Legal

Privacy Policy

What InstiQ collects, why, and what your rights are.

Last updated: 20 September 2026

1. About this app

InstiQ — Smart Institute App is made and run by InstiQ ("we", "us", "our"), Bhopal, Madhya Pradesh, India. Schools, colleges and coaching institutes in India use it to run their academic work.

Who is responsible for your data: your institute decides what is collected about you and why. Under the Digital Personal Data Protection Act, 2023 your institute is the Data Fiduciary, and we handle that data for it as its Data Processor. For the account of the person who registers an institute, and for subscription and payment records, we are the Data Fiduciary ourselves.

For anything in your own academic record, ask your institute first. For anything else, write to us at support@instiq.in.

2. Information we collect

About you: name, email address, phone number, and the role you hold (student, parent, teacher, academic admin, owner, receptionist, transport manager, driver); profile photograph if one is added; date of birth, address, gender and family details where your institute asks for them.

Your academic record: roll number, class, section, batch and subjects; attendance, marks and results, assignments and what you submit, exam and holiday schedules, class diary entries, events and your replies; leave applications and staff attendance, for staff.

Fees and payments: fee amounts, what is due and what is paid, receipt and reference numbers. Card, UPI and bank details never reach us — the payment is completed inside Razorpay.

Transport, when your institute uses it: bus, route, stop, pick-up and drop times, and whether the bus ran today. For a driver or bus attendant: licence and identity details, photographs of those documents, phone number, and vehicle papers. We do not track the live location of a bus, a child or any user.

Video lectures, when your institute uses them: the videos an institute uploads, and which account watched which video, so that access and storage can be counted.

Enquiries at the front desk: if you ask an institute about admission, the institute records your name, phone number, what you asked about and what was agreed — even if you never sign up.

Files you upload: photographs and documents attached to a record.

Technical information: your sign-in token, the notification token used to reach your device, the app version, and basic performance information used to find faults.

We do not collect your contacts, your location, your calendar or your browsing history, and there is no advertising in InstiQ.

3. How we use it

We use what we collect only to run the academic work of your institute; to show each person only what their role allows; to send you notifications from your institute; to confirm payments and keep subscription and usage records; and to keep the app secure and fix faults.

We do not sell your data. We do not use it for advertising, and we do not give it to anyone for their own marketing. We do not build profiles of users or of children, and we do not use your data to train any artificial-intelligence model.

4. Where your data is stored, and how it is protected

Records are stored in Google Cloud Firestore, in Google’s India region (asia-south2, Delhi). Photographs and documents are stored in Firebase Storage in the same Google Cloud account. Video lectures are stored and delivered by Bunny.net.

Some background jobs — signing in, subscription checks, notifications, reports — run as Google Cloud Functions in Google’s us-central1 region in the United States. They read only what that job needs and keep no copy of their own.

Data is encrypted while it travels (TLS) and while it is stored. Access is limited by role and by institute, enforced by the database itself (Firestore Security Rules) and not only by the app. Staff accounts can turn on a second step at sign-in. Passwords are held by Firebase Authentication and nobody at InstiQ can see them.

5. Who can see your data

6. Sharing with others

We do not sell or trade your data. We share it only with the services that make the app work: Google (Firebase and Google Cloud), Bunny.net (video delivery, servers outside India), Razorpay (payments, India), the staff of your own institute, and the law if a court or lawful order requires it.

Apart from Bunny.net and the Google background jobs described above, your data stays in India. We do not transfer personal data to any country the Government of India has restricted.

7. How long we keep it, and deleting your account

While your institute uses InstiQ, its records are kept so that the institute can work with them.

Deleting your account: sign in, and on your dashboard, below "Log out", tap "Delete my account" and confirm — or write to support@instiq.in from the address you sign in with, subject "Delete my account". Your sign-in, profile and personal details are deleted within 30 days. School records such as attendance, marks and fee receipts stay with the institute without your name and contact details attached.

If an institute stops using InstiQ, its data is kept for 90 days and then deleted. An institute that writes to us within those 90 days saying it means to come back gets one extension of 90 days — six months in total.

8. Children’s data

A child’s account is created by their institute after enrolment — a child does not sign up alone. The parent is given their own account.

Under section 9 of the DPDP Act, 2023 a child’s data normally needs verifiable parental consent. The DPDP Rules, 2025 (Fourth Schedule) allow an educational institution, and a transport service for children, to process a child’s data for education, school activity and the child’s safety — which is all InstiQ is used for. Your institute is responsible for the consent it takes from parents at admission.

We never show advertising, never track a child’s behaviour, never profile children, and never share a child’s data for marketing.

9. Your rights under Indian law (DPDP Act, 2023)

For anything in your academic record, ask your institute’s admin. For anything else, write to support@instiq.in from the email address you sign in with. We reply within 7 days and complete the request within 30 days.

10. Cookies, trackers and advertising

InstiQ shows no advertising, uses no advertising network, and does not read your advertising ID.

The app keeps a sign-in token on your device so that you stay signed in, and a notification token so that your institute can reach you. Google’s Firebase Performance Monitoring measures how quickly screens and requests finish, to find faults. Some screens use Google Fonts. Video lectures are played from Bunny.net. This website may use essential cookies only.

11. Changes to this policy

We may change this policy. The date at the top shows when it last changed. If a change matters to you, we will say so in the app before it takes effect.

12. Contact us and Grievance Officer

InstiQ — Smart Institute App, Bhopal, Madhya Pradesh, India. Email: support@instiq.in.

Grievance Officer — write to support@instiq.in with "DPDP" in the subject. We acknowledge within 7 days and answer within 30 days.

If personal data is ever exposed by a fault or an attack, we tell the people affected and the Data Protection Board of India, as the DPDP Rules require.

In the app: Privacy Policy · Delete your account · Terms & Conditions