1. Data Fiduciary
Amara Education Private Limited is the Data Fiduciary in respect of personal data processed through XSchools.in and through every other Group Platform listed in the Terms of Use — including littlerootsapp.com, Dhuruv, Teacher's Knowledge Pick, PRERANA, and any brand launched in future. This notice applies to all of them, and to every person who uses or browses any of them.
This policy describes our current privacy practices and is intended to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 as their provisions commence in phases. Until the new framework fully applies, we also follow the privacy and security requirements applicable under the Information Technology Act, 2000 and rules made under it.
2. What we collect
From Teachers
Name, gender, date of birth, photograph, mobile number, email address, postal address, city, district and state; educational qualifications, institutions and years; teaching experience, subjects, classes and boards; languages; current and expected salary; notice period; certificates and documents you choose to upload; resume content; and application history.
From Schools
School name, type, board, address and location; contact person name, designation, mobile and email; vacancy details; and search and shortlisting activity.
From Vendors
Company or individual name; category of goods or services; contact person, mobile, email and address; business registration details you choose to provide; and listing content.
From Parents
Name, contact details, location, and the category of tuition or service sought.
Automatically
IP address, device and browser type, pages visited and timestamps — collected for security, fraud prevention and service improvement.
Payment data
Payments are processed by our payment gateway. We do not store card numbers, CVV or bank credentials. We retain the transaction reference, amount, date and status.
3. Why we process it, and on what basis
We process personal data on the basis of your consent, given at the point of registration and at each point where additional information is requested, and in certain cases for legitimate uses permitted under Section 7 of the DPDP Act.
We do not sell personal data. We do not use personal data for behavioural advertising.
Specifically, we process data to:
- Create and manage your account and profile
- Display profiles and vacancies as directed by users
- Enable matching and communications between users
- Process payments and issue tax invoices
- Send service messages: registration confirmation, password reset, application updates, subscription and invoice notices
- Respond to enquiries, grievances and support requests
- Meet legal obligations and prevent fraud
- Improve and secure the Platform
Where consent is required, we seek it through the relevant notice or control. You may withdraw consent where applicable, though this may affect features that depend on that processing.
5. Children's data
Accounts on every Group Platform are for persons aged 18 and over. Children are not permitted to register, browse or transact, and we do not entertain any use of our services by a child.
Where a Parent uses the Platform to seek tuition or services for a child, we collect only the minimum necessary — the child's age group and the subject or service required. We do not collect a child's name, photograph, school, address or contact details, and Parents must not submit them.
Where any personal data of a child is processed, we obtain verifiable parental consent as required by Section 9 of the DPDP Act and the corresponding provisions of the DPDP Rules, 2025.
We do not undertake tracking, behavioural monitoring or targeted advertising directed at children.
If you believe a child's personal data has been submitted to us, write to hello@xschools.in and we will delete it.
AI processing
Where you use an AI feature, the details you supply to that feature are transmitted to a third-party AI processing provider under contract, solely to generate the output you asked for.
We send the minimum necessary. For the AI resume builder, free-text fields requiring rewriting are sent; your name, mobile number and email address are not.
We do not use your personal data to train any third-party AI model, and our agreements with providers do not permit them to do so.
You control whether to use an AI feature. Every feature that uses AI can be completed manually instead.
Do not enter another person's personal data, a child's personal data, identification numbers, or payment credentials into any AI feature.
Accuracy of what you tell us
All personal data on the Platform is supplied by the user it concerns. We store and display it as given. We do not verify it, and we make no representation to any other user about its truth.
You are responsible for the accuracy of what you submit, and for keeping it current. Submitting false particulars is a breach of the Terms of Use and may be an offence.
6. How long we keep it
We retain personal data only for as long as needed to provide the service, comply with legal obligations, resolve disputes, enforce agreements and maintain security.
Where you withdraw consent, or where the purpose is no longer served, we erase the data unless retention is required by law.
When an account is closed, published content is removed from public view, subject to necessary legal retention.
7. Your rights as a Data Principal
Under Sections 11 to 14 of the DPDP Act you have the right to:
- Access — obtain a summary of the personal data we process about you and the identities of those with whom it has been shared.
- Correction and completion — have inaccurate or incomplete data corrected or completed.
- Erasure — have your personal data erased, unless retention is required by law.
- Withdraw consent — at any time, as easily as it was given. Withdrawal does not affect processing already carried out.
- Nominate — nominate another individual to exercise your rights in the event of your death or incapacity.
- Grievance redressal — as described under our Grievance Mechanism.
To exercise any right, write to hello@xschools.in from your registered email address. We will respond within 30 days. We may ask you to verify your identity before acting, to protect your data from misuse.
If you are not satisfied with our response, you may complain to the Data Protection Board of India.
You can also change the visibility of your teacher profile at any time through the relevant platform controls.
8. Security
We maintain reasonable security safeguards appropriate to the nature of the data, including:
- Encryption of data in transit using TLS
- Hashed storage of passwords — never in plain text
- Access to personal data restricted to authorised personnel on a need-to-know basis
- API keys, tokens and database credentials held server-side and never exposed in client-side code
- Rate limiting and abuse protection on authentication endpoints
- Logging of access and administrative activity
- Periodic review of access rights and of our security posture
No system is completely secure. We do not warrant absolute security, but we undertake to maintain safeguards proportionate to the risk.
9. Personal data breach
If a personal data breach occurs, we will:
- Intimate the Data Protection Board of India without delay on becoming aware of the breach, and furnish detailed particulars within 72 hours.
- Notify each affected Data Principal without delay, in clear and plain language, describing the nature and extent of the breach, the data affected, the likely consequences, the measures we have taken, and the steps that individual can take to protect themselves.
- Provide our contact details for further information.
- Record the incident and the remedial action taken.
10. Transfers outside India
Personal data is primarily stored on servers located in India. Where a service provider processes data outside India, we do so subject to the restrictions in Section 16 of the DPDP Act and any restriction notified by the Central Government.
12. Changes to this policy
Material changes to this notice will be communicated to registered users by email or in-app notice before taking effect. The current version and its "Last updated" date will appear on this page.
Contact and grievances
For privacy questions, requests or complaints, contact our Data Protection Contact. Please include your name, registered contact details, the issue and any relevant account or transaction reference so we can respond effectively.
Mr. Bakthaa, Director — Grievance and Operations
Email: hello@xschools.in
Phone: +91 90924 21699
Amara Education Private Limited
170/2, NSR Road, Coimbatore – 641011, Tamil Nadu, India
Complaints acknowledged within 24 hours · Resolved within 15 days of receipt