Student Friend · TinyAngle Studio

Privacy Policy

Effective 9 September 2026

Student Friend (विद्यार्थी मित्र, "the service") is made by TINYANGLESTUDIO (OPC) PRIVATE LIMITED, trading as TinyAngle Studio, Pune, India ("we", "us"). It is a kiosk that lets school students record a complaint by voice, and a staff page where the school's teachers and administrators handle those complaints. This policy explains what information the service handles, why, and who can see it.

1. Who is responsible for the data

Each school that uses Student Friend decides to collect student complaints and chooses which of its staff may see them. The school is therefore the data fiduciary (controller) for its students' complaints. TinyAngle Studio operates the service on the school's behalf as a data processor. Questions about a particular complaint should go to the school first.

2. What the kiosk collects from students

When a student presses the button and speaks, the kiosk records a short voice clip (up to 60 seconds) and sends it to our servers together with the kiosk's identity and the time. Our servers turn the recording into text and, using an AI model, fill in a structured complaint: the student's name and class if they said it, what the complaint is about, how serious and urgent it appears, a short summary, and the names of any people mentioned. The student is not asked to type or log in, and the kiosk does not use a camera.

Recordings that contain no speech are discarded immediately and no complaint is created.

3. Where the data goes and who processes it

The service runs on Cloudflare (Cloudflare, Inc., USA). Complaint text is stored in a Cloudflare database, voice clips in Cloudflare storage, and speech-to-text and AI classification run on Cloudflare Workers AI. Cloudflare does not use this data to train models. No other AI provider is used.

The school may also have complaints copied into a Google Sheet that belongs to the school's administrator (Google LLC). That sheet is for the school's administrators only; it holds the same complaint details as the staff page.

4. Google account permission (school administrators only)

An administrator can press "Create Google Sheet" on the staff page. Google then asks the administrator to allow Student Friend to create files in their Google Drive. We use this permission for one purpose only: to create the school's complaint sheet in the administrator's own Drive and to let our service account write complaints into that sheet. We do not read, list, change or delete any other file in the administrator's Drive, and we do not keep the administrator's Google login after the sheet is created. Our use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

5. Staff accounts

School staff sign in to the staff page with an email address and password created by their administrator. We store the name, email, role, school, assigned kiosks, and a securely hashed password. Every change a staff member makes to a complaint is recorded with their email and the time, so the school has an audit trail. Complaints cannot be deleted by anyone through the service.

6. Who can see complaints

Only signed-in staff of the same school, and only for the kiosks their administrator has assigned to them. Administrators see all complaints for their school. TinyAngle Studio staff may access data only to operate, support or debug the service, and only when needed.

7. How long we keep data

Voice recordings are deleted automatically 30 days after they are received. Complaint text and its history are kept for as long as the school uses the service, and deleted within 90 days after the school stops using it or asks us to remove it. Staff accounts are kept until the school removes them.

8. Children

Students who use the kiosk are usually under 18. The service exists to help schools hear and act on their students' concerns. The school, as the responsible institution, obtains any consent required from parents or guardians under the Digital Personal Data Protection Act, 2023 and its own policies. We collect only what the student chooses to say, show no advertising, use no trackers, and never sell or share student data with anyone for marketing.

8a. The enquiry form on our website

If you fill in the "Bring Student Friend to our school" form on tinyanglestudio.com, we store your name, email, phone number, school name and school address in a private store on our hosting provider (Vercel Inc., USA), together with the date. Purpose: to contact you about Student Friend for your school. We do not use it for anything else and do not share it. Enquiries are deleted within 12 months, or earlier if you email support@tinyanglestudio.com and ask.

9. No ads, no trackers

The kiosk and the staff page contain no advertising, no advertising SDKs and no third-party analytics.

10. Security

All data travels over HTTPS. Each kiosk has its own secret credential and can be switched off by the school at any time. Staff passwords are stored as salted hashes; accounts lock temporarily after repeated failed sign-ins. Voice recordings are never publicly accessible; staff play them only through the signed-in staff page.

11. Your rights and choices

Students, parents and staff may ask the school to see, correct or delete a complaint or account. The school can then act in the service or ask us to help. Users in India have rights under the Digital Personal Data Protection Act, 2023. Users elsewhere have the equivalent rights of their country's law. For anything the school cannot resolve, write to us.

12. Grievance Officer and contact

Grievance Officer: Rupesh Shinde, Founder, TinyAngle Studio. Email: support@tinyanglestudio.com. We acknowledge complaints within 48 hours and resolve them within 30 days.

13. Changes

If this policy changes in a way that matters, this page will show the new effective date and we will inform the schools that use the service.