Privacy Policy

Last updated: 21 September 2026

This policy explains how Medhark collects, uses, shares and protects personal data when schools and their communities use our platform.

Medhark ("Medhark", "we", "us") is a school management platform operated by Ankraj Ventures Private Limited, a company incorporated in India, having its registered office at 4042, Prestige Kensington, No 17 HMT Main Rd, Jalahalli, Bangalore North, Bangalore 560013, Karnataka, India. This Privacy Policy is published in accordance with India's Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules thereunder.

1. Our role — processor for schools

Medhark is provided to schools. When a school uses Medhark to manage its students, staff and parents, the school is the Data Fiduciary that decides what data is collected and why, and Medhark acts as a Data Processor that handles that data on the school's instructions. For our own account holders (e.g. school administrators who sign up), we act as the Data Fiduciary for their account information.

2. Data we collect

• Account & contact data — name, email, phone number, role, and login credentials of administrators, teachers and parents.
• Student & school records (provided by the school) — student names, admission numbers, class/section, attendance, marks and report cards, fee records, guardians' names and contact details, timetables and notices.
• Payment data — when fees or subscriptions are paid online, payments are processed by our payment gateway (Razorpay). We do not store full card or bank details; we receive limited confirmation data (e.g. status, amount, reference).
• Usage & device data — basic technical logs (device type, app version, timestamps) used to operate and secure the service.

3. Children's data

Medhark handles data about children (students under 18). Under the DPDP Act, children's data receives the highest protection. Accordingly:

• Children's data is provided to Medhark by the school, which is responsible for obtaining verifiable consent from a parent or lawful guardian as required by law.
• We do not use children's data for behavioural monitoring, profiling, or targeted advertising.
• Children's data is used only to deliver the school's education-management services (e.g. showing a parent their own child's attendance and marks).

4. How we use data

• To provide, maintain and secure the platform and its features.
• To send service communications and notifications (e.g. attendance, fee reminders, notices) on the school's behalf.
• To provide customer support.
• To comply with legal obligations and enforce our terms.

We do not sell personal data, and we do not use it for advertising.

5. Who we share data with

• The relevant school and its authorised users (a parent sees only their own child; a teacher sees only their assigned sections).
• Service providers that help us run the platform — cloud hosting and database, the payment gateway (Razorpay), and email/SMS/notification providers — under confidentiality obligations and only as needed.
• Authorities, where disclosure is required by law or valid legal process.

6. Data retention

We retain personal data for as long as the school maintains an active account with Medhark, and for a limited period afterwards as needed to meet legal, accounting or dispute-resolution obligations. On a valid request from the school (or as required by law), we will delete or return the data.

7. Security

We use reasonable technical and organisational safeguards, including encryption in transit and at rest, strict tenant isolation (one school cannot access another school's data), and role-based access controls. No system is perfectly secure, but we work to protect data in line with industry practice.

8. Your rights

Subject to the DPDP Act, individuals may request to access, correct, update or erase their personal data, and may withdraw consent where processing is based on consent. As Medhark usually processes data on behalf of a school, requests relating to student records should generally be made to the school; we will assist the school in fulfilling valid requests. To exercise rights over data for which Medhark is the Data Fiduciary, contact our Grievance Officer below.

9. Grievance Officer

In accordance with the DPDP Act and IT Act, you may contact our Grievance Officer with any privacy question, complaint or request:

• Officer: The Grievance Officer, Ankraj Ventures Private Limited
• Email: support@medhark.in
• Phone: +91 63621 31367
• Address: 4042, Prestige Kensington, No 17 HMT Main Rd, Jalahalli, Bangalore North, Bangalore 560013, Karnataka, India

We aim to acknowledge complaints promptly and resolve them within the timelines prescribed by law.

10. Cookies

Our web applications use only essential cookies/local storage needed to keep you signed in and remember basic preferences (such as light/dark theme). We do not use advertising or cross-site tracking cookies.

11. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date and, where appropriate, by notice within the platform.

12. Contact

Questions about this policy? Email support@medhark.in. This policy is governed by the laws of India.