DPDPA 2023 Compliant · Google Play & Store Safety Standards

Privacy Policy & Data Safety

How NDA Computer Education Pvt. Ltd. (NDACE & Kamal Computers Cafe) collects, uses, safeguards, and respects the personal and academic data of our students, parents, faculty, and affiliated centers.

Effective Date: October 2026 · Applicable to Website (ndace.in) and NDACE Android/Windows Store Applications

1. Institutional Information & Scope

NDA Computer Education Pvt. Ltd. (operating under the brand NDACE, with our primary central branch at Kamal Computers Cafe, Bulandshahr Bus Stand, Aurangabad, Distt. Bulandshahr, Uttar Pradesh - 203401, India) is an ISO 9001:2015 certified computer training and educational institution.

This Privacy Policy applies to our official web portal at https://ndace.in, the NDACE Android Application (Package ID: in.ndace.erp), our Windows Store Application, and all associated student learning management, admission verification, and fee accounting services.

2. Categories of Information We Collect

We collect only the minimal data necessary to fulfill our educational, certification, and regulatory requirements:

Student & Parent Profiles

Full name, date of birth, guardian name, mobile phone number, email address, postal address, admission number, and enrollment diploma course.

Academic & Assessment Records

Course attendance, online exam scores, practical assessments, diploma marksheet records, issued certificate serials, and assignment submissions.

Billing & Fee Records

Installment payment status, tuition receipts, and student-uploaded UPI transaction reference (UTR) numbers. We do not store raw card numbers or banking passwords.

Technical & Device Diagnostics

IP address, browser user-agent, operating system version, and session login audit logs used strictly for security authentication and brute-force prevention.

3. Mobile Application Permissions (Google Play Data Safety)

Our Android App (in.ndace.erp) operates as a high-security Trusted Web Activity (TWA) and requests only user-initiated, sandboxed permissions:

  • INTERNET & ACCESS_NETWORK_STATE: Required to connect securely to the NDACE Cloud API (kamal-computer-api.ndace-erp.workers.dev) for student login, syllabus downloads, exams, and marksheet verification.
  • CAMERA / PHOTO PICKER (Optional): Only requested when a student or center chooses to photograph and submit a physical fee deposit slip, UPI payment screenshot, or profile picture. Photos are never taken without explicit user action.
  • NO Continuous Background Tracking: The NDACE app does not track background GPS locations, read device contacts, access microphone, or read SMS.
Zero Third-Party Advertising & No Data Selling

NDACE maintains an absolute commitment to educational privacy: we NEVER sell, rent, monetize, or disclose student or parent personal information to third-party advertisers, brokers, or marketing networks. All data is used solely for the administration of computer courses, student services, and government or institutional certificate verification.

4. AI Study Tutor & Groq Inference Disclosure

Our portal offers an optional AI Study Tutor designed to help students clarify programming doubts, computer concepts, and study formulas.

When a student asks a study question to the AI Tutor, the question text is transmitted to our server and processed via Groq's high-speed inference engine using modern open-weights models (openai/gpt-oss-120b). No personal identifiers (such as student phone numbers, passwords, or home addresses) are sent to the AI inference provider. AI interaction logs are retained only for student revision history.

5. Data Security & Storage Standards

We implement robust enterprise security protocols to protect student records:

  • TLS 1.3 Encryption: All data in transit between the web/mobile client and servers is encrypted using modern SSL/TLS protocols.
  • Role-Based Access Controls (RBAC): Cryptographically signed JWT tokens ensure students can only view their own records, faculty can only access their assigned batches, and center directors can only access their approved center candidates.
  • Distributed Redundancy: Hosted on Cloudflare global edge network with encrypted SQLite D1 database persistence and automated cloud snapshots.

6. Protection of Minors & School Students

Certain computer literacy courses and school foundation programs are attended by minor students under the age of 18. Such enrollments are executed with explicit consent from parents, guardians, or authorized school representatives. We do not solicit personal information directly from children without parental coordination.

7. Data Retention & Account Deletion Policy (Google Play Policy)

Students and guardians have the full right to request the inspection, correction, or permanent deletion of their account and personal information.

How to Request Account & Data Deletion:

  1. Send an email to info@ndace.in from your registered email address with the subject line "Account Deletion Request - [Your Student Roll/Admission Number]".
  2. Alternatively, submit a written request at our main office: Kamal Computers Cafe, Bulandshahr Bus Stand, Aurangabad, Distt. Bulandshahr, UP - 203401.

*Upon verification, student app credentials, login tokens, uploaded temporary proofs, and contact details will be purged within 30 days. Note that official issued diploma certificates and marksheets must be permanently archived on the national verification registry to allow employers and government bodies to verify historical educational credentials.

8. Privacy Grievance & Compliance Officer

In compliance with the Digital Personal Data Protection Act, 2023 (DPDPA) and Information Technology Act rules, you may contact our designated administrative officer:

Bulandshahr Bus Stand, Aurangabad - 203401