Home / Privacy
PrivacyWhose data this is, and what we do with it.
Kalvi holds records about children. This page says plainly who controls them, what we are allowed to do, and what we will never do.
Home / Privacy
PrivacyKalvi holds records about children. This page says plainly who controls them, what we are allowed to do, and what we will never do.
The school owns its data. We hold it on the school's behalf and act on the school's instructions. We do not sell it, we do not advertise against it, and we do not use children's records to train anything.
Under India's Digital Personal Data Protection Act, 2023, the school is the Data Fiduciary for its students and guardians: it decides what is collected and why, and it is the school that holds the relationship with the parent. Kalvi is a Data Processor acting on the school's documented instructions.
In practice that means a parent asking to see or correct their child's record should ask the school, and the school can do it in Kalvi immediately. If a parent contacts us directly, we will point them to their school rather than change a record behind the school's back.
The Act treats data about anyone under eighteen as requiring particular care, and prohibits tracking, behavioural monitoring and targeted advertising directed at children. Kalvi does not do any of those things, and there is no version of Kalvi that does:
Whatever the school enters in order to run: student names and admission details, class and section, guardian names and mobile numbers, attendance, fee demands and receipts, marks, homework and notices. We ask for no more than the school chooses to put in.
If you submit the contact form we keep your name, school, phone number, location and message so we can reply. That is it — there is no advertising pixel on this website.
Standard server logs, and a session cookie that keeps you signed in. The parent portal sets no tracking cookies.
On servers in Mumbai, India (AWS ap-south-1). Student data does not leave India. See Security for how each school is separated from every other.
For as long as the school has an account with us. If a school closes its account we will delete its data on request, and in any case within ninety days of the account ending — except where a law requires us to keep a financial record longer. Ask us and we will confirm in writing what was deleted and when.
Our hosting provider (Amazon Web Services, Mumbai) stores it, and our email provider carries the messages Kalvi sends on the school's behalf. Nobody else. If a school signed up through a partner, that partner can see the school's account — because they are the ones supporting it — and nothing belonging to any other school.
Kalvi staff access a school's data only to fix a problem the school has told us about. Those sessions are recorded in an audit log.
A school can export its student roster in TN EMIS format at any time, and can ask us for a complete copy of everything else. We do not hold data hostage: leaving is a support request, not a negotiation.
Questions about this policy, or a request to see, correct or delete data: info@avancezone.com, or write to AvanceZone, Sulur, Coimbatore, Tamil Nadu, India.