Privacy policy

DoodleNest is made by Wenthura Solutions (“we”, “us”), a software company in Colombo, Sri Lanka. This policy covers the DoodleNest app for Android, iOS and the web (app.doodlenestai.com), the school console, and this website.

When a school uses DoodleNest, the school decides what is recorded about its children, families and staff, and we process that information on the school’s behalf and on its instructions. Questions about a school’s records are best sent to the school first; we help them answer.

When a family signs up on its own, without a school, we are responsible for that family’s information.

Your account. Your name and email address, and your password, which is held by our sign-in provider and never visible to us. If you sign in with Google, Apple or Microsoft, we receive your name and email address from them. Your school may also record your phone numbers, address, occupation, workplace, an emergency contact and a national ID number. You can add a profile photo.

About children. Entered by the school, or by you in your family space: name, date of birth, gender, class, photo, attendance, assessments, reports and homework, and the details a school needs to keep a child safe, which can include allergies, medications, medical notes, blood type, the family doctor, emergency contacts, the people allowed to collect them, home address, bus stops and pick-up spots, ID cards and pick-up passes.

What you create. Messages, photos and comments, absence notices, event replies and consent forms, payment slips you upload, documents and emails you add to your family inbox, and for staff, leave requests and their supporting documents.

Location. For bus drivers and assistants, the app records the bus’s precise location while they are running a route, including while the phone is locked or another app is open, so families and the school can see where the bus is. Sharing stops when the route ends. For families, we store the pick-up spot you place on a map. We do not track parents’ or teachers’ location.

Camera. Used only when you scan a student card or pick-up pass, or take a photo to share. We do not record audio.

Your device. A push notification token so we can send you notifications, the app version, and the standard records our servers keep for security, such as IP addresses and request times.

We do not use advertising, analytics or tracking tools in the app, and we never sell personal information.

• To run DoodleNest for your school and family: attendance, messages, photos, transport, fees, timetables, reports and the rest of what the app does.
• To send you notifications and emails about your account and your school.
• To keep people safe and the service secure, including automated checks of school chats for harmful content, so that the school’s safeguarding staff can review anything flagged.
• To answer your questions and fix problems you report.
• To meet our legal obligations.

We never use children’s information for marketing, and we do not build advertising profiles.

Some features use Google’s Gemini models: summarising a conversation, helping draft a message, suggesting a timetable or schedule, reading a document or email you add to your family inbox, checking chat messages for harmful content, and the in-app assistant. When you use one, the text it needs is sent to Google’s Gemini API to produce the result, and we send only what that feature needs.

AI results are suggestions. Nothing the assistant proposes is carried out until a person confirms it, and every date read from your inbox shows the words it came from, so you can check it.

Photos a school shares are visible to school staff and to the families of the children in them. Schools ask each family for photo consent per child, and you can change it in the app.

Face tagging is optional and off by default. It runs only if your school turns it on and you give separate consent for your child. It then uses Amazon Rekognition to recognise your child in new photos and suggest a tag. Your child’s face data is deleted when you withdraw that consent or when their records are erased.

• Your school’s staff, according to their role: a teacher sees their own classes, and the office sees the campuses it manages.
• Other families, only where something is shared with them: a class group chat you are in, or a photo in which their child also appears.
• Service providers who run parts of DoodleNest for us, under contract and only to provide their service: Google (Firebase sign-in, database, file storage and notifications; Gemini AI; Maps), Amazon Web Services (our servers, and Rekognition when face tagging is on), Expo (delivers notifications to phones), and our email provider.
• Authorities, when the law requires it.

Information is stored with Google Cloud and Amazon Web Services, in data centres that may be outside your country, including in India and the United States. It is encrypted in transit and at rest. Access is limited by role, and changes to sensitive records are logged.

We keep information for as long as your account or your school uses DoodleNest. A school decides how long its own records are kept. When a school stops using DoodleNest, we delete or return its data as agreed with the school.

Parents can delete their account in the app, under Me → Delete account. It takes effect straight away. Staff accounts belong to the school, so the school office removes them. If you cannot use the app, email us. How account deletion works lists exactly what is deleted and what the school keeps.

You can ask to see the information held about you or your child, to correct it, to delete it, or to stop a particular use of it. You can withdraw consent at any time: photo consent, face tagging, notifications and location access are all in the app or your phone’s settings. These rights come from Sri Lanka’s Personal Data Protection Act No. 9 of 2022, the UAE’s Personal Data Protection Law, and the laws where you live.

For records your school keeps, ask the school, and we will help them respond. For anything else, email hello@wenthura.lk. We reply within 30 days.

DoodleNest is used by adults: parents, guardians and school staff. Children do not have accounts. Information about children comes from their school or their parents. It is visible only to their own family and to the staff who need it.

When this policy changes, we update this page and the date at the top. If a change affects how your information is used, we will let you know in the app or by email.

Wenthura Solutions, Colombo, Sri Lanka
Email: hello@wenthura.lk
Phone: +94 77 828 2186