Security & Trust

EDUNEST is built and hosted on Lovable Cloud, which provides the database, authentication, server functions, and backend infrastructure. Lovable Cloud manages the underlying infrastructure, including patching, availability, and platform-level security controls.

EDUNEST pvt.Ltd is responsible for the application-layer configuration, access policies, and data-handling logic that sits on top of the platform.

• Security contact: officialedunest@gmail.com
• Phone: +91 98837 19024
• Location: Bengaluru, India

• In transit: All communication between users, the app, and the backend uses HTTPS/TLS.
• At rest: Data is stored in the cloud database with encryption at rest provided by the underlying hosting platform.
• Passwords: User passwords are never stored in plain text. They are hashed using industry-standard algorithms.

EDUNEST supports secure authentication for schools, teachers, parents, and students:

• Email and password authentication with secure session handling.
• Google sign-in support for convenient and secure access.
• Role-based access controls within each school account.
• Row-level security policies in the database to restrict data access.

Schools are responsible for assigning appropriate roles, removing access for departed staff, and keeping their user lists current.

EDUNEST uses role-based permissions to ensure users only see the data they need. Common roles include school administrators, teachers, parents, and students. Administrators can manage roles from within the school dashboard.

We recommend following the principle of least privilege: grant only the minimum permissions needed for each user to perform their role.

School data is stored in a dedicated backend environment. Each school's data is logically separated through database-level access controls. We do not sell or use school data for advertising.

Backups are maintained to support recovery from accidental deletion or system failure. Backup schedules are managed by the platform provider.

EDUNEST uses Twilio for WhatsApp notifications and an email service provider for transactional emails such as demo confirmations and authentication messages. These providers handle message delivery only; they are contractually bound to use data for the purpose of delivering EDUNEST services.

We apply security updates and patches to the EDUNEST application as needed. The underlying platform manages infrastructure-level patching. We monitor the platform for issues and respond to security advisories that affect our stack.

If we become aware of a security incident affecting EDUNEST or school data, we will investigate promptly, take steps to contain and remediate the issue, and notify affected school administrators without undue delay.

To report a security concern or vulnerability, please email us at officialedunest@gmail.com with the subject line "Security".

EDUNEST follows security practices aligned with common SaaS and education-sector standards. We do not currently hold third-party security certifications. Any certification claims would require an independent audit and explicit review before being published.

Schools that use EDUNEST play a key role in keeping their data safe. We recommend that every school:

• Use strong, unique passwords and enable two-factor authentication where available.
• Regularly review user accounts and deactivate users who no longer need access.
• Assign roles based on job function and avoid sharing administrator credentials.
• Educate staff and parents about phishing and suspicious messages.
• Report unusual activity or security concerns to us promptly.

If you have questions about security, want to report an issue, or need a copy of our Data Processing Agreement, please contact:

EDUNEST pvt.Ltd
Email: officialedunest@gmail.com
Phone: +91 98837 19024
Location: Bengaluru, India