1. Introduction
Rivlon Labs ("we", "us", or "our") operates the Rivlon platform, including the web application at app.rivlon.in, the Rivlon Parent mobile app, and the Rivlon Teacher mobile app (collectively, the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.
2. Information We Collect
We collect information that you provide directly and information generated through your use of the Service:
a) Information Provided by Schools
- Staff details: name, email, phone number, address, date of birth, qualifications, employment information
- Student details: name, date of birth, gender, admission number, grade, section, parent/guardian contact information
- Parent/guardian details: name, email, phone number, relationship to student
b) Information Provided by Users
- Account credentials (email, phone number, password)
- Profile information and preferences
- Messages sent through the parent-teacher chat feature
- Leave request details and attachments
- Fee payment information, transaction references, and payment proof screenshots
- Homework submissions and completion signatures
- Staff onboarding form data (personal, address, family, education, documents)
c) Automatically Collected Information
- Device tokens for push notifications (Firebase Cloud Messaging)
- Notification preferences
- Device type and operating system
- App usage data and interaction logs
3. How We Use Your Information
We use the collected information to:
- Provide and maintain the school management platform
- Send push notifications (attendance, announcements, exam results, fee updates, diary entries, leave status, chat messages)
- Process and verify fee payments
- Generate fee receipts and academic reports
- Enable parent-teacher communication
- Manage student attendance, timetables, and academic records
- Send transactional emails (OTP verification, onboarding invitations, fee receipts)
- Improve and optimize the Service
4. Data Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information in the following circumstances:
- Within the school ecosystem: Student data is accessible to authorized school administrators, teachers, and assigned staff as per their role-based permissions
- Parents/guardians: Can access their own child's academic records, attendance, fees, and communications
- Service providers: We use Firebase Cloud Messaging (Google) for push notifications and Gmail SMTP for transactional emails
- Legal requirements: We may disclose information if required by law or in response to valid legal requests
5. Data Security
We implement appropriate technical and organizational measures to protect your personal information:
- All data is transmitted over HTTPS (SSL/TLS encryption)
- Authentication uses JWT tokens with automatic expiration and refresh
- Role-based access control (RBAC) ensures users can only access data relevant to their role
- Multi-tenant architecture ensures complete data isolation between schools
- Passwords are hashed and never stored in plain text
6. Data Retention
We retain personal information for as long as the school's account is active or as needed to provide the Service. Schools may request deletion of their data by contacting us. Student and staff records are retained per the school's policies and applicable educational regulations.
7. Children's Privacy
Our Service processes data about students, including minors, on behalf of schools. We do not collect personal information directly from children. All student data is provided and managed by the school and accessible to authorized parents/guardians. Schools are responsible for obtaining necessary parental consent as required by applicable law.
8. Push Notifications
Our mobile apps use Firebase Cloud Messaging to send push notifications. You can manage notification preferences within the app settings or disable notifications through your device settings. Notification categories include announcements, attendance, leave updates, exam results, messages, feedback, and gallery updates.
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate data
- Request deletion of your data (subject to legal and contractual obligations)
- Opt out of non-essential communications
- Export your data in a portable format
To exercise these rights, please contact your school administrator or reach out to us directly.
10. Third-Party Services
Our Service integrates with the following third-party services:
- Firebase Cloud Messaging (Google): For push notifications — governed by Google's Privacy Policy
- Gmail SMTP (Google): For transactional emails
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page and updating the "Last updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
- Rivlon Labs
- Email: rivlonlabsind@gmail.com
- Website: rivlon.in