Privacy Policy

1. Introduction

This Privacy Policy explains how Quelvino ("we", "us", "our") collects, uses, and protects information when schools, staff, parents, and students use our school management platform.

2. Information We Collect

Depending on your role, we collect and store:

• Account information: name, email address, phone number, and role
• School information: school name, address, contact details, and logo
• Student records: name, admission number, date of birth, gender, class, photo, and parent/guardian contact details
• Academic data: attendance records, scores, grades, and report card remarks
• Financial data: fee structures, invoices, and payment records (we do not store card or bank account numbers — payments are processed through third-party providers)
• Communications: announcements posted within the platform, and messages sent via our contact form

3. How We Use Information

We use collected information to:

• Provide and operate the Quelvino platform for your school
• Allow parents to view their own children's records
• Generate invoices, receipts, and report cards
• Communicate with you about your account or school
• Improve and maintain the security of our platform

4. Data Isolation Between Schools

Each school's data is technically isolated from every other school on the platform. Staff and parents can only access data belonging to their own school, enforced at the database level.

5. Who Can See What

• School Owners and Administrators can see all data belonging to their school
• Teachers can see student, attendance, and academic records, but not financial data
• Bursars can see financial data in addition to student records
• Parents can only see records belonging to their own linked children

6. Data Storage and Security

Data is stored using Supabase, a hosted PostgreSQL database provider, with access controls enforced at the database level. Images (photos and logos) are stored via Supabase Storage. We take reasonable technical measures to protect information, but no system can guarantee absolute security.

7. Children's Information

Quelvino stores information about students, including minors, provided to us by schools and parents for the purpose of school administration. We rely on schools and parents to ensure they have appropriate authority to provide this information.

8. Third-Party Services

We use the following third-party services to operate Quelvino: Supabase (database, authentication, and file storage) and Resend (email delivery). These providers process data on our behalf and are bound by their own privacy and security practices.

9. Data Retention and Deletion

We retain data for as long as a school's account remains active. Schools or account holders may request deletion of their data by contacting us directly.

10. Your Rights

You may request access to, correction of, or deletion of your personal information by contacting us at the email address on our Contact page.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date above when changes are made.

12. Contact Us

Questions about this Privacy Policy can be sent through our Contact page.