Last Updated: April 26, 2026
Effective Date: April 26, 2026
---
1.Introduction
Welcome to **Excellence Academy** ("App", "we", "our", or "us"). Excellence Academy is an educational platform designed to connect institutes, teachers, students, and parents for a seamless learning experience.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our mobile application. Please read this policy carefully. By using the App, you agree to the practices described herein.
---
2. Information We Collect
2.1 Information You Provide Directly
- **Full Name** — for account identification and display
- **Phone Number** — used for OTP-based authentication and account verification
- **Password** — stored securely in hashed form; never stored in plain text
- **Profile Photo** — optional, uploaded by the user
- **Role Information** — whether you are a Student, Teacher, Parent, or Admin
2.2 Information Collected Automatically
- **Device FCM Token** — used exclusively to send push notifications
- **Login timestamps** — to detect unauthorized access and manage sessions
- **App usage activity** — such as attendance records, quiz attempts, and assignment submissions (only for enrolled users within your institute)
2.3 Information We Do NOT Collect
- We do **not** collect precise GPS/location data
- We do **not** collect contacts from your phone
- We do **not** collect microphone or camera data outside of explicit user actions
- We do **not** run background tracking
---
3. How We Use Your Information
| Purpose | Data Used |
|---|---|
| Account creation & login | Phone number, name, password |
| Sending push notifications | FCM device token |
| Displaying your academic data | Attendance, fees, assignments, quiz results |
| Teacher-student communication | Doubts, announcements, chat messages |
| Fee management | Fee records (internal to your institute) |
| Security & fraud prevention | Login timestamps, session tokens |
We **do not** sell, rent, or trade your personal data to any third party.
---
#4. Data Sharing
We share data only in the following limited cases:
- **Within your Institute:** Your academic data (attendance, fees, results) is visible to authorized roles (Admin, Teacher, Parent) within your enrolled institute only.
- **Firebase (Google LLC):** We use Firebase Cloud Messaging solely to deliver push notifications. Firebase operates under Google's Privacy Policy: [https://policies.google.com/privacy](https://policies.google.com/privacy)
- **Legal Obligations:** We may disclose data if required by law or a valid legal process.
We do **not** use any third-party advertising networks or analytics trackers.
---
5. Data Storage & Security
- All data is stored on **secured backend servers** protected by JWT authentication, role-based access control, and industry-standard encryption in transit (HTTPS/TLS).
- Raw SQL queries use **parameterized statements** (Prisma ORM) — fully protected against SQL injection.
- Passwords are **bcrypt-hashed** before storage.
- Session tokens are **revoked automatically** when you log in on a new device.
- Rate limiting is enforced on all critical endpoints (login, OTP) to prevent brute force attacks.
---
6. Data Retention
- Your account data is retained as long as your account is active within the institute.
- If your account is deactivated by an Admin, your data is soft-deleted and retained for a limited period for audit purposes.
- You may request permanent deletion by contacting your institute administrator.
---
7. Children's Privacy
Excellence Academy is intended for use by students of all ages under the supervision of their enrolled educational institute. For users under 13 years of age, parental consent must be obtained by the institute before enrollment. We do not knowingly collect personal information from children without institutional authorization.
---
8. Your Rights
You have the right to:
- **Access** the personal data we hold about you
- **Correct** inaccurate personal information
- **Delete** your account and associated data (via your institute administrator)
- **Opt out** of push notifications at any time via your device settings
---
9. Permissions Used by the App
| Permission | Purpose |
|---|---|
| `INTERNET` | API communication with backend |
| `POST_NOTIFICATIONS` | Sending push notifications via FCM |
| `RECEIVE_BOOT_COMPLETED` | Restart notification listener after device reboot |
| `CAMERA` (optional) | Uploading profile photo or assignment attachments |
| `READ_EXTERNAL_STORAGE` (optional) | Selecting files for upload (notes, assignments) |
| `VIBRATE` | Notification vibration |
All permissions are used **only for their stated purpose** and never in the background.
---
10. Third-Party Services
The App uses the following third-party service:
| Service | Purpose | Privacy Policy |
|---|---|---|
| Firebase Cloud Messaging (Google) | Push Notifications | [Google Privacy Policy](https://policies.google.com/privacy) |
No advertising SDKs, analytics SDKs, or data brokers are integrated.
---
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will notify users via an in-app notification or push notification. Continued use of the App after changes constitutes acceptance of the updated policy.
---
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:
**Excellence Academy**
📧 Email: neurova.business@gmail.com
📱 App Package: `excellence.academ
---
*This Privacy Policy was written specifically for the Excellence Academy mobile application and complies with Google Play Store's Developer Policy requirements.*