Kiyevun holds information about children. That is the whole reason this page exists, and why it is more specific than most privacy policies. It is operated by VEEAA Pvt Ltd.
What we hold about a student
Deliberately very little:
- Their name
- Their grade, if the teacher enters one
- Their school, if the teacher enters one
- Their date of birth, if the teacher enters one
We do not collect national ID numbers, and we do not store a home address against a child. Where a teacher teaches at a home, that address belongs to the venue record, not to the student.
Beyond that we hold what the app is for: attendance marks, the topic taught, homework and its feedback, invoices and payments, and, for students using the Study side, study plans and the answers they write in practice papers.
Who can see it
Access is enforced by the database itself, on every table, for every request. It is not a matter of hiding buttons in the interface.
- A tuition centre sees only its own students.One centre can never read another's.
- A parent sees only their own children.Never a classmate, never another family's child, not even in the same class.
- Private teacher notes are never visible to families.If your child's teacher writes a note about them, you will not see it, and neither will any other centre. At a centre, its admins and supervisors can.
- A student's written exam answers are theirs alone. No teacher, no parent and no supervisor can read what a student wrote in a practice paper. There is no mechanism for it to be shared without the student doing it themselves.
These are checked automatically on every change to the code. A change that broke any of them would fail before it could be released.
Sensitive actions are recorded
We keep a log of the things that matter: creating a student, importing a list of students, linking or unlinking a family, creating and claiming invites, confirming or rejecting payments, downloading a student's homework, and every export of an institution's data. The log is readable only by us.
How long we keep things
| What | How long |
|---|---|
| A student's record | While they are enrolled |
| Archived students | 12 months, then deleted |
| Homework files | 12 months after the homework closes |
| Invoices, payments and receipts | 7 years, as financial records require |
| The audit log | 24 months |
| Notifications | 6 months |
| Study plans and exam attempts | While the account exists |
Your rights
- See everything. A parent already sees, in the app, all of what we hold about their children. There is nothing behind the screens.
- Take it with you. A centre can export its students, classes, attendance and fees to a spreadsheet at any time, without asking us.
- Delete it. Ask and we delete a family or student account and its personal information. Financial records are kept for the 7 years above, with the link to the person removed where we can.
- A student can delete their own work. Any practice attempt, including everything they wrote in it, from their own account. No request to us, no teacher approval.
Where the data lives
Data is stored with Supabase in Singapore. It therefore leaves the Maldives. We are telling you this plainly because you should know where your child's name is kept. If hosting closer to home becomes possible, we will revisit it.
Payments
Kiyevun never asks anyone to type a card number or bank credentials into the app. Fees are paid in your own banking or Swipe app. Kiyevun records that a payment was made and lets the teacher confirm it. We do not see or store your card details, because we never handle them.
Security
- Files are private. Downloading one issues a link that expires in 60 seconds, only after checking you are allowed it.
- Keys that could bypass those checks exist only on the server and are never sent to a browser.
- Storage is closed by default, scoped per centre.
Contact
Questions, or a request to delete an account: info@kiyevun.com. See also our Terms and Refunds pages.