StudyDesk Privacy Policy

1. Introduction & Architecture Scope

This Privacy Policy explains how Lalwin Systems ("we," "us," or "our") designs, maintains, and licenses StudyDesk (application identifier: com.study-desk.lalwin), our proprietary desktop study library management software for self-study libraries, reading halls, and abhyasikas.

This policy applies specifically to the StudyDesk desktop software, its local database engine, its optional Google Drive cloud sync integration, and direct customer interactions via lalwin.com/studydesk/.

2. 100% Offline Data Sovereignty (Zero Data Ingestion)

When you use StudyDesk to run your library reception desk, all operational data is written directly to a private local database file residing exclusively on your Windows computer hard drive. Lalwin Systems operates zero central cloud servers that collect or read your library records.

Specifically, Lalwin Systems never collects, inspects, transmits, or possesses:

• Student Admission Records: Student full names, mobile phone numbers, personal email addresses, home addresses, guardian details, and college/exam preparation streams.
• Identity Proofs & KYC: Aadhaar numbers, Driving License details, Government ID documents, and uploaded student profile photographs.
• Financial & Billing Records: Daily cash fee collections, UPI transaction references, GST tax invoices, fee concession notes, and payment receipts.
• Seat Allocation Data: Shift timings, reserved seat numbers, room zone allocations, and attendance check-in stamps.
• Expense Registers: Library electricity bills, internet broadband bills, air-conditioner servicing charges, property rent, and net profit calculations.

3. Compliance with India's Digital Personal Data Protection Act (DPDP Act, 2023)

Under the Digital Personal Data Protection Act, 2023 (DPDP Act) of India:

• You Are the Data Fiduciary: As the library owner or operator, you retain sole custody and operational control over student personal data collected at your reception desk. You are responsible for obtaining appropriate student consent when capturing phone numbers or identity proofs.
• Lalwin Systems Is Not a Data Processor for Student Data: Because StudyDesk is installed locally on your premise and does not transmit student records to Lalwin Systems, Lalwin Systems does not act as a remote data processor or cloud repository for your students' personal information.

4. Google Drive Cloud Sync & Google API Limited Use Disclosure

StudyDesk includes an optional, user-initiated feature that allows library administrators to back up encrypted database snapshots directly to their own personal Google Drive storage account.

Security of Google Authentication Tokens:

Google OAuth 2.0 tokens (Access Tokens and Refresh Tokens) are negotiated via a secure local loopback redirect on your machine and stored strictly inside your local database on your PC. Authentication tokens are never transmitted to, collected by, or stored on any server operated by Lalwin Systems.

We do not sell, transfer, or disclose Google user data to third parties, advertising networks, data brokers, or external AI/machine learning training pipelines.

5. License Registration & Verification Data

To activate your 14-day free trial or perpetual commercial desktop license, Lalwin Systems collects minimal commercial contact details directly from the library administrator:

• Commercial Identification: Library Name, Primary Administrator Name, WhatsApp/Phone Number, and Email Address.
• Licensing Attributes: License Type (14-day trial or lifetime commercial), issue date, and an anonymous hardware machine signature to bind the license to your designated reception hardware.

This licensing information is used solely to verify genuine software licenses, deliver bug fix patches, and provide personalized technical support. We never sell, rent, or trade your contact information to third-party marketing companies.

6. 1-Click WhatsApp Integration Privacy (wa.me)

StudyDesk features 1-click WhatsApp deep links for fee receipts and subscription renewal alerts:

• Native Browser Deep Links: StudyDesk generates standard https://wa.me/ URLs that trigger WhatsApp Web or the WhatsApp Desktop application already installed on your PC.
• Zero Intermediary Servers: Communication occurs directly between your computer and WhatsApp. Lalwin Systems does not operate an automated bot server, does not route messages through third-party SMS gateways, and has zero visibility into messages exchanged with your students.

7. Local Diagnostic Logs & Error Handling

To maintain system stability, StudyDesk records technical diagnostic events (such as drive sync timeouts or database query warnings) locally within the desktop webview storage:

• Automatic 7-Day Pruning: Diagnostic logs older than 7 days are automatically purged from local storage to keep disk space minimal.
• Zero Silent Crash Telemetry: StudyDesk does not broadcast silent background crash telemetry over the internet. Diagnostic logs remain on your computer unless you explicitly choose to export and send a text file to our engineering team for troubleshooting.

8. Data Retention, Backups & Deletion

Because your library records reside exclusively on your physical computer:

• Permanent Local Deletion: Uninstalling StudyDesk or deleting the application folder permanently erases all local student ledgers and receipts from your disk. Lalwin Systems retains no copies and cannot restore deleted local databases.
• Google Drive Removal: You can disconnect Google Drive at any time from the Settings menu. You can also delete backup files directly from your Google Drive folder or revoke application access in your Google Account security permissions.