Privacy notice

Last updated: 2026-06-06.

Who we are

Eduvella is a school-management service. Each school that uses Eduvella is the data controller for its students, guardians, staff, and applicants. Eduvella Ltd is the data processor on the school's behalf for the records that pass through the service.

What we collect

• Identifiers — name, registration number, date of birth, sex.
• Contact — guardian phone and email.
• Academic — grades, attendance, exam results, transcripts.
• Financial — fee assignments and payment records.
• Account — sign-in email, hashed password (or Supabase session id).
• Operational — request IP, user agent, and time stamps, recorded in an audit log used to investigate access.

Minor data

Most student records concern minors. The school is the controller of consent under the relevant local law (NDPR / GDPR / FERPA / equivalent). We do not market to or profile minors. We retain student records only as long as the school instructs us to, and we delete on request.

Your rights

Guardians may request a copy of their child's record (subject access) or its erasure. From a signed-in parent account, use the data tools on the child's profile, or contact the school office.

Retention

Active student records: kept while the student is enrolled plus the period required by local regulation (typically 7 years after departure). Audit log entries: 5 years.

Security

Transport encryption (TLS), at-rest encryption on hosted databases, principle-of-least-privilege access control, and per-tenant row isolation enforced both at the application and database layer. Security events trigger an audit entry.

Contact

For data-subject requests or security concerns, contact the school directly or write to privacy@eduvella.com.