Privacy policy

An institute decides what it keeps about its students and their families - we keep it on the institute's behalf and use it only to run Base to Apex for them. For your own account, your enquiries and what you do on the public pages, we decide, as this policy describes.

• Your account: your name, mobile number or email (how you sign in), and your city if you give it.
• Students: what an institute or a parent adds - name, date of birth, class or level, the batches they're in, attendance, fees and payments, homework, tests and results, notes and care information, and photos or videos of their work.
• Enquiries and bookings: what you send an institute - who the class is for, your message, the trial or session booked.
• Payments: the amount, what it paid for, the payment method's type and the payment reference. Card, UPI and bank details are entered on our payment partner's page and never reach us. For an institute receiving payments: its PAN and bank account, sent to our payment partner, of which we keep only the last four characters.
• Technical data: sign-in cookies, and short-lived records of requests (time, address, browser) to keep the service secure. We use no advertising or tracking cookies.

• To run the service: sign-in, classes, attendance, fees, tests, homework and the rest of what you use.
• To tell you what matters - in the app and, for important things like fees, results and reminders, on WhatsApp. You can turn WhatsApp off any time on your Notifications page.
• To process payments, keep the records the law asks for, and handle refunds and disputes.
• To keep Base to Apex safe: preventing misuse, and checking content written for students is suitable for children.
• To answer you when you contact us.

We never sell personal data, and never use students' data for advertising.

Most students are under 18. Their data is added by their institute or a parent, and the institute confirms it has a parent's consent; a parent can see and manage their child's details from their own account. Nothing about a student is public. A student's work is shown on an institute's class feed or public profile only with a parent's permission, with their first name only, and the permission can be withdrawn.

• Institutes see their own students and families - each teacher only the batches they teach. An institute never sees another institute's data.
• Families see what concerns their own children.
• The public sees only what an institute publishes on its profile - never anything about students, parents, fees or attendance.
• Our team sees what it needs to support you and run the service.

We use these providers to run Base to Apex, each only for its part and under contract:

• DigitalOcean - the database (data stored in Bengaluru, India)
• Cloudflare - hosting the website and app, sign-in emails, checking sign-ins aren't automated, storing photos and videos, and running scheduled tasks
• Cashfree Payments - processing payments and paying institutes
• Meta (WhatsApp Business) - sign-in codes and notifications on WhatsApp
• Google - sign-in with Google, and AI features institutes use (no student records are sent)

Some of them process data outside India. We may also share data when the law requires it, or to protect someone's safety.

While your account or the institute's is in use. Photos and videos of homework are removed after 60 days unless featured. Payment records are kept for as long as tax and payment laws require (usually 8 years). When you ask us to delete your data, we delete it except what we must keep by law.

You can ask to see your data, correct it, delete it, or withdraw a consent you gave; and you can nominate someone to act for you. Much of it you can change yourself in the app. Write to the grievance officer below - we acknowledge within 24 hours and resolve within 15 days. If you're not satisfied, you can complain to the Data Protection Board of India.

Data travels encrypted, each institute's data is kept apart from the others' in the database itself, and only people who need it can reach it. If a breach affects you, we'll tell you and the authorities as the law requires.

Aditya Mohan Ghatol, basetoapex@gmail.com, Plot 14, Sector 1, Indrayani Nagar, Bhosari, Pune 411039. See also contact us.

When this policy changes, the date at the top changes; if a change matters to how your data is used, we'll tell you in the app first.