Security and data protection
Schools trust us with information about children. This page explains exactly how we protect it.
Each school is sealed off
Every school's data is kept separate from every other school at the database level, not just in the app.
Parents see only their own child
The WhatsApp assistant answers only the registered parent number, and only about that parent's own children.
Every role sees only its work
Teachers cannot open fees and the accountant cannot open marks. Denied attempts are logged.
Two-step sign-in for key roles
Principal, admin and accountant sign in with a one-time password plus an authenticator app.
Every action is recorded
A tamper-proof audit log of sign-ins, changes, exports, messages and payments, kept for one year.
Data stays in India, encrypted
Hosted in an Indian cloud region, encrypted in storage and in transit, with daily backups.
Payments never touch our servers
UPI and card payments go through an RBI-authorised payment gateway. We store only the receipt reference.
Tested by outside experts
Independent penetration testing before major releases, with findings fixed before go-live.
Built for India's data protection law
School Connect is designed around the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025.
- The school decides how student data is used (Data Fiduciary). QivaLabs processes it only on the school's instructions (Data Processor), under a written agreement.
- A clear privacy notice for parents in English and Hindi.
- Parent consent recorded with date, time and version. Parents can opt out at any time by replying STOP.
- Requests to access, correct or delete data are handled within the time the law allows.
- We collect only what the school needs. No Aadhaar, caste, religion or health data.
- No advertising, tracking or profiling of children, ever.
How we build and run it
- Automated security checks on every code change before it is released
- Least-privilege access for our own team; school data is opened only for support, with the school's approval, and every access is logged
- Security incidents are reported to CERT-In and to affected schools as required by law
- Daily encrypted backups, with restores tested regularly
Report a security issue
If you believe you have found a security issue, email us at sales@qivalabs.com with the subject “Security”. Please do not access other people's data or disrupt the service while testing. We will respond and keep you updated.
See it working in two minutes
Open the live demo with sample data, or book a free demo at your school.