01 Who we are
FeeHub is a fee collection and school communication service operated by DoodleCompass. You can reach us at any time at support@doodlecompass.com.
FeeHub is a service used by schools, and that changes who is responsible for what:
- Your parent account — your mobile number, name and email. We decide how this is handled, so for this information we are the Data Fiduciary (the "data controller").
- Your child's school records — your child's name, photograph, class, fee schedule, event registrations and similar. Your child's school decides what to record and why. For this information the school is the Data Fiduciary and we act as a Data Processor on the school's instructions.
This matters in practice: if you want a child's record corrected or a photograph removed, the school is the decision-maker. We will help you reach them, and we act on their instruction. Requests about your own account come directly to us.
02 Information we collect
2.1 Information you give us
| Information | Why we need it |
|---|---|
| Mobile number | To create and sign in to your account. Verified by one-time password. |
| Name | To address you, and to name the payer on receipts and invoices. |
| Email address (optional) | To send receipts, if you provide one. |
2.2 Information your child's school provides
Schools enter student records into FeeHub. Depending on what your school chooses to record, this can include:
- Your child's name and photograph
- Date of birth, residential address
- Guardian name and contact number
- Class, batch or group and enrolment status
- Fee plans applying to your child, and any discounts or late fees
- Event registrations, including any extra details the school asks for on its registration form
- Photographs published by the school to albums shared with you
2.3 Payment information
| Information | Where it lives |
|---|---|
| Fee items, amounts, due dates, paid/unpaid status | On our servers |
| Payment method type (for example UPI or card), and the payment reference issued by our payment gateway | On our servers |
| Receipts and invoices generated for you | On our servers |
| Card numbers, CVV, UPI PIN, bank credentials, and card-on-file details | Never on our servers. These are entered inside our payment gateway's own secure screens and are never transmitted to or stored by FeeHub. |
2.4 Information collected automatically
- IP address, recorded against significant actions in our audit log (for example a payment, or a change to a record), for security and dispute investigation.
- Timestamps and change history for records, so that a disputed change can be traced.
- Session tokens stored on your device to keep you signed in.
03 What we do not collect
We think this list is as important as the one above.
Permissions the app does request, and why
| Permission | Why |
|---|---|
INTERNET, ACCESS_NETWORK_STATE | To reach our servers and detect whether you are online. |
NFC, READ_BASIC_PHONE_STATE | Required by our payment gateway's SDK to support contactless and device-based payment methods. FeeHub itself does not read your phone identity or use NFC. |
READ_GSERVICES | Used by Google Play services, which powers one-time password verification. |
04 Why we use your information
| Purpose | Information used |
|---|---|
| Sign you in and keep your session secure | Mobile number, session tokens |
| Show you what fees are due, for which child, and by when | Child records, fee plans, payment status |
| Take payments and issue receipts | Name, email, amount, gateway references |
| Notify you about fees, events and school announcements | Mobile number, notification content |
| Let you contact your child's class teacher | The teacher's name and number, shown to you by the school |
| Show you photo albums and events your school has published to you | Album and event data |
| Investigate security incidents, fraud and payment disputes | Audit log, IP address |
| Meet our legal, tax and accounting obligations | Payment and invoice records |
We rely on your consent for your account and notifications, on the performance of our service to you for fee and payment processing, on our legitimate interest in security for audit logging, and on legal obligation for financial record-keeping.
06 Children's information
FeeHub is used to administer fees and school activities for children, so children's information is central to it. We treat it with specific care.
- A child never holds a FeeHub account. Accounts belong to parents, guardians and school staff only.
- We never use a child's information for advertising, profiling, behavioural tracking, or any form of targeted content. We do not build profiles of children.
- Children's records are entered by the school, or by you, and are visible only to that school's authorised staff and to the child's linked parents or guardians.
- Photographs. Schools may publish photographs of school activities to albums. If you do not want your child to appear, tell the school, or contact us and we will pass the request on and act on the school's instruction.
- Parental consent. Where the law requires verifiable consent from a parent or guardian before a child's data is processed — including under section 9 of India's Digital Personal Data Protection Act, 2023 — that consent is obtained by your child's school at the point of enrolment, recorded in its admission paperwork, and evidenced to us by the school.
If you believe a child's information is held in FeeHub without a proper basis, contact us using the details in section 12 and we will investigate promptly.
07 How long we keep information
| Information | Retention |
|---|---|
| Your account (name, number, email) | While your account is active, and for 30 days after you close it |
| Payment, invoice and receipt records | As required by Indian tax and company law — up to eight financial years |
| Child records | While the child is enrolled with the school, then per the school's own retention policy |
| Audit logs including IP address | 12 months |
| Notification delivery records | 12 months |
| Backups | 30 days after deletion, after which copies age out |
When a retention period ends we delete the information or irreversibly anonymise it.
08 Your rights
Under India's Digital Personal Data Protection Act, 2023, and other applicable law, you may:
- Access a summary of the personal data we hold about you and how it is processed
- Correct information that is inaccurate, and complete information that is incomplete
- Erase your personal data where it is no longer needed for the purpose it was collected for, or for a legal obligation
- Withdraw consent at any time, including for notifications
- Nominate another person to exercise your rights if you are unable to
- Complain to us, and escalate to the Data Protection Board of India if you are not satisfied with our response
To exercise any of these, contact us using section 12. We will respond within 30 days. We may need to verify your identity first — usually by confirming control of your registered mobile number.
For your child's school records, we will forward your request to the school and act on its instruction, since the school decides those records.
09 Deleting your account and data
You can delete your FeeHub account and the personal data associated with it.
| How | What to do |
|---|---|
| By email | Write to support@doodlecompass.com from your registered email address, and include the mobile number your FeeHub account uses. |
| Through your school | Ask your child's school to raise the deletion request with us on your behalf. |
What is deleted: your name, email, session records, and your parent account itself.
Completed payment, invoice and receipt records are financial records we are legally required to retain (see section 7). These are retained in the school's accounts with the minimum information needed to identify the transaction. Your child's school records belong to the school and are retained or deleted according to the school's policy — deleting your FeeHub account does not remove your child from the school's rolls.
We will confirm completion within 30 days.
10 How we protect information
- Encryption in transit. All traffic between the app and our servers uses HTTPS with modern TLS. Certificates are renewed automatically.
- On your device, session tokens are held in Android's encrypted storage, protected by a key held in the device keystore rather than in the app.
- Access control. Staff access is scoped per school, so one school's staff cannot see another school's records. Access to production systems is limited to named administrators.
- Session security. Sign-in uses short-lived access tokens and revocable refresh tokens, so a session can be invalidated centrally.
- Payment integrity. Payment confirmations from our gateway are accepted only when their cryptographic signature verifies, which prevents forged payment notifications.
- Audit logging records significant changes with the actor, the time and the IP address.
No system is perfectly secure. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board of India as required by law.
11 Where your information is processed
Your information is stored on Amazon Web Services infrastructure. Some of our service providers — Google, Meta and Slack — operate globally and may process information outside India in accordance with their own safeguards and our agreements with them.
12 Contact us
DoodleCompass
Operator of FeeHub
Privacy queries and rights requestssupport@doodlecompass.com Grievance Officer — DPDP Act 2023 & IT Act 2000support@doodlecompass.comIf you are not satisfied with how we handle your complaint, you may escalate to the Data Protection Board of India.
13 Changes to this policy
If we change this policy we will update the "Last updated" date above. Where a change materially affects how we use your information, we will tell you in the app or by message before it takes effect, and where the law requires it we will ask for your consent again.