1. Who is responsible
Each school decides what it records about its students, guardians and staff, and why. Klevna stores and processes that data on the school's behalf, only to run Skolijo for it.
For this website and the signup form, Klevna is responsible for the data you give us.
2. What we collect
- At signup: the school's name, EIIN, address, and the name, phone number and email of the person signing up.
- Inside Skolijo, entered by the school: student details (name, class, roll, date of birth, photo and guardian contacts), attendance including RFID card taps, exams and results, fees and payments, notices, and staff details including salaries.
- Accounts: each user's name, phone number or email, role, and password (stored only in hashed form, which we can't read).
- Payments: amount, date, status and the gateway's reference number. Card numbers, bKash PINs and OTPs go to the payment gateway and are never seen or stored by us.
- Technical data: IP address, browser and a record of sign-ins and important actions, to keep accounts secure.
3. How we use it
We don't sell personal data, and we don't use it for advertising.
- to run Skolijo: attendance, results, fees, notices and the guardian portal;
- to verify schools and set up accounts;
- to send the SMS and emails a school sets up, plus account and billing messages;
- to bill schools and to collect fees on a school's behalf when it turns on online payments;
- to give support, keep the service secure and prevent fraud;
- to improve Skolijo, using totals that don't identify anyone.
4. Students' data
Most students are under 18. The school is responsible for having the right to record their data and for telling guardians how it is used. Guardians see their own child's information through the guardian portal. We use students' data only to provide Skolijo to their school.
6. Where data is stored
Skolijo's servers and database are in Singapore. All data travelling between your device and Skolijo is encrypted (HTTPS).
7. How we protect it
- encryption in transit and hashed passwords;
- role-based access, so each person sees only what their role allows;
- every school's data kept separate from other schools';
- daily backups;
- access by our team limited to the people who need it for support or running the service.
8. How long we keep it
- While a school's subscription is active, we keep its data so it can use Skolijo.
- After a school cancels, we keep its data for 90 days so it can come back or download it, and then delete it. Copies in backups are removed within a further 30 days.
- Invoices and payment records are kept as long as Bangladeshi tax law requires.
- Signup details from schools that never start using Skolijo are deleted within 12 months.
10. Your choices
- Students, guardians and staff: to see, correct or delete your information, contact your school first, because it controls the data. We will help the school do what you ask.
- Schools: you can view, correct and download your data at any time, and ask us to delete it.
11. Changes to this policy
If we change this policy in an important way, we will tell schools by email or inside Skolijo before the change applies. The date at the top of this page shows when it last changed.
12. Contact
Questions or requests about privacy: email [email protected] or call +88 01625-852117.