Privacy Policy
How Disha Nucleus collects, uses, and protects your information.
Last updated: June 10, 2026
This Privacy Policy explains how Disha Nucleus School ("we", "us", or "our") collects, uses, and safeguards personal information when you use the Disha Nucleus mobile application and website (dishanucleus.in). By using our app or website, you agree to the practices described here.
1. Information We Collect
Student & Parent Information
- Full name, email address, phone number
- Class, section, roll number, date of birth, blood group
- Residential address and emergency contact details
- Parent / guardian name and contact information
- Academic records: attendance, exam results, assignment submissions, report cards
- Fee payment history
Teacher Information
- Full name, email address, phone number
- Subject specialisation, qualification, joining date
- Assignment and exam content created within the platform
Device & Technical Information
- Firebase Cloud Messaging (FCM) device token — used only to send push notifications
- Device platform (Android / iOS)
- IP address (collected only from website enquiry forms)
Messages
- Parent–teacher chat messages sent within the app
2. How We Use Your Information
- Provide access to student results, timetables, assignments, and report cards
- Process fee payments and maintain payment records
- Enable parent–teacher communication
- Send push notifications for notices, new assignments, and messages
- Allow teachers to mark attendance and manage syllabi
- Generate AI-powered performance insights and exam questions
- Administer school operations (report cards, fee tracking, admissions)
We do not use your information for advertising, profiling, or sell it to any third party.
3. Third-Party Services
We use the following third-party processors solely to operate the platform. Each provider has its own privacy policy:
| Service | Purpose | Data shared |
|---|---|---|
| Firebase (Google) | Push notifications (FCM) | Device FCM token |
| Razorpay | Fee payment processing | Payment transaction data |
| Cloudinary | File & image uploads (assignments, profiles) | Uploaded files only |
| Google Gemini (AI) | AI-assisted exam questions & performance remarks | Anonymised academic data |
4. Data Security
- Encryption in transit: All data is transmitted over HTTPS / TLS
- Authentication: Role-specific JWT tokens; passwords hashed with bcrypt (salt rounds: 10)
- Server hardening: HTTP security headers (Helmet), CORS whitelist, NoSQL injection prevention, rate limiting (100 req / 15 min per IP)
- Token management: Auth tokens are invalidated on logout; FCM tokens are unregistered on logout
5. Data Retention
Student and staff account data is retained for the duration of enrolment or employment and deleted upon written request to the school administration.
Device push tokens are removed from our servers immediately when you log out.
Payment records may be retained as required by applicable financial regulations.
6. Your Rights
You may request to access, correct, or delete your personal data at any time by contacting the school administration (see Section 7). We will process your request within a reasonable timeframe.
Students and parents may also request deletion of their account and associated data by writing to us at the address below.
7. Contact Us
For any privacy-related questions or data deletion requests, please contact:
Disha Nucleus School
Near Indoor Stadium, Sandy's Compound, Ghooran Peer Baba Chowk,
Chhoti Khanjarpur, Bhagalpur, Bihar — 812001
Email: info@dishanucleus.in
Phone: +91 64124 34301
Children's Privacy
Our app is used by school students, including minors. Student accounts are created and managed exclusively by school administrators. Parents or guardians may contact us at any time to review or delete their child's data.
We may update this policy from time to time. Changes will be posted on this page with a revised "Last updated" date. Continued use of the app after changes constitutes acceptance of the updated policy.