1. What we collect. Account details (name, mobile number, role, school name and city), operational data your school enters (student enrolments, trainer schedules, attendance, payment records), identity documents students upload for licence processing (e.g. Aadhaar, PAN — front/back images or PDFs), and aggregated website-usage information such as device type, approximate location, pages viewed and interactions. Analytics does not receive names, phone numbers, OTPs or school data.
2. How we use it. Solely to operate DriveOne: signing you in via OTP, showing dashboards, tracking course progress, recording payments, and verifying documents. We do not sell your data or use it for advertising.
3. Phone number masking. Student phone numbers are masked from trainers by design. Trainers contact students through the app without seeing the full number.
4. Where data lives. Data is stored on secure cloud infrastructure with encryption in transit and at rest. Access is scoped per school — one school cannot see another school's data.
5. Who can see what. School owners see their school's full data. Trainers see their assigned students and schedules. Students see their own progress, classes, documents, and payments. DriveOne staff access data only when required for support, with your consent.
6. Sharing. We share data only with service providers needed to run DriveOne (cloud hosting, SMS delivery for OTPs and Google Analytics for aggregated website measurement), under contractual confidentiality, or when required by law.
7. Retention & deletion. Data is retained while your account is active. On request, we delete your school's data within 30 days, except records we must keep by law.
8. Your rights. You may request a copy, correction, or deletion of your personal data at any time by writing to us. We comply with India's Digital Personal Data Protection Act, 2023.
9. Contact. Privacy questions or requests: support@driveone.in