GKC EdVanceFor schools

Legal

Terms of Service

Version
2026-10-13
Effective
13 October 2026
Operated by
GKCodeLabs Private Limited, CIN U72900KA2021PTC153625

These Terms of Service (the "Terms") govern your use of GKC EdVance, on the web and in the mobile apps. GKC EdVance is a product of GKCodeLabs Private Limited (CIN U72900KA2021PTC153625), Building A, Tower-1, Mahendra Aarna, Sai Sarana Layout, Phase 1, Phase II, Electronic City, Hebbagodi, Karnataka 560100 ("GKCodeLabs", "we"). They are published under rule 3(1) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. How personal data is handled is explained in the Privacy Policy.

By accepting these Terms on the consent screen and using GKC EdVance, you agree to them and to your school's rules. If you do not agree, please do not use GKC EdVance.

1. Who can use GKC EdVance

  • Accounts are created by your school. There is no public sign-up.
  • Students are minors and use GKC EdVance with the consent of a parent or guardian, given through the parent's account.
  • Your school may suspend or close your account, for example when a student leaves or a staff member moves on.

2. Your account

  • You sign in with a one-time code sent to the mobile number or email address your school holds for you. Keep your phone and email secure and do not share codes.
  • You are responsible for what is done through your account. Tell your school or us straight away if you think someone else has used it.
  • Keep the information your school holds about you up to date. You can ask for corrections from Privacy in the app.

3. Acceptable use

You must not host, display, upload, share, send or store any information that:

  1. belongs to another person and to which you have no right;
  2. is obscene, pornographic, paedophilic, invasive of another's privacy (including bodily privacy), insulting or harassing on the basis of gender, racially or ethnically objectionable, relating to or encouraging money laundering or gambling, or promoting enmity between groups on the grounds of religion or caste with the intent to incite violence;
  3. is harmful to children;
  4. infringes any patent, trademark, copyright or other proprietary right;
  5. deceives or misleads about its origin, or knowingly communicates misinformation that is patently false or misleading;
  6. impersonates another person;
  7. threatens the unity, integrity, defence, security or sovereignty of India, friendly relations with foreign States, or public order, or causes incitement to any offence, or prevents investigation of any offence, or insults another nation;
  8. contains software viruses or any other code designed to interrupt, destroy or limit the functionality of any computer resource; or
  9. violates any law in force.

You must also not try to access another person's account or data, probe or disrupt the platform, or copy, download or share other people's personal data outside the platform except as your role at the school requires.

4. Content involving children

Any content showing sexual abuse or exploitation of a child is prohibited. If we or your school become aware of it, it will be removed, the evidence preserved, and it will be reported to the police or the Special Juvenile Police Unit as the Protection of Children from Sexual Offences Act, 2012 (sections 19 to 21) requires. Report any such content immediately to your school or to the grievance officer (section 12).

5. Reporting content

You can report content that breaks these Terms to your school or to the grievance officer. We act on reports and on lawful orders within the time the IT Rules require, including within 24 hours for complaints about content that exposes a person's private area, shows a person in sexual content, or impersonates them.

6. The AI assistant

GKC EdVance includes an AI assistant that answers questions about school information. On the consent screen you are asked to agree to use it, as its own tick. By ticking it you agree that your questions and the relevant school information (for a parent, their children's school records) may be shared securely with our AI service provider, OpenAI, to answer them, as section 4 of the Privacy Policy describes, including processing in the United States.

  • The assistant can make mistakes. Its answers are generated from school records and may be incomplete or out of date. Check anything important with your school.
  • The assistant never files a complaint, marks attendance or sends a message without asking you to confirm first.
  • Use the assistant only for school purposes, and follow section 3 in what you ask it.
  • You can withdraw your agreement at any time from Support in the app or through the grievance officer. Your other school services are not affected.

7. Additional terms for school staff

If you use GKC EdVance as a teacher, administrator or other member of school staff, or as GKCodeLabs staff with platform access, you can see students' and families' data. By accepting these Terms you also agree that:

  1. Need to know. You will open students' and families' records only when your work at the school requires it.
  2. No copying out. You will not download, photograph, screenshot, forward, print or otherwise copy personal data out of the platform, except when the school requires it for a school purpose and then only on devices the school allows.
  3. No sharing. You will not share personal data with anyone outside the school, including in personal messaging groups or social media, and you will not share your sign-in codes or let others use your account.
  4. Children's safety. You will not post or share anything harmful to children. You will report to the school immediately, and as the POCSO Act requires, any concern that a child may be at risk.
  5. Report breaches. You will tell your school admin immediately, and in any case within a few hours, if you suspect personal data has been lost or seen by someone who should not see it, or that your account has been misused. Fast reporting lets the school meet its legal deadlines: CERT-In within 6 hours and the Data Protection Board within 72 hours.
  6. After you leave. These duties continue after your role or employment ends.

Breaking these terms may lead to suspension of your account, disciplinary action by the school, and liability under the Information Technology Act, 2000 (including section 72A) and the DPDP Act. How your own data as a member of staff is used is explained in the Privacy Policy.

8. Terms for schools: data processing

This section is the data processing agreement between the school that uses GKC EdVance (the "School", the Data Fiduciary) and GKCodeLabs (the Data Processor), made under section 8(2) of the Digital Personal Data Protection Act, 2023. It forms part of the School's contract for GKC EdVance and is accepted in the platform by the School's authorised signatory, whose name, designation and the date and time of acceptance are recorded.

8.1 Roles and instructions. The School decides the purposes and means of processing. GKCodeLabs processes personal data only to provide GKC EdVance to the School and only on the School's documented instructions: these Terms, the School's configuration of the platform, and the actions of the School's authorised users. GKCodeLabs will tell the School if it believes an instruction breaks the law.

8.2 Data and notice. The people whose data is processed are students (who are children), parents and guardians, and school staff. The categories of data and the purposes are those in the Privacy Policy, which the School adopts as its notice to families and staff, issued "powered by GKC EdVance, operated by GKCodeLabs Private Limited".

8.3 School's confirmation and parental consent. The School confirms that parents and guardians were told, at admission or since, that it uses a digital platform for school services, and that it holds the contact details it loads into the platform lawfully. It will confirm this for each bulk import. Verifiable parental consent is collected in the platform: the parent's identity is taken from the School's admission records and confirmed by a one-time code sent to the contact details in those records (DPDP Rule 10(1)(a)). GKCodeLabs keeps the consent records for the School.

8.4 Confidentiality and security. Everyone GKCodeLabs authorises to process personal data is bound by confidentiality, is trained, and has access only as their work requires. GKCodeLabs maintains reasonable security safeguards as DPDP Rule 6 requires, including encryption at rest and in transit, database-level isolation of each School's data, role-based access, one-time-code sign-in, logging of access to personal data kept for at least one year in India, monitoring and alerting, daily backups, and a tested incident-response procedure.

8.5 Personal-data breaches. GKCodeLabs will notify the School without undue delay and in any case within 24 hours of becoming aware of a breach affecting the School's data, with the information then available, and will update it as more is learnt. GKCodeLabs will help the School notify the Data Protection Board of India and affected people, and file the detailed report within 72 hours that DPDP Rule 7 requires. GKCodeLabs will report cyber-security incidents to CERT-In within 6 hours where the CERT-In Directions of 28 April 2022 require it.

8.6 Service providers. The School authorises the service providers listed in the Privacy Policy, including OpenAI in the United States. GKCodeLabs will give the School at least 30 days' notice of a new service provider. The School may object on reasonable data-protection grounds; if the objection cannot be resolved, the School may end the service for the affected feature. GKCodeLabs imposes data-protection terms on each service provider no less protective than this section and remains responsible for them.

8.7 Rights requests. GKCodeLabs provides the School with tools to answer requests to access, correct and erase data, grievances and nominations, including a request queue with 15-day due dates and an account-anonymisation function, and will help with any request the School cannot answer with those tools.

8.8 Retention, return and deletion. Data is kept as set out in the Privacy Policy. The School decides how long academic, fee and communication records are kept after a student leaves. When the service ends, GKCodeLabs will make the School's data available for export for 30 days and will then delete it, including from backups, within 90 days, unless the law requires it to be kept, and will confirm deletion in writing.

8.9 Audit. GKCodeLabs will make available the information needed to show compliance with this section and will allow reasonable audits by the School, or an auditor it appoints, on reasonable notice. Logs of access to the School's data are kept for at least one year and may be provided to the School on request.

8.10 Transfers. Personal data is stored in India. It is transferred outside India only to the service providers listed, for the purposes listed, and only as section 16 of the DPDP Act permits.

8.11 Precedence. If this section conflicts with any other agreement between the School and GKCodeLabs on the processing of personal data, this section prevails.

9. Suspension

We or your school may suspend or restrict an account that breaks these Terms, puts other users at risk, or where the law requires it. Where appropriate we will tell you why.

10. Disclaimers and liability

GKC EdVance is provided to your school "as is". Your school is responsible for the accuracy of the school records shown. To the extent the law allows, GKCodeLabs is not liable for indirect or consequential loss, or for loss caused by your school's records, your device or your network. Nothing in these Terms limits any right you have under the Consumer Protection Act, 2019 or the DPDP Act that cannot be limited by contract.

11. Governing law

These Terms are governed by the laws of India. The courts at Bengaluru, Karnataka have exclusive jurisdiction, subject to any right you have to approach a consumer forum or the Data Protection Board of India.

12. Grievance officer

Complaints about content, your account or these Terms go to:

Nishu Chaudhary, Grievance Officer, GKCodeLabs Private Limited
Email: nishu@gkcodelabs.com · Phone: +91-7508115859

We acknowledge a complaint within 24 hours and resolve it within 15 days of receipt. Response times and how to escalate are in the Privacy Policy.

13. Changes and annual reminder

We remind every user of these Terms at least once a year, and you will be asked to accept them again at that time. If we change them materially, you will be asked to accept the new version the next time you sign in.