1. Information we process
The types of data depend on user roles and features, and may include:
- Names, email addresses, phone numbers, profile photos, student or employee identification numbers, and school or foundation details.
- Account credentials and authentication information, roles, session tokens, and sign-in timestamps.
- Educational information such as classes, schedules, attendance, assignments, grades, report cards, learning materials, leave requests, files, and other information entered by authorized users.
- Subscription details and payment status. The portal does not request payment card details directly within the app.
- Notification tokens and preferences, device information, logs, and technical data required for security and troubleshooting.
- Camera access when a user chooses to scan attendance QR codes; camera frames are processed on the device and are not stored by the Education Portal.
- Browser or WebView cookies and local storage for session handling and preferences.
2. Sources of information
Data may be supplied by users, their school or foundation, use of the service, or authentication providers. When a user chooses Google Sign-In, basic permitted profile information, such as an account ID, name, email and profile picture, may be received.
3. Purposes of processing
- Authenticating users and granting role-based access.
- Delivering learning, assessment, school administration, and foundation management features.
- Maintaining sessions and delivering relevant account notifications.
- Providing support, account recovery, correction and data-request processing.
- Protecting security, supporting audits, preventing misuse, and meeting legal obligations.
4. Legal grounds and data control
Processing is based on delivery of requested services, consent where required, service security, and legal obligations. A school or foundation may determine what educational data is entered and who may access it within the institution.
5. Google, Firebase, and infrastructure providers
Where enabled, the portal may use Google Sign-In or Firebase Authentication, Firebase Cloud Messaging, and hosting providers. These providers may process relevant technical information under their own policies. See the Google Privacy Policy and Firebase privacy information.
We do not sell personal data. Data may be shared with necessary service providers, the institution responsible for an account within its authority, or competent authorities as required by law.
6. Storage and retention
Account and educational data are retained as needed to provide the service, meet institutional requirements, or comply with legal obligations. Once an eligible deletion request is approved, relevant active data will be deleted or anonymized under applicable procedures. Some information may be retained for security, audits, disputes, legal obligations, or until backup cycles expire. There is no single retention period for all data categories.
7. Security
The portal uses measures such as HTTPS, authenticated sessions, and role-based access controls. These measures cannot remove every security risk. Never share passwords or one-time passcodes.
8. Children and student data
The portal may process information about underage students for educational purposes. Schools and foundations should ensure appropriate authority, notices, and parent or guardian consent whenever legally required.
9. Your rights
Subject to applicable law, users may request information, access, correction, updates, restrictions, withdrawal of consent, or deletion. Identity and authority may need to be verified first.
10. Policy changes
This policy may change as features, data practices, or applicable laws evolve. The current version and effective date appear on this page.
11. Contact
EDUVIA / PT Genius Academic Solution
Email: admin@eduvia.id
WhatsApp: 0851-7408-0847
For student records managed by an institution, also contact the school or foundation administering the account.