Privacy Policy

1. Who we are

KalveeON is school management software built and run by CloudMaSa Innovation Lab Private Limited ("CloudMaSa", "we", "us"), a company registered in Puducherry, India. This policy explains how personal data is handled in the KalveeON web app, the KalveeON Android and iOS apps, and this website (kalveeon.in).

2. Who is responsible for your data

Inside KalveeON, your school is in charge. The school decides whose data is entered and why. Under India's Digital Personal Data Protection Act, 2023 ("DPDP Act") the school is the Data Fiduciary. CloudMaSa processes that data only on the school's instructions, as its Data Processor, under our agreement with the school.

On this website, CloudMaSa is in charge of the details you send us through the demo form.

If you are a parent, student or staff member, questions about your records in KalveeON should go to your school first. We will help the school respond.

3. Data processed in KalveeON

Depending on the modules a school switches on, KalveeON may hold:

• Students — name, roll number, class and section, date of birth, gender, address, photo, admission date; health details the school records (blood group, height, weight, medical notes); attendance, marks and grades, homework submissions, leave requests, library loans, fee invoices and payments, and bus route and stop.
• Parents and guardians — names, mobile numbers, email addresses, relationship to the student and, if the school records them, blood groups.
• Staff — name, contact details, employee ID, qualifications, role and permissions. If the school uses location-checked clock-in, the device location at the moment of clocking in. If the school uses live bus tracking, a driver's location while a trip is running.
• Accounts and activity — sign-in identifiers (email, mobile number, roll number or employee ID), passwords (stored only as one-way hashes — nobody can read them), session and device information, push-notification tokens, messages and notices, and an audit log of changes to sensitive records with the time and, where recorded, the IP address.
• Online fee payments — if the school enables them, payments are handled by Razorpay. We receive the payment status and reference; we never receive card numbers, UPI PINs or bank passwords.

4. Data from this website

When you request a demo we receive your name, school, mobile number, role, approximate number of students and, if you give it, your email address. It is sent to our team by email and kept in a private log on our web server so that we can call you back.

This website uses no cookies, no analytics and no advertising trackers. Fonts are loaded from Google Fonts, so Google receives your browser's IP address when the page loads.

5. Children’s data

Most students using KalveeON are under 18. Before entering a child's personal data, the school is responsible for obtaining verifiable consent from the child's parent or lawful guardian, as the DPDP Act requires.

We do not use children's data for tracking, behavioural monitoring or targeted advertising, and KalveeON shows no advertisements.

6. How data is used

• To provide KalveeON's features to the school — registers, diaries, marks, report cards, fees, timetables, library, transport and messaging.
• To send the alerts the school chooses — app notifications, SMS and WhatsApp messages to parents and staff.
• To keep accounts secure — sign-in checks, single-device sign-in where the school enables it, audit logs and fraud prevention.
• To give support when the school asks for it, and to meet legal obligations.

We never sell personal data, never use it for advertising, and never combine one school's data with another's.

7. Service providers we use

We use trusted providers to run KalveeON. They process data only to provide their service to us.

Some providers may process data on servers outside India. Any transfer follows the DPDP Act and the restrictions notified under it.

8. How data is protected

• Each school has its own separate database. The central system that registers schools and licences holds no student records.
• Row-level security on every table, so the database itself checks who may read each record.
• Encryption in transit (HTTPS/TLS) and encryption at rest by our hosting provider.
• Role-based access — each person sees only their part of the school — and an audit log of sensitive changes.
• CloudMaSa staff access a school's data only to give support the school has asked for.

9. How long data is kept

School data is kept while the school's subscription is active. When it ends, the school can ask for an export of its data. We then delete it from our live systems within 90 days, except where the law requires us to keep certain records for longer (for example, tax and financial records). Backups age out on their normal schedule.

Demo requests from this website are kept only as long as needed to follow up, and no longer than 24 months.

10. Your rights

Under the DPDP Act you can ask for a summary of your personal data, ask for it to be corrected, completed or erased, withdraw consent you have given, nominate someone to act for you, and have a grievance addressed.

For records in KalveeON, please contact your school — it controls that data and we will help it respond. For demo requests or anything else, write to us at info@cloudmasa.com. We aim to respond within 30 days.

11. If something goes wrong

If we become aware of a personal data breach affecting KalveeON, we will inform the affected school without undue delay and help it notify the Data Protection Board of India and affected people, as the law requires.

12. Storage on your device

The KalveeON apps store a few items on your device so they work properly — your sign-in session, your language choice and whether you have dismissed certain prompts. They are not used for advertising.

The apps ask for device permissions only when a feature needs them: notifications for school alerts, the camera or files for uploads, and location for staff clock-in or bus tracking where the school uses those features.

13. Changes to this policy

If we change this policy we will update the date at the top of this page and, for significant changes, tell schools in advance.

14. Grievance Officer and contact

For privacy questions or grievances, contact our Grievance Officer: