Privacy Policy — myNBCE

Last updated: 5 August 2026

myNBCE ("the App") is an institute management app used by students, teachers, and administrators of the affiliated institute (Rowta and Orang branches) to manage admissions, attendance, fees, results, and communication. This policy explains what data the App collects, why, and how it is protected.

1. Information We Collect

Depending on your role (student, teacher, or admin), the App may collect and store:

• Identity information: full name, date of birth, address, guardian/parent name
• Contact information: phone/mobile number
• Academic records: course, class/batch, attendance, exam results, certificates
• Fee and payment records: fee amount, receipt number, UPI transaction reference (the App does not collect or store card numbers, UPI PINs, or banking credentials — payments are completed through your UPI app or payment provider, not inside myNBCE)
• Account credentials: login ID and a securely hashed password
• Device and usage data: app version, crash/error logs, and a push-notification device token
• Advertising identifiers: a limited, resettable device advertising ID, used to show ads (see Section 4)

2. How We Use This Information

• To operate core features: admissions, attendance, results, fee tracking, certificates
• To send push notifications (e.g. notices, result announcements)
• To diagnose and fix crashes (via Firebase Crashlytics)
• To show ads that help keep the App free (via Google AdMob)

We do not sell student, teacher, or admin data to third parties.

3. Where Data Is Stored

App data is stored in a secured Supabase (PostgreSQL) database accessed over encrypted (HTTPS) connections. Access is restricted by role — students can see only their own records; teachers and admins have access scoped to their institute branch.

4. Third-Party Services

The App uses the following third-party services, each with its own privacy policy:

• Supabase — database and backend hosting
• Firebase Crashlytics (Google) — crash and error reporting
• OneSignal — push notification delivery
• Google AdMob — in-app advertising. Ads shown to users known to be under 18 are limited to non-personalized, age-appropriate ads in line with Google Play Families Policy requirements.

5. Children's Privacy

Some users of the App are students under the age of 18. We do not knowingly collect more information from a student than is necessary for enrollment, attendance, fees, and academic records at the institute, and such data is entered by the institute's administrators/teachers as part of normal school record-keeping — not collected directly from young children through open-ended data entry in the App.

6. Data Retention

Academic and fee records are retained for as long as required for institute record-keeping and regulatory/audit purposes. You may contact the institute administration to request correction or deletion of your personal data, subject to legal record-keeping requirements.

7. Your Rights

You may request access to, correction of, or deletion of your personal data by contacting the institute administration using the details below. Students under 18 should route requests through a parent/guardian or the institute administration.

8. Security

Passwords are stored using one-way cryptographic hashing, not plain text. Data in transit is encrypted (HTTPS/TLS). Access to admin and teacher features requires authenticated login.

9. Changes to This Policy

We may update this policy from time to time. Material changes will be reflected by updating the "Last updated" date above.

10. Contact Us

For privacy questions or data requests, contact the institute administration at:
Email: karansarmah3@gmail.com