Privacy Policy

When you install and set up Lambali software, we collect only the following:

Schools using Lambali Pro can enable the Parent Portal, which allows parents to view their child's information in the app. When this feature is enabled, the following data is synced from the school's device to our server:

We use the collected information strictly for the following purposes:

• License activation, validation, and renewal reminders.
• Trial period tracking (to prevent unlimited fresh trials via reinstall).
• Customer support — when you contact us for help.
• Delivering the Parent Portal — syncing student data so parents can view it.
• Sending license renewal reminders via WhatsApp or phone call.
• Anonymised, aggregated usage statistics to improve the product.

All server-side data is stored on our secured hosting at lambali.in. Security measures include:

• Passwords and PINs are stored as bcrypt hashes — they are never stored in plain text and cannot be reversed.
• Device IDs are stored as SHA-256 hashes — hardware details cannot be recovered from them.
• License keys use HMAC-SHA-256 signatures — they cannot be forged or tampered with.
• Session tokens expire automatically after 30 days.
• Database access is restricted to authorised Lambali team members only.
• Data is never shared with or sold to any third party.

All data entered into Lambali's desktop software — students, marks, fees, reports, certificates — is stored entirely on your own device using an encrypted local database (IndexedDB).

• This data is never uploaded to Lambali's servers (except for the specific Parent Portal fields listed in Section 2).
• The software works fully offline — no internet connection needed for core features.
• You can export and back up your data at any time from Backup & Restore.
• Uninstalling the software will delete the local database from your device.

Lambali software is used by schools and parents — it inevitably involves data about minors (students). We handle this with care:

• Student data on the desktop software never reaches our servers.
• For the Parent Portal, only limited fields (name, class, attendance, fee summary) are synced — no photographs, biometrics, or sensitive personal data.
• Parent Portal accounts can only be created by the parent or guardian whose mobile number is registered with the school. Students cannot create accounts.
• We do not knowingly allow children under 18 to create accounts on our server.
• Schools are responsible for obtaining appropriate consent from parents before enabling the Parent Portal.

Lambali desktop software: Does not use cookies or any tracking technology.

Parent Portal app (PWA): Uses localStorage on your device to store your session token and mobile number so you stay logged in. No third-party tracking cookies are used.

lambali.in website: Uses only a session cookie for the admin panel login. No analytics trackers, advertising pixels, or third-party cookies are placed on your device.

Lambali uses a minimal set of third-party services:

We do not integrate with any payment gateway, analytics platform, or advertising network.

We retain your information for as long as:

• Your Lambali license is active, or
• You have not submitted a data deletion request.

Specific retention periods:

To request deletion of your data, see Section 10 below.

You have the right to delete your account and associated data at any time. There are two ways to do this:

Option 1 — In-app (Parents):

Open the Parent Portal app → Settings → Delete My Account. You will be asked to enter your password and type DELETE to confirm. Your account, session data, and parent-student links will be permanently removed within seconds.

Option 2 — Email Request (Schools & Parents):

Send a deletion request to lambali0126@gmail.com from your registered email or with your school name and device ID.

We will permanently delete all associated data from our active databases within 7 business days. You will receive confirmation once deletion is complete.

Under India's Digital Personal Data Protection Act 2023, you have the following rights:

• Right to Access: Know what personal data we hold about you.
• Right to Correction: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request permanent deletion of your personal data.
• Right to Grievance Redressal: Contact our Grievance Officer (see Section 12) for any complaints.
• Right to Nominate: Nominate another person to exercise your rights on your behalf in the event of your death or incapacity.

To exercise any of these rights, please contact us using the details in Section 12. We will respond within 30 days as required by law.

As required by the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000, we have designated a Grievance Officer for data-related complaints:

If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act 2023.

If we make any material changes to this Privacy Policy, we will:

• Publish the updated policy at lambali.in/privacy.php.
• Update the "Last Updated" date at the top of this page.
• For significant changes affecting Parent Portal users, we will notify parents through the app where reasonably practicable.

Continued use of the software or Parent Portal after changes are published constitutes acceptance of the updated policy.