AX
Arcvyn AcademiaX
Register No. AX-PRIV/2026
The Privacy Register

How AcademiaX keeps your record.

Arcvyn runs AcademiaX, the day-to-day operations app used by schools, staff, and parents. This register is our full account of what we collect, why we collect it, and the control you keep over it — filed the way a school keeps its own records: plainly, and in order.

Filed
January 2026
Version
1.0.0
Jurisdiction
India
Governing Law
DPDP Act, 2023
Data Never Sold
DPDP Act 2023 Compliant
Encrypted In Transit & At Rest
Child-Safe By Design
Not sure what "Data Fiduciary" or "DPBI" means? +
Data Fiduciary
The organisation — Arcvyn — that decides why and how your personal data is processed.
Data Principal
You. The individual whose personal data is being collected and used.
DPBI
The Data Protection Board of India — the independent body that hears data protection complaints.
Consent Manager
A registered platform through which you can view and manage consents given across services, once notified.

The Full Register

13 entries · tap to expand
I Information We CollectWhat we ask for, and why we ask for it. ▼
A · Personal information
Full name
Mobile number
Institution code
Login credentials
Student name & class
Guardian name
Address details
Support & chat messages
B · Usage data
App usage logs
Crash & error logs
Device information
OS version
C · Uploaded files
Timetables (PDF / image)
Circulars & admin documents

Most of this is entered by school administrators or parents on your behalf, not collected silently in the background — see Entry VII, Children's Privacy.

II How We Use It & Why It's LawfulEvery use ties back to a lawful basis under the DPDP Act. ▼

We use your data for purposes directly tied to running AcademiaX — never anything further:

  • 01Account management — authenticate and secure your account
  • 02School operations — assignments, attendance, notices, exam schedules
  • 03Communication — seamless parent–staff messaging
  • 04Product improvement — diagnose issues, improve performance
  • 05Security — detect and prevent fraudulent activity
We never sell or share your data with advertisers. It exists only to power AcademiaX.
Legal basis under the DPDP Act, 2023

Consent

Registering and using AcademiaX is your informed consent for us to process your data for the app's purpose.

Legitimate Use

Usage and error data is processed to keep the product working, only where this doesn't override your rights.

Legal Obligation

We may retain or disclose data to comply with Indian law, court orders, or government authorities.

You can withdraw consent any time by requesting account deletion — see Entry X, Your Rights.
III Storage & SecurityHow your records are locked, encrypted, and backed up. ▼

We rely on industry-standard safeguards to protect data at rest and in transit:

  • →Supabase — encrypted managed Postgres
  • →bcrypt password hashing
  • →JWT-based authentication tokens
  • →HTTPS/TLS for all data transmission
  • →AWS S3 — secure file storage
No system is 100% secure. We review our security practices on an ongoing basis to keep pace with new risks.
IV Data SharingWho else sees this — and it's a short list. ▼

We do not sell, rent, or trade your personal information. It's shared only in these situations:

  • ✓With your institution, for legitimate school-management purposes
  • ✓When required by Indian law, a court order, or a government authority
  • ✓To investigate or prevent fraud or breach of our terms of service
V International TransfersSome of our servers sit outside India. Here's what changes for you. ▼
Your data may be stored and processed on servers in India and other countries, including the United States and European Union regions, depending on our providers' infrastructure.
Where your data may be processed
IN
India
Primary region
US
United States
Supabase, AWS S3, Vercel
EU
European Union
Possible backup regions
How transfers stay protected
  • →Everything is encrypted in transit via HTTPS/TLS, regardless of location
  • →Our providers hold recognised standards (SOC 2, GDPR-equivalent)
  • →Data only moves to vendors named in Entry IX — no undisclosed third parties
  • →The same protections apply no matter which country holds the data
VI Data RetentionHow long each type of record stays on file. ▼

We keep data only as long as needed to run the Service, or as Indian law requires:

Data typeRetentionWhy
Account & profile dataWhile account is activeService operation
After account deletionUp to 90 daysDeletion & backup clearance
App usage & error logsUp to 12 monthsSecurity & performance
Uploaded filesUntil deleted by adminInstitution control
Legally mandated recordsAs required by lawDPDP Act 2023
After account deletion, data is fully purged from active systems within 90 days, with a confirmation email once complete. Anything held longer is due to a binding legal obligation only.
VII Children's PrivacyAcademiaX is run by adults, on behalf of students — never by them. ▼

AcademiaX is built for institutions, staff, and parents — not directly for children. Here's how minors are protected:

  • 01Student data is entered and managed by authorised administrators or parents — never collected directly from children
  • 02No child's data is processed without proper parental or institutional authorisation
  • 03Children cannot independently create accounts
If you believe we've inadvertently collected a child's data without proper consent, write to support.arcvyntech@gmail.com and we'll act promptly to delete it.
VIII Cookies & TrackingNo ad trackers. Just the bare minimum to keep you signed in. ▼
AcademiaX does not use advertising cookies or third-party trackers. No ad networks, no retargeting, no behavioural tracking of any kind.
We use
  • ✓  Session tokens — secure JWTs kept in app memory, expiring automatically
  • ✓  Essential local storage — preferences & session state only
  • ✓  Anonymised crash & error logs, for fixing bugs
We don't use
  • ✕  Advertising or marketing cookies
  • ✕  Third-party analytics (e.g. Google Analytics)
  • ✕  Tracking pixels or social trackers
  • ✕  Device fingerprinting
Clearing local app data
  • →Android: Settings → Apps → AcademiaX → Storage → Clear Data
  • →Browser: Settings → Privacy → Clear Browsing Data (Chrome, Firefox, Safari)
AcademiaX is mobile-first and doesn't rely on browser cookies — session management runs on server-issued JWTs that expire automatically and are never shared.
IX Third-Party ServicesThe four vendors we rely on to keep AcademiaX running. ▼

Each vendor below receives only the minimum data it needs to do its job, and holds its own privacy policy.

DB
Supabase
Database hosting
FS
AWS S3
File storage
APP
Vercel
App hosting
MAIL
Postmark
Email service
X Your RightsAccess, correct, delete, or withdraw — your call, free of charge. ▼

Under the DPDP Act 2023, you hold these rights. Every request is free, and answered within 30 days:

Access

Request a copy of the personal data we hold about you

Correction

Ask us to fix inaccurate or incomplete data

Deletion

Request full deletion of your account and data

Withdraw Consent

Withdraw consent to processing, at any time

To exercise any right, email support.arcvyntech@gmail.com with subject "Data Subject Request." We respond within 30 days.
XI Raise a ConcernFour steps from complaint to resolution. ▼
1

Email our privacy desk

Write to support.arcvyntech@gmail.com, subject "Privacy Complaint." Describe what happened, which data is involved, and the outcome you want.

2

We acknowledge within 48 hours

You'll get an acknowledgement email with a reference number to track your case.

3

Investigation within 30 days

We investigate and aim to resolve within 30 calendar days, keeping you updated throughout.

4

Escalate to the Data Protection Board

Unsatisfied? Escalate to India's Data Protection Board (DPBI) under the DPDP Act — visit meity.gov.in for guidance.

Requests we handle
  • ✓Access request (DSAR) — ask what data we hold about you
  • ✓Correction — fix incorrect information
  • ✓Deletion — remove your account and associated data
  • ✓Consent withdrawal — stop processing you've previously allowed
  • ✓General complaint — anything else about how your data is handled
All requests are free and answered within 30 days — complex cases may take an extra 30, and we'll tell you if that's the case.
XII Policy UpdatesHow you'll know when this register changes. ▼
  • 01The effective date at the top of this register updates whenever we make a change
  • 02Significant changes are announced in the app or by email
  • 03Continuing to use AcademiaX after an update means you accept the revised policy
XIII Contact UsOne inbox, one desk, real people. ▼

Questions, concerns, or a data request? Reach us directly:

support.arcvyntech@gmail.com
Filed in India