Privacy Policy

This Privacy Policy explains how Tuki Soft Private Limited ("Mantralyte", "we", "us") collects, uses, stores and protects information through the Mantralyte website, web application and Android mobile app (together, the "Service"), used by training institutes to manage admissions, attendance, fees, accounting and certificates.

1. Who controls what data

An institute that signs up for Mantralyte (the "Institute") is the data controller for the student, guardian and staff records it enters into the Service — it decides what to collect and why, and is responsible for having the right to collect it (for example, a guardian's consent to enrol a minor). Mantralyte acts as the data processor: we store and process that data only to provide the Service to the Institute, and only the Institute's own staff can normally see it, based on the roles the Institute assigns them.

2. Information we collect

Account & institute information

• Name, phone number or email, and password (or OTP) used to sign in.
• Institute name, address, branches, courses and settings.
• Billing details: selected plan, payment reference numbers, and payment-proof screenshots you upload for QR, bank transfer or NepalPay payments. We do not collect or store card numbers.

Student & staff records entered by the Institute

• Name, contact details, guardian information, citizenship/ID numbers, photos and documents attached to an admission.
• Attendance, batch, enrolment, transfer and certificate records.
• Fee, discount, receipt, refund and ledger entries.

Usage & device information

• Log data such as IP address, browser or device type, and pages or app screens visited.
• Crash and error reports from the mobile app, used only to fix bugs.
• Session cookies needed to keep you signed in and to protect forms from cross-site attacks (CSRF). We do not use advertising or cross-site tracking cookies.

3. How we use information

• To provide the Service: admissions, attendance, fee collection, accounting, certificates and reports.
• To sign you in, including sending one-time passwords (OTP) by SMS (through our SMS gateway partner) for phone numbers in Nepal, or by email for accounts abroad.
• To send service notifications — fee reminders, receipts, attendance alerts — that the Institute configures.
• To provide support when you contact us, and to bill the Institute for its subscription.
• To keep the Service secure, diagnose problems, and improve features based on how the product is actually used.
• To meet legal and accounting obligations, including retaining financial records as required under Nepali law.

4. When we share information

We do not sell personal data, and we do not share it with advertisers. We share it only:

• With service providers who help us run the Service — our SMS gateway for OTP delivery, our hosting provider, and payment/bank partners used to receive institute subscription payments — each bound to use the data only to provide that service.
• With Mantra LMS, our separate e-learning platform, only for the specific students, courses and enrolments an Institute chooses to sync, and only after the Institute enables that sync. Mantra LMS has its own privacy policy for data it then holds.
• If required by law, court order, or to protect the rights, property or safety of Mantralyte, our users, or the public.
• If Mantralyte is involved in a merger, acquisition or asset sale — we would notify Institutes before data is transferred and becomes subject to a different privacy policy.

5. Data storage & security

Data is stored on servers we operate and is transmitted to and from the website, web app and mobile app over encrypted (HTTPS) connections. Access to institute data inside our own systems is limited to the staff who need it to provide support or keep the Service running, and every Institute's data is kept logically separate from every other Institute's data.

6. Data retention

We keep an Institute's data for as long as its account is active. If a subscription lapses, the account moves to read-only access rather than being deleted, so the Institute can export its records or pay to resume. On request, we delete or anonymise an account's data within a reasonable period, except where we're required to keep financial records for longer under applicable law.

7. Children's data

Many Institutes on Mantralyte enrol students who are minors. That student data is entered and controlled by the Institute, which is responsible for obtaining any guardian consent required before entering it. We do not independently market to, or collect data directly from, minors outside of what an Institute enters on their behalf.

8. Your rights

If you're a student, guardian or staff member whose data an Institute has entered, requests to access, correct or delete that data should generally go to the Institute first, since they control it. If you're an Institute admin, you can export your data at any time from within the app, or contact us directly using the details below for anything we hold ourselves, such as your own account or billing information.

9. Changes to this policy

We may update this policy as the Service changes. If we make a material change, we'll update the "Last updated" date above and, where appropriate, notify Institute admins directly.

10. Contact us

Tuki Soft Private Limited
Sundar Marga 09, Kaski, Nepal
support@mantralyte.com · +977 980-285-5356/7