Gurukul is an ITI management app for Industrial Training Institutes (ITIs): attendance, fees, scholarships, exams, documents and announcements. It is made and run by Saundarya Roof Private Limited, Bhandara, Maharashtra, India ("we").
Your ITI decides what is recorded about its students and staff and why. In the words of India's Digital Personal Data Protection Act, 2023 (DPDP Act), the ITI is the data fiduciary for those records and we process them on its behalf. This page explains what the app actually stores, who it is shared with, how long it is kept, and how you can delete your account.
1. Who uses Gurukul
There are four kinds of account: principal, admin (ITI office staff), teacher and student. Accounts are created by the ITI; there is no public sign-up and there are no parent accounts. Each ITI has its own workspace, and nobody in one ITI can see another ITI's data.
2. What we store
Most of this is entered by the ITI office, not by you.
- Student details: name, roll number, date of birth, mobile number (also your sign-in name), address, mother's and father's names, father's mobile number, email address (optional; Gurukul never sends email), trade, shift, unit, admission date, past education and passing year, bank name (the name only, no account number), and any extra fields your ITI sets up.
- Caste / category: as entered by the ITI (for example "OBC"), used for scholarships and government reports.
- Aadhaar number: an optional 12-digit field on student, teacher, admin and principal records, entered by the ITI office. It is shown to the office and printed on ID cards. Aadhaar card scans may also be uploaded as a scholarship document (below).
- Staff details: name, username, mobile, email, date of birth, joining date, shift times and photo.
- Passwords: stored only as a one-way (bcrypt) hash. We cannot read your password.
- Photos: your profile photo (a student's own upload is checked by the office before it is used) and ID cards made from it; institute gallery photos; the ITI logo; images in exam questions and announcements.
- Documents: scholarship papers a student uploads (for example caste, income or domicile certificate, ration card, Aadhaar card, bank passbook), and results, certificates and scans of original documents uploaded by the office. Rejected uploads are deleted.
- Attendance: daily in and out times, present, half-day, absent or left early, and who marked it. Staff attendance, including late arrival and early exit. No location is recorded.
- Fees and scholarships: fee instalments, exam and other fees, paid dates, who submitted and approved each payment, and remarks; scholarship application details, beneficiary name, ID and mobile, and the credits listed in the government sheet the office uploads (amounts, transaction IDs, bank name and the account number exactly as that sheet shows it).
- Exams: your answers, marks, and when you started and submitted.
- Announcements and notifications sent to you, and whether you have read them.
- Push notification tokens: an address for your browser or phone, so we can send you notifications. Deleted when you sign out of the app.
- Sign-in: the time of your last sign-in. We do not store your IP address or a browsing history.
We do not collect your location, contacts, microphone recordings or advertising ID. Gurukul has no ads, no analytics or tracking tools, and does not send email or SMS. WhatsApp buttons only open WhatsApp on your own phone.
3. Camera, photo library and app lock
- Camera and photo library: used only when you choose to take or pick a photo or a document to upload. Photos are resized on your phone before they are uploaded. The microphone is never used.
- App lock (optional): asks for your fingerprint, face or phone passcode when you open the app. Your phone checks it and tells Gurukul only "unlocked" or "not unlocked". Your fingerprint or face data never leaves your phone and never reaches us.
- On your phone: the app keeps your sign-in in the phone's secure storage. During an online exam your answers are saved on the phone so nothing is lost if the connection drops; that file is deleted after you submit.
4. Why we use it
- To run the features your ITI uses: attendance, fees, scholarships, exams, documents, ID cards and announcements.
- To send push notifications about attendance, fees, approvals and announcements. A notification can include a name, a fee amount or the start of an announcement.
- To keep the service secure and to fix problems you report.
We do not sell your data or use it for advertising.
5. Who can see it
Inside your ITI, people see what their role needs: the principal and office see student and staff records, teachers see what they need for attendance, exams and announcements, and students see their own records. Our support team looks at an ITI's data only to help that ITI.
6. Service providers (processors)
We use these companies to run Gurukul. They handle data only to provide their service to us.
- Supabase: the database that holds the records above.
- Cloudflare R2: storage for photos and documents. Documents and profile photos open through links that expire within minutes.
- Vercel: hosts the Gurukul website and server. Vercel Web Analytics counts page visits on the website without cookies and without identifying you. The phone app does not use it.
- Sarvam AI: translates exam questions into Hindi and Marathi when a teacher asks for it. Only the question and option text is sent, never student details.
- Expo, Google Firebase Cloud Messaging (FCM) and Apple Push Notification service (APNs): deliver push notifications to the phone app (Expo also delivers app updates). Browser notifications go through your browser's own push service.
- Google Fonts: web pages load their fonts from Google, which sees your IP address.
7. How long we keep it
- Records are kept while your ITI uses Gurukul, so that the ITI can keep its attendance, fee, exam and scholarship history. When a course ends, the student's status changes to "old"; the records stay.
- Rejected documents and replaced or rejected photos are deleted.
- Push tokens are deleted when you sign out or when the phone or browser stops accepting them.
- If an ITI stops using Gurukul, we delete its workspace when the ITI asks us in writing.
- Backups kept by our database provider may hold older copies for a short time until they expire.
8. Deleting your account
Any signed-in user can delete their account inside Gurukul: open More in the app, or Profile (staff: Settings) on the web, tap Delete my account, confirm, and add a reason if you like.
- Your request goes to your ITI's principal for approval, with a notification. A principal's own request goes to the Gurukul team at Saundarya Roof Private Limited instead.
- You can see the status of your request, and cancel it while it is waiting.
- If it is not approved, you are told why when a reason is given, and you can ask again.
When your request is approved:
- Your sign-in is disabled at once, on every phone and browser.
- Your push notification tokens are deleted.
- Your profile photo and the documents you uploaded yourself are deleted, including the stored files.
- Your name is replaced with "Deleted user", and your mobile number, email, address, father's mobile number (students) and Aadhaar number are cleared. Staff usernames are released.
What the ITI keeps, and why:
An ITI must keep certain records about its trainees and staff: attendance, fees and payments, scholarships, exam results, admission details (roll number, date of birth, parents' names, caste / category, past education, trade and batch) and documents the office uploaded. These stay in the ITI's records, shown as "Deleted user", and are no longer linked to a sign-in. To ask the ITI to delete these too, contact the ITI office.
If you can no longer sign in, ask your ITI office, or write to us at helpdesk@saundaryaroof.homes with your name, the mobile number on your record and your ITI's name.
9. Your rights
Under the DPDP Act you can ask for a summary of your data, ask for it to be corrected or completed, ask for it to be erased, withdraw consent, nominate someone to act for you, and raise a complaint. Corrections to your records are usually fastest through your ITI office. You can also write to us.
10. Students under 18
Many ITI trainees are under 18. Their accounts are created by the ITI as part of admission, and the ITI is responsible for getting a parent's or guardian's consent. Gurukul does not show ads, does not track anyone, and does not share student data beyond the providers listed above.
11. Security
All traffic uses HTTPS. Passwords are hashed. Each ITI's data is kept separate, and documents and profile photos are only reachable through short-lived links.
12. Grievance officer and contact
Grievance Officer, Saundarya Roof Private Limited, Bhandara, Maharashtra, India.
Email: helpdesk@saundaryaroof.homes
Phone / WhatsApp: +91 89757 06582
If you are not satisfied with our answer, you can complain to the Data Protection Board of India. For everyday help, see Help & support.
13. Changes to this policy
When this policy changes, the effective date at the top changes too.
