Paathshaala

An app by Tempestronics

Privacy

Paathshaala is a teaching app used by volunteers at non-profit education centres. This is exactly what it stores, where, and why.

Last updated 27 October 2026

The short version

Who is responsible

Paathshaala is made by Tempestronics, a sole proprietorship of Saifur Rahman Mohsin in Bengaluru, India. Questions about this policy, or about anything the app holds, go to developer@tempestronics.com.

The centre a volunteer teaches at decides whose names go on its roll and is responsible for having permission to record them. Tempestronics keeps that information safe and uses it only to run the app.

What is stored on the device

Whether or not anyone signs in, the app keeps these on the phone, or in the browser for the web version:

All of this stays on the device. It is deleted when the app is uninstalled, or when the browser's site data is cleared.

What is sent to a server, and only when signed in

The backend is Supabase, which stores the data on our behalf. Nothing is sent until a volunteer signs in. After that, these are copied to it:

WhatWhy
Email address and password. The password is stored only as a secure hash, never in readable formSigning in
A display name, taken from the email addressShowing who recorded a class
The organisation and centre the volunteer asked to join, and whether that was approvedDeciding who can see a centre's records
Class records: dates, sections covered, and the volunteer's notesBackup, and continuity between volunteers
The centre's student roll: first names and class labelsSo any approved volunteer at that centre can mark a quiz
Quiz attempts: which student, the score, the dateTracking how a class is doing
Reports sent with the report button: the message, which screen it came from, the app language, version and platformFixing mistakes in the content and the app

Everything travels over an encrypted connection. Nothing else on the device is read or sent.

About children's information

Children do not have accounts, are not tracked, and are not profiled. What is recorded about a child is deliberately the minimum a teacher needs to mark a quiz and remember who they taught:

There is nowhere in the app to record a child's date of birth, address, photograph, phone number, caste or religion. Nothing about a child is shared with anyone outside their centre, and nothing is used for advertising.

Who can see it. A child's name and marks are visible only to approved volunteers teaching at that same centre. Another centre cannot see them, even one run by the same organisation. This is enforced by the database itself, not only by the app.

Permission. Centres are responsible for having the consent of a child's parent or guardian before recording their name, normally through the centre's own enrolment process. A parent or guardian who wants a child's name removed can ask the centre, or write to us directly.

What is never collected

No advertising identifiers. No location. No contacts. No photos, camera or microphone. No device identifiers. No third-party analytics, crash reporting or trackers of any kind. The only permission the Android app asks for is internet access, and it uses it only to talk to the backend above.

Who else sees it

Nobody, beyond the people the app is built for:

Nothing is sold. Information is disclosed to authorities only where the law requires it.

How long it is kept

Data on the device is kept until the app is uninstalled or the volunteer deletes it. Data on the server is kept for as long as the volunteer has an account, and is removed when they delete it, as described below. Reports may be kept after they are resolved, so the same mistake is not reintroduced.

Deleting your data

In the app, open Teach and choose Delete everything. It removes, from the phone and from the server:

What stays. The children on your centre's roll are not deleted, because they belong to the centre and other volunteers teach them. A centre you set up also stays, for the people using it. Your name is removed from both.

The phone is cleared even if the server cannot be reached at that moment. In that case, or if you no longer have the app, write to developer@tempestronics.com from the address you signed up with and the rest will be removed within 30 days.

Your rights

You can ask to see what is held about you, to have it corrected, or to have it deleted, and you can withdraw your consent at any time by deleting your account. We reply within 30 days. If you are unhappy with the answer, you can complain to the Data Protection Board of India.

Keeping it safe

Data is encrypted in transit. Access on the server is decided by database rules tied to each volunteer's approved centre, so the app cannot show anyone data the rules do not allow. No system is perfect, and if something went wrong that affected your information, we would tell you.

Changes to this policy

If what the app collects changes, this page changes first, and the date at the top moves. A change that collects more will be shown in the app before it takes effect.

Contact

Tempestronics, Bengaluru, India
developer@tempestronics.com