Legal

Privacy Policy

This policy explains what information Premeena collects through our website, web app and mobile app, why we collect it, who we share it with, and how you can see, correct or delete it.

Effective date: 9 October 2026

On this page

  1. Who we are and who this policy covers
  2. Information we collect
  3. Face recognition data
  4. How we use information
  5. AI features
  6. Who we share information with
  7. Children's and students' information
  8. Cookies, local storage and analytics
  9. Mobile app permissions
  10. How we protect information
  11. How long we keep information
  12. How to delete your account and data
  13. Your rights
  14. International transfers
  15. Changes to this policy
  16. Contact us

1. Who we are and who this policy covers

Premeena ("Premeena", "we", "us") provides school management software: a website at sma.premeena.com, a web app, and the Premeena mobile app for Android and iOS (together, the "Service").

The Service is used by schools. A school (or the organization that runs it) signs up, then adds its staff, students and parents. That gives us two different roles:

  • For school records, the school is in charge. Information a school enters or collects through the Service about its students, parents and staff belongs to that school. The school decides what is collected and why. We process it on the school's behalf and only to provide the Service to that school. If you are a student, parent or staff member, please contact your school first about your records. We will help the school respond.
  • For our own accounts and website, we are in charge. We are responsible for information about the people who sign up to create a school (school owners), visitors to our public website, and the technical data we need to run, secure and improve the Service.

2. Information we collect

Account information

  • Name, email address, phone number, profile photo (optional), preferred language and role (for example owner, manager, teacher, staff, student or parent).
  • Your password, which we store only as a secure one-way hash. We never see or store it in readable form.
  • Sign-in records, such as when you signed in and from which kind of device.

School records entered by a school

Depending on which features a school uses, its records can include:

  • Students: name, date of birth, gender, photo, address, admission and enrollment details, class and section, guardians and emergency contacts, attendance, timetables, assignments, exam marks, grades, report cards, transcripts, certificates, conduct and achievement records, library loans, and support notes the school chooses to keep.
  • Parents and guardians: name, relationship to the student, phone number, email address and address.
  • Staff: name, contact details, position and department, qualifications, attendance, leave, schedules and, if the school uses payroll, salary and payroll records.
  • Fees and finance: fee structures, invoices, discounts, payments recorded by the school and receipts. We do not store full payment-card numbers.
  • Front desk: gate passes, late arrivals, visitor details and appointments.
  • Communication: announcements, messages, group and class chats, video calls, and the files people attach to them.
  • Files: documents, photos and other files uploaded to the Service, such as assignments, class files, logos, signatures and generated PDFs.

Information collected automatically

  • Device and log information: IP address, browser or app version, operating system, device type, language and time zone, and the pages or screens used. This keeps the Service secure and helps us fix problems.
  • Sign-up context: when a school owner signs up, we record the approximate country, region and city (derived from the IP address), device type, browser, the page they arrived on, and any referral or campaign tags in the link (UTM parameters). We use this to understand where schools find us.
  • Error reports: if the Service crashes or hits an error, we receive a technical report that includes the device, app version and what went wrong.
  • Audit logs: to protect schools, the Service records who created, changed or deleted important records, and when.

Information you give us directly

We also keep what you send us: support emails, bug reports, feedback and ratings, and survey answers.

3. Face recognition data

Some schools turn on face recognition so that attendance can be taken by scanning a class with a phone camera. If your school uses it:

  • It is turned on and managed by the school. Only school staff with permission can enroll a person's face. The school is responsible for telling people and getting any consent the law requires (for students, usually from a parent or guardian).
  • We store a numeric template, not photos. The camera image is processed on the device to produce a face template, which is a set of numbers describing facial features. Only that template is sent to and stored by the Service. Enrollment and scan images are not stored.
  • It is used only for attendance at that school. It is never used for advertising, never sold, and never shared with other schools or third parties.
  • It is deleted with the person or the school. When the school removes a person's face enrollment, deletes the person, or deletes the school, the templates are deleted too.

4. How we use information

  • To provide the Service: running school records, attendance, timetables, exams, fees, communication and portals for the people a school invites.
  • To create and secure accounts, verify email addresses, and prevent fraud, abuse and unauthorized access.
  • To send messages the Service needs to send: sign-in codes, password resets, invitations, fee reminders, announcements and notifications set up by your school.
  • To provide support and respond to bug reports and feedback.
  • To fix errors, monitor performance and improve the Service.
  • To meet legal obligations and enforce our terms.

We do not sell personal information. We do not show ads in the Service, and we do not use student information to build advertising profiles or target ads.

5. AI features

The Service includes optional AI features, such as an AI assistant for staff, AI help for generating content, and an AI tutor and practice tests for students. When you use one of these features, the request and the school information needed to answer it are sent to an AI provider (see section 6) to produce the answer. A school can also connect its own AI provider account instead of ours.

We send only the information needed to answer the request, and we use these providers through their paid business APIs, whose terms do not allow them to use this data to train their models. Conversations with the AI tutor and assistant are saved in the Service so you can come back to them, and are deleted with the account or school.

6. Who we share information with

Within a school, people see information according to the role and permissions the school gives them. For example, a parent sees their own children's records, and a teacher sees the classes they teach. Schools' data is kept separate, and one school cannot see another school's records.

With service providers who run parts of the Service for us. They may only use the data to provide their service to us:

  • Hosting and databases: Vercel (website and web app) and Railway (application servers and database).
  • File storage: Backblaze B2 or another S3-compatible storage service. A school can choose to keep its files in its own storage account instead of ours.
  • Email delivery: Resend. A school can choose to send email through its own mail server instead.
  • Error monitoring: Sentry.
  • AI features: Anthropic, OpenAI and Google, only when an AI feature is used.
  • Payments: Stripe processes card payments for purchases made from Premeena (such as AI credits or add-ons). We receive confirmation of the payment, not full card details.
  • Website analytics: Google Analytics, on our public marketing pages only (see section 8).

We may also share information:

  • When the law requires it, such as in response to a valid court order. Where we are allowed to, we will tell the affected school first.
  • To protect people, such as preventing fraud or protecting someone's safety.
  • If the business changes hands. If Premeena is merged or sold, information may transfer to the new owner, who must continue to protect it under this policy.

7. Children's and students' information

The Service holds information about students, many of whom are children. We take that seriously:

  • Students cannot sign up on their own. Student and parent accounts are created by the school, and the school is responsible for collecting the parental consent the law requires.
  • We use student information only to provide the Service to the school. We do not sell it, use it for advertising, or build profiles of students for any purpose that is not school-related.
  • Parents and guardians can ask the school to see, correct or delete their child's information. They can also contact us, and we will work with the school to respond.
  • If we learn that we hold a child's personal information that was not provided by or with the authorization of a school, we will delete it.

8. Cookies, local storage and analytics

  • Essential cookies keep you signed in and protect your session. The Service cannot work without them.
  • Local storage in your browser or app remembers preferences such as language and theme, and keeps recently loaded data so pages open faster. On our public website, it also remembers for up to 90 days which page or campaign link first brought you to us, so we can attribute sign-ups.
  • Google Analytics runs only on our public marketing pages (such as the home, pricing and feature pages) to count visits. It is not used inside the signed-in app.

You can clear cookies and local storage in your browser settings at any time. Clearing essential cookies will sign you out.

9. Mobile app permissions

  • Camera: used only when you choose to enroll a face or scan a class for attendance. The app does not use the camera in the background.
  • Secure storage: your sign-in session is stored in your device's encrypted secure storage so you stay signed in.
  • Files and sharing: used when you choose to download or share a document, such as a report card or receipt.

The mobile app does not collect your precise location, contacts, call logs or SMS messages. You can withdraw the camera permission at any time in your device settings. Features that need the camera will then stop working.

10. How we protect information

  • All traffic between your device and the Service is encrypted in transit (HTTPS/TLS).
  • Passwords are stored as secure hashes. Credentials a school saves for its own storage or email are stored encrypted.
  • Each school's data is kept separate, and access is limited by role-based permissions set by the school.
  • Important changes are recorded in tamper-resistant audit logs.
  • Only people at Premeena who need access to run and support the Service can reach production systems.

No system is perfectly secure. If a data breach affects your information, we will notify the affected schools and users, and the authorities where required, without undue delay.

11. How long we keep information

  • School records are kept for as long as the school uses the Service, or until the school deletes them.
  • When a school or owner account is deleted, there is a 30-day grace period in which the deletion can be cancelled. After that, the data, including uploaded files and face templates, is permanently deleted. A minimal record that the deletion was requested and completed is kept as proof.
  • Backups are overwritten on a rolling schedule, so deleted data may remain in backups for a short time before it is removed.
  • Audit logs, error reports and server logs are kept for a limited time for security and troubleshooting, then deleted.
  • We may keep information longer if the law requires us to (for example, financial records) or to resolve a dispute.

12. How to delete your account and data

You can ask us to delete your account and the personal information linked to it, whether or not you have the app installed.

School owners

  1. Sign in to Premeena on the web at sma.premeena.com.
  2. Open Org profile, find Delete your account, and choose Delete account.
  3. Confirm with the code we email you. Your account and every school you own are scheduled for deletion and permanently deleted after 30 days. You can cancel by signing in during that time.

Staff, teachers, students and parents

Your account is managed by your school, so the quickest route is to ask your school's administrator to remove your account. You can also email us (see below), and we will verify your request and work with your school to complete it.

Request deletion by email

Email support@premeena.com with the subject "Account deletion request". Send it from the email address on your account and include your name and your school's name. We will confirm the request and complete it within 30 days.

Deleting an account deletes your sign-in and the personal information linked to it. Some school records, such as a past student's results or a fee receipt, belong to the school, and the school may be required by law to keep them. Where that applies, we will tell you what is kept and why.

13. Your rights

Depending on where you live, including under India's Digital Personal Data Protection Act, 2023 and the EU/UK GDPR, you may have the right to:

  • Access the personal information we hold about you, and get a copy of it.
  • Correct information that is wrong or incomplete.
  • Delete your information (see section 12).
  • Withdraw consent you have given, without affecting anything done before you withdrew it.
  • Object to or restrict certain uses of your information.
  • Nominate another person to exercise these rights for you if you die or become unable to do so (where the law allows).
  • Complain to a data protection authority.

For school records, please contact your school first, since it decides how those records are used. For anything else, or if your school does not respond, email support@premeena.com. We respond within 30 days and may need to verify your identity first.

14. International transfers

Our service providers may store and process information in countries other than yours, including the United States and the European Union. Where we transfer personal information across borders, we use providers that commit to protecting it, and we rely on the safeguards required by the applicable law.

15. Changes to this policy

We may update this policy as the Service changes. We will change the effective date at the top of this page. If a change is significant, we will also notify school owners by email or in the app before it takes effect.

16. Contact us

For privacy questions, requests or complaints, email support@premeena.com. Please include "Privacy" in the subject line so your message reaches the right person.