When a school adopts software, a fair question often goes unasked until it is too late: where, physically, does our students' data end up? With children's records — names, marks, attendance, contact details — the answer should not be a vague 'somewhere in the cloud'. Our answer is deliberately concrete: it stays on the school's own box.
One school, one isolated deployment
Each school runs as its own separate tenant with its own isolated data. A student's profile — attendance, marks, homework, report cards — lives on the school's own deployment rather than in a shared pool we operate. There is no mixing of one school's children with another's, and there is no central database of every student we have ever served.
We are not in the data-mining business
Some products are free because the data is the product. We are explicit that student records are not a resource we harvest for our own purposes. The school holds its own data; we provide the software that runs on top of it. That distinction shapes everything from how we store records to what we are even able to see.
Less leaves the device than you might expect
Even for the AI tutor, we send as little as possible. Personal identifiers — names, roll numbers, contact details — are stripped out before a request leaves the device and replaced with neutral placeholders. The model gets the academic substance of a question and never the identity of the child asking it.
Access scoped to the role
- Teachers see their own departments and classes, not the whole school
- Parents see their own children
- Students see themselves
- Sensitive actions are auditable, with a login log recording device, IP, and location
Why local-first suits Nepal
Keeping data and core functions on the school's own server is not only a privacy decision; it is a practical one. Connectivity in many parts of Nepal is intermittent, and a system that depends on a constant link to a distant cloud fails exactly when it is needed. Running on the school's box means the essentials keep working through an outage — and the most sensitive data never had to travel far in the first place.