Xyoro is operated by MYNAIX (OPC) PRIVATE LIMITED, Bangalore, India. This policy explains what personal information we handle, why, who we share it with and what rights you have. It covers xyoro.net, demo.xyoro.net, the Xyoro parent, student and staff apps, and the Ask Myna assistant.
Xyoro is operated by MYNAIX (OPC) PRIVATE LIMITED, Bangalore, India. This policy explains what personal information we handle, why, who we share it with and what rights you have. It covers xyoro.net, demo.xyoro.net, the Xyoro parent, student and staff apps, and the Ask Myna assistant.
Last updated: 8 September 2026Xyoro is a product of MYNAIX (OPC) PRIVATE LIMITED, a company registered in India at #198, CMH Road, 2nd Floor, Desk No 408, Indiranagar, Bangalore North, Karnataka 560038. Where this policy says "we", "us" or "Xyoro", it means that company. You can reach us at hello@xyoro.net.
We handle personal information in two distinct capacities, and your rights differ between them. For information you give us directly — an enquiry, a demo request, a newsletter sign-up — we are the data controller and decide how it is used. For everything a school enters into its Xyoro account — student records, attendance, grades, fees, staff files — the school is the controller and we are only its processor: we act on that school's documented instructions and do not decide what data is collected or why.
When you complete a contact or demo form we collect your name, email address, phone number and, if you provide them, your school name, role and country, plus any message you write. We keep a record of which page and which language the enquiry came from so we can reply appropriately.
Our servers record your IP address, browser type, the pages you visit and the time of your visit. We store a language-preference cookie so the site opens in the language you chose. If analytics are enabled we may also collect aggregated usage statistics. We do not build advertising profiles and we do not track you across other websites.
To stop automated abuse of our contact forms we record a hashed version of your IP address for up to one hour to count submissions, and we may run an on-page verification check. Where Google reCAPTCHA is enabled, Google receives information about your interaction with the form under its own privacy policy; where it is not, verification runs entirely on our own servers.
Schools use Xyoro to hold records about students, parents and staff — including names, contact details, attendance, academic performance, fee records, health notes and transport information. The school decides what is entered and why. We process it only to deliver the service, keep it secure, provide support and meet legal obligations. We never sell it, never use it to advertise, and never use it to train general-purpose AI models.
Much of the data in a school account concerns children. Xyoro is not offered directly to children: accounts are created and controlled by the school, and it is the school's responsibility to obtain any parental consent its own law requires. We apply the same protections to children's records as to all other data, and we will act on a verified school or parent request to correct or delete a child's record in line with the school's instructions and applicable law.
For enquiries and demos we rely on your consent and on our legitimate interest in responding to you. For running a school's account we rely on the contract with that school. For security logging, fraud prevention and record-keeping we rely on our legitimate interests and on legal obligations. Where the law requires consent, we ask for it and you may withdraw it at any time.
We do not sell personal information. We share it only with: hosting and infrastructure providers who run our servers; communication providers such as Meta (WhatsApp Business Platform), SMS gateways and email services used to deliver school messages; payment gateways where a school collects fees online; and professional advisers. Each is bound to confidentiality and may use the data only to provide their service to us. We may also disclose information where the law compels us to.
Ask Myna answers questions for students and helps staff draft comments, quizzes and alerts. Where a school enables it, relevant content from that school's account is sent to our AI provider to generate a response. Content from one school is never used to answer another school's questions, and school data is not used to train general-purpose models. AI output can be wrong and should be reviewed before it is relied on.
We are based in India and our providers may store or process data in other countries, including within the European Economic Area and Southeast Asia. Where we move personal information across borders we do so under a lawful transfer mechanism and require appropriate contractual safeguards. Schools with data-residency requirements should raise them with us before signing.
Enquiry and demo records are kept for up to 24 months from your last contact with us, unless you ask us to erase them sooner. Anti-spam counters are discarded within one hour. School account data is retained for as long as the school's agreement is in force, and is deleted or returned within 90 days of that agreement ending, except where we must keep records to satisfy a legal or tax obligation.
We use encryption in transit, role-based access control so staff see only what their role permits, credential storage separated from application code, activity logging, regular backups and a documented recovery process. No system is completely secure, but we test our controls and will notify the affected school and any required authority without undue delay if a breach affects personal data.
Under India's Digital Personal Data Protection Act 2023 you may ask us for a summary of the personal data we hold about you, ask us to correct or complete it, ask us to erase it, withdraw consent, nominate another person to exercise your rights if you die or become incapacitated, and complain to the Data Protection Board of India. To exercise any of these, email hello@xyoro.net. If the data sits inside a school's account, contact the school first — we will refer your request to them.
You additionally have the rights of access, rectification, erasure, restriction, portability and objection under the GDPR, including the right to object to processing based on legitimate interests. You may lodge a complaint with your national supervisory authority. We will respond to a verified request within one month.
Under Law No. 27 of 2022 on Personal Data Protection you may access and obtain a copy of your data, correct it, end its processing, delete it, withdraw consent, object to automated decision-making and seek compensation for unlawful processing. Schools in Indonesia remain the personal data controller for their student records and are responsible for the consents and notifications their own obligations require.
We use a small number of cookies that are necessary for the site to work: a language preference, a session identifier used only by our contact forms, and a record that you dismissed the cookie notice. Where analytics or reCAPTCHA are enabled, those providers set their own cookies. You can clear or block cookies in your browser, though the language switcher will then forget your choice.
We may update this policy as the product, our providers or the law change. The date at the top shows when it last changed. If a change materially affects how we handle your personal information we will give notice through the site or by email before it takes effect.
For any privacy question, request or complaint, write to hello@xyoro.net or to MYNAIX (OPC) PRIVATE LIMITED, #198, CMH Road, 2nd Floor, Desk No 408, Indiranagar, Bangalore North, Karnataka 560038, India, marked for the attention of the Grievance Officer. We acknowledge requests within 7 days and aim to resolve them within 30 days.
This policy is published in many languages for convenience. If there is any difference in meaning between a translation and the English version, the English version prevails.
Xyoro’s dashboards, notifications and parent apps run in 125 languages, with full right-to-left support — so every family feels at home.
Join schools that run smarter with Xyoro.