Privacy Policy

1. Who We Are

Alvara (“the app”) is provided by Alvara Education, a sole proprietorship based at Pithampur, Indore, Madhya Pradesh 453001, India.

In this policy, “Alvara”, “we”, “us” and “our” mean Alvara Education. “You” means the student using the app.

2. Who This App Is For

Alvara is a private app for students enrolled at institutes that use Alvara. Your account is created and issued by your institute — you cannot sign up on your own, and the app is not offered to the general public.

The app is intended for students aged 15 and above. If you are under 18, please read section 15.

3. Who Is Responsible for Your Data

In short: your institute is responsible for your academic and campus records. Alvara is responsible for your Alvara account and for Alvara Private Network. If you want an academic record changed or removed, that decision belongs to your institute.

4. What We Collect and Why

In short: most of what you see in the app was created by your institute, not collected by the app. The app itself asks you for very little.

5. What Happens When Your Institute Admits You

In short: your institute enters your details into Alvara and we create an Alvara account for you with a unique Alvara UID. Your institute is responsible for having your consent for this, and for telling you about it in its own admission process.

6. Alvara Private Network

In short: a student network you can choose to enable, inside the app. Nothing happens unless you choose to enable it, you must be 18 or older, and your institute cannot see any data in it. You can deactivate it or delete it whenever you want.

7. What We Do Not Do

We are committed to keeping your data safe. Here is what we do not do.

8. Who Can See Your Data

• You can see your own records in the app.
• Staff at your institute can see a student's records only for the students and the areas they have been given access to. A staff member who does not have you in their scope cannot see your records. In this version staff can view records but cannot download or export them.
• Library staff with the necessary access can see which e-books you have opened, in the same way they can see which physical books you have borrowed.
• When you like a post from your institute, only the total number of likes is shown. Your name is not shown, to staff or to other students.
• Where a poll, form or complaint is marked “Anonymous”, your name does not reach staff — only a response identifier does. Your response stays linked to your account so that you can see your own result.
• Feedback you send to Alvara is seen only by Alvara. Your institute cannot see any of it.
• Notes you write in the app stay on your device. They are not sent to us.
• Your login and device history is not shown to your institute. In exceptional cases — a formal written request from your institute about a specific security or disciplinary matter, or a lawful order from an authority — we may share a limited record of when your account was used to reach that institute's records. We do not share your device details, your IP addresses or your login attempts, and we keep a record of every such disclosure.
• Attachments you send with a desk request or complaint may be viewed by your institute or our team to help resolve your request, assist with support, or maintain security.
• Authorities get your data only against a lawful order. We do not act on informal requests, and we keep a record of every disclosure.

9. Who We Share Your Data With

In short: three service providers, described below. Nobody else.

10. Where Your Data Is Stored

Your records, and the files you upload, are stored in India, in the Mumbai region.

Two things necessarily involve services that operate outside India: push notifications and crash reports, both handled by Google. These are global Google services and that data may be processed outside India.

11. Notifications

Notices from your institute are delivered as push notifications through notifications through a push notification service. This means the text of the notification passes through a third-party service, and it can appear on your lock screen where anyone holding your phone could read it. For that reason we keep notification text short and leave the details inside the app.

Your notification token is removed when you log out of all devices. You can turn notifications off entirely in your phone's settings.

We do not send you notifications about Alvara Private Network activity.

12. Data Stored on Your Phone

The app keeps a copy of your recent records on your device so it works quickly and partly offline. This copy is held in the app's private storage area, which other apps on your phone cannot read. It is never backed up to your cloud account, and it is completely removed when you log out or when you uninstall the app. Logging out is worth doing if you have used the app on a shared or college computer or phone.

Crash reports. If the app crashes or misbehaves, we receive a report through our crash reporting service containing the error and its technical details, your device model, your operating system version, your app version, and an anonymous installation identifier. It does not contain your name, your records, or anything you have written.

We never read your messages. Your login code fills in automatically using a feature of Android that hands only that one message to the app. The app has no permission to read your inbox and does not have one.

13. How Long We Keep It

In short: your academic records are kept while your institute needs them. Security records are kept for 90 days. Everything else is listed below.

14. When You Leave an Institute

In short: your institute ends your enrollment. It does not delete you. Your Alvara account and your Private Network stay yours, and you can join another institute with the same Alvara UID.

15. If You Are Under 18

In short:the app is for students aged 15 and above. If you are under 18, your parent or guardian gives consent through your institute's admission process, and you cannot use Alvara Private Network.

16. Your Rights and How to Use Them

In short: write to grievance@alvara.education. We reply within 30 days. If we do not resolve it, you can complain to the Data Protection Board of India.

17. How We Protect Your Data

• Your records can be seen by you and by staff at your institute who have been given access to that area. Nobody else at your institute can see your records.
• All traffic between the app and our systems is encrypted in transit.
• Passwords are stored in a hashed form. We never see your password, and neither does your institute after it gives you the temporary one.
• Login codes are stored only as a hash, expire after 5 minutes, and can be used once.
• Device identifiers are stored as a hash, not in their original form.
• Login attempts and code requests are rate-limited to prevent abuse.
• Security records are kept for 90 days so we can investigate if something goes wrong.
• Your records are stored in India.
• Access to our systems requires multi-factor authentication.
• The app's copy of your data on your phone is never backed up to the cloud and is removed when you log out.

No method of transmitting or storing information is completely secure. We work to protect your data but we cannot guarantee absolute security.

18. If Something Goes Wrong

If a security incident affects your personal data, we will tell you and inform the Data Protection Board of India, as the law requires.

19. Changes to This Policy

We may update this policy. When we do, the “Last updated” date and version at the top change. If the change is significant, we will tell you inside the app the next time you open it.

If our business is transferred to another entity — for example if we incorporate as a company, or are acquired — your data may transfer with it. The new owner stays bound by this policy until they give you notice of any change. If you do not agree with a change, you can withdraw your consent for Alvara Private Network at any time, and speak to your institute about your academic records.

20. Contact