Privacy Policy

1. General Provisions

Alrevion is the data controller in respect of the platform. The school (Customer) acts as the controller in respect of its pupils' data and determines the purposes and retention periods for that data within the Cabinet.

By using the Service, you agree to this Policy.

2. Data We Process

School and staff data: organisation name, administrator contact details, access log.

Device technical data: device identifier, classroom assignment, request-route metadata (intent, model, latency).

Educational content: pupils' questions and Evi's responses, lesson context.

3. Children's Voice Data

Evi responds only upon being addressed and saves the dialogue query to the log: an audio recording and its transcript. Continuous classroom recording is not performed.

Audio recordings are stored in a secure object storage; only references are held in the database. Playback access is granted via a secure time-limited link with a corresponding entry in the access log.

The school sets the retention period for recordings and may delete them at any time. An option to store text only, without audio, is available.

4. Purposes of Processing

Provision and improvement of the Service, maintenance of the log for administration and parents, ensuring the security and moderation of children's content, and building the classroom's educational memory.

5. Legal Basis and Consent

Processing of data relating to minors is carried out on the basis of consent from their legal representatives, which the school is responsible for obtaining.

The school is responsible for obtaining and retaining such consents and for informing parents.

6. Storage, Retention Periods, and Deletion

A retention period is assigned to each record, with automatic deletion upon expiry.

A data subject or their legal representative may request deletion of data through the school administration.

7. Transfers to Third Parties (Processors)

External processors (e.g. STT/LLM providers) may be engaged for speech recognition and response generation. Only the minimum necessary volume of data is transferred.

We do not sell personal data or use children's voices for advertising. Providers selected for production processing are those that do not train their models on submitted data.

8. Security

Organisational and technical protection measures are applied: role-based access control, channel encryption, per-school data isolation (tenancy), and access logging.

9. Rights of Data Subjects and Parents

Parents are entitled to find out what Evi said in response to their child and to request deletion of recordings through the school.

Access is configured by the administration: a teacher sees their own classroom, a head teacher sees the school, and a parent sees their child's dialogues.

10. Cookies and Analytics

The website may use technical cookies to save language preferences. Analytical tools, if used, do not identify children.

11. Policy Updates

We may update this Policy. The current version is published on the website with the date of the last update.

12. Contact

For data processing enquiries: hello@alrevion.com.