Privacy Policy

1. Who we are

Alvara Attendance (“the app”) is provided by Alvara Education, a sole proprietorship based at Pithampur, Indore, Madhya Pradesh 453001, India. “Alvara”, “we” and “us” mean Alvara Education; “you” means the member of staff using the app.

2. Who this app is for

The app is for staff at institutes that use Alvara. There is no sign-up: your institute created and issued your account for you to do your job, and can change or withdraw your access at any time. It is not a personal account, and the app is not offered to the general public. You must be 18 or older to use it.

3. Who answers for what

Your information falls into three groups, and a different party answers for each.

4. What we hold, and why

5. The student information you see

For the subjects assigned to you, the app shows the students in those classes — name, roll number, class, year and batch — with their attendance for your subjects. It shows no photograph, contact details, date of birth, family details or medical information; the app holds none of that.

These are your institute's records. Students have their own notice, including a section for students under 18: Student Privacy Policy.

Where you cover a lecture for another member of staff, the app shows you that person's name.

The app can announce the last two digits of a roll number and the status out loud — “twenty three, present”. It never speaks a student's name, and anyone nearby can hear it.

6. What stays on your device

The app keeps a copy of your subject list and class rosters — including your students' names and roll numbers — on your device, so it opens quickly and works when the network is poor. Attendance marked without a network is held there until the app can send it. Your voice and announcement settings stay on your device. This copy sits in the app's own storage area, is never copied to a cloud backup, and is removed when you log out or uninstall the app.

The app accesses your photo library only when you select a profile photo, and never accesses your camera. Your profile photo is stored securely in cloud storage with an unguessable unique identifier.

7. Who can see your information

• You, in the app.
• Staff at your institute with authorized access — the record your institute holds about you, and attendance for the classes and areas they can access, including which staff member marked or last changed each entry and when. Your institute decides who has that access; we do not.
• Your institute cannot see your sign-in, device or authentication history, and we do not provide it on request. We disclose it only where a lawful order requires it.
• Feedback you send from the app goes only to Alvara. Your institute cannot see it.
• Inside Alvara, access to the live database is limited to the proprietor; there is no team access.
• Nobody else. Authorities receive information only against a lawful order.

8. Who we share it with

Nobody else, other than your own institute — the party whose records they are — and where the law requires it against a lawful order. Each provider acts on our instructions and is bound by contract; neither may use your information for its own purposes.

Your records, and the files you upload, are stored in India, in the Mumbai region.

9. What we do not do

• No ads. The app contains no advertisements, and no advertising identifier is tracked or transmitted.
• We do not sell your personal data.
• We do not use your details to send you marketing or promotional messages.
• No analytics or crash-reporting software in the app, and we do not study how individual staff members use it.
• We do not collect your email address. The address that signs you into Alvara is generated by the system and cannot receive mail.
• This app uses no artificial-intelligence service, and nothing you do in it is sent to one.

10. How long we keep it

11. How we protect it

• All traffic between the app and our systems is encrypted in transit.
• Your password and sign-in codes are stored only in hashed form. We never see your password, and a code works once.
• Every fresh sign-in requires a code sent to your registered number; this app does not remember devices, so that step is never skipped.
• Sign-in attempts and code requests are rate-limited, and repeated incorrect codes temporarily lock the account.
• Changing or withdrawing your access, changing your password, or logging out of all devices signs you out everywhere.
• Security records are kept 90 days, so we can investigate if something goes wrong.
• Records are stored in India; access to our own systems requires multi-factor authentication.

No method of transmitting or storing information is completely secure. We work to protect your information but cannot guarantee absolute security.

12. Your rights, and how to use them

You can ask to see the personal data we hold about you, to have it corrected, and to have it erased. Where the request goes depends on who answers for it (section 3):

• Your institute's records about you, and attendance — your institute answers, and maintains them in its own Alvara workspace. Send the request to us and we will pass it on and help your institute answer it, or go to your institute directly. Attendance you created stays with your institute after your access ends: removing it would break its attendance history.
• Your Alvara account and our security records — we answer directly. While your institute keeps your access, we cannot delete the account itself; that request goes to your institute.

13. If something goes wrong

If a security incident affects your personal data, we will tell you and inform the Data Protection Board of India, as the law requires.

14. Changes to this policy, and how to reach us

We may update this policy. When we do, the “Last updated” date at the top changes.

If our business is transferred to another entity — for example if we incorporate as a company, or are acquired — your data may transfer with it, and the new owner stays bound by this policy until it gives you notice of any change.