days. For anything else, write to hello@mytiny.in.

10. Changes

If we change this policy in an important way, we will tell school owners by email before the change applies.