Student Data Protection & DPDP Act Compliance
How TutionMat protects coaching institutes, teachers, student minors, and parents under the Ministry of Electronics and Information Technology (MeitY) DPDP framework.
Statutory Disclosure • Last Reviewed: September 11, 2026
When Indian tuition teachers and coaching institutes adopt TutionMat, they are fully compliant with Indian digital data protection laws. We provide end-to-end encryption, statutory data fiduciary controls, and strict minor protection safeguards so your institute never faces compliance penalties or data leak vulnerabilities.
Key DPDP Act 2023 Principles Built into TutionMat
Zero Tracking or Profiling of Minors (Section 9)
We strictly prohibit behavioral tracking, ad-targeting, or algorithmic profiling of school and coaching students under the age of 18.
No Data Monetization or Third-Party Ads
Student marks, attendance records, and parent phone numbers are never sold, leased, or transferred to third-party ad networks or edtech competitors.
Parental Consent & Verification
Parent WhatsApp numbers are collected strictly for transactional attendance alerts and fee receipts upon verified admission by the coaching institute.
Right to Correction & Erasure (Section 12)
Coaching centers and parents hold the statutory right to request full export or permanent deletion of their student data at any time.
1. Fiduciary & Processor Roles Explained
Under Section 2(i) and 2(k) of the Digital Personal Data Protection Act 2023:
- The Coaching Institute is the “Data Fiduciary”: You determine the purpose of processing student data (e.g., student admission, batch scheduling, and test conduct).
- TutionMat is the “Data Processor”: We process student and fee records strictly on the documented instructions of your coaching center to deliver software functionality. We do not use this data for our own commercial purposes.
2. Special Duties Regarding Children (Section 9)
The DPDP Act places strict obligations on organizations handling the personal data of children (individuals under 18 years of age):
3. Data Principal Rights (Sections 11–14)
Every student and parent (Data Principal) is entitled to the following rights:
- Right to Access Summary: Students and parents can log into the TutionMat Student Portal at any time to review their attendance percentages, test scores, and fee receipts.
- Right to Correction & Updation: If a phone number, name, or course is incorrect, the institute can immediately update it in real time.
- Right to Erasure (Right to be Forgotten): Upon student graduation or account closure, institutes can delete the student record, permanently purging it from our active database.
- Right to Grievance Redressal: Any concerns regarding data handling may be escalated directly to our Data Protection Officer.
4. Technical & Organizational Security
Under Section 8(5) of the DPDP Act, TutionMat implements reasonable security safeguards to prevent personal data breaches:
- AES-256 Bit Encryption: All sensitive records, password hashes, and auth tokens are encrypted.
- Tenant Isolation: Data between different coaching centers is strictly isolated at the database level.
- Role-Based Access Controls (RBAC): Co-teachers have zero visibility into fee revenue or bank account details.
- Breach Notification: In the unlikely event of an unauthorized data incident, TutionMat maintains automated protocol to notify the Data Protection Board of India (DPBI) and impacted users in accordance with statutory guidelines.
5. Statutory Grievance Redressal Officer
In compliance with Section 13(1) of the Digital Personal Data Protection Act 2023, the contact details of our Data Protection and Grievance Redressal Officer are as follows:
Officer Name: Ankit Singh
Designation: Data Protection & Compliance Officer
Email: dpdp@tutionmat.in / support@tutionmat.in
Organization: TutionMat Technologies
Jurisdiction: New Delhi, India
Statutory Response SLA: Within 48 business hours
Run your coaching institute with 100% compliance peace of mind.
TutionMat safeguards your student and institute data so you never have to worry about privacy laws or data leaks.