🏫
1. Introduction
Who we are and what Careevo does
Careevo is an AI-powered student performance analytics platform developed by RMTT-ERP (Rising Minds TechToch), operated by Neotech C & S, Neemuch, Madhya Pradesh, India.
This Privacy Policy describes how we collect, use, store, and protect information when you use Careevo at todo.mycityportal.in. By using Careevo, you agree to the terms of this policy.
Careevo allows school administrators, teachers, and parents to view and manage student academic performance, generate AI-powered progressive report cards, track attendance, and share academic reports via WhatsApp.
🎯
2. Age Rating & Target Audience
Google Play content rating — IARC system declaration
Careevo is rated on Google Play using the IARC (International Age Rating Coalition) system. Our declared content rating is:
Why Everyone (3+)? Careevo contains no violence, sexual content, gambling, profane language, or any mature content. It is a school management tool used by teachers, administrators, and parents only.
Target Audience (Play Console):
- Primary users: School staff (teachers, administrators) — Adults 18+
- Secondary users: Parents / guardians — Adults 18+
- Data subjects: Students from Balvati/Nursery to Class XII (ages 3–18+)
- Students do not directly log in — all data is entered and managed by authorised school staff on their behalf
- Age groups covered: 5 and under, 6–8, 9–12, 13–15, 16–17, 18 and over
📋 Play Console Setting: Target audience → All age groups selected (5 and under through 18+) covering Balvati/Nursery to Class XII. Actual app operators are school staff and parents only. Student data is managed by authorised administrators.
✅ Google Play Families Policy: Careevo is committed to following the Google Play Families Policy. No ads are served. No data is sold. No in-app purchases. No third-party ad SDKs integrated. Children do not directly interact with or log into the app.
📊
3. Information We Collect
Google Play Data Safety aligned — all data encrypted in transit
The following data is collected when you use Careevo. All data is encrypted in transit via HTTPS.
| Data Type | Details | Purpose | Shared? |
|---|
Personal Info
Name | Full name of student, teacher, parent | Account & report generation | No |
Personal Info
Email Address | Email used for login / OTP | Authentication, account access | No |
Personal Info
Phone / Mobile Number | WhatsApp / contact number | Sending reports via WhatsApp | No |
Personal Info
Profile Photo | Optional user profile image | Account identification | No |
Account Info
User ID / Username | Unique identifier per user | Login, role-based access | No |
Account Info
Password | Stored encrypted (bcrypt) | Authentication only | No |
Academic Data
Marks & Grades | Term-wise, session-wise marks, grades, attendance | AI analysis, report cards | No |
Academic Data
Admission Number / Roll No. | School-assigned identifiers | Student identification in reports | No |
Academic Data
School / Class / Section | School name, class, section | Multi-school management | No |
App Activity
Login & Session Data | Login time, IP address, session activity | Security, audit logs | No |
✅ Play Store Data Safety Summary: Careevo collects personal info (name, email, phone), account info (user ID, encrypted password), academic performance data, and app activity. All data is encrypted in transit (HTTPS). No data is sold or shared with third parties. Users can request deletion of their account and data.
🔑
4. Authentication Methods
How users log in to Careevo
Careevo supports the following login methods:
- Username / Email + Password — standard credential-based login
- Email / Mobile OTP (One-Time Password) — passwordless login via OTP
- Google OAuth 2.0 — login via Google account
All authentication is over encrypted HTTPS. Passwords are stored using bcrypt hashing — never in plain text. Sessions are managed server-side with auto-expiry and CSRF token protection.
🔒 Rate limiting is applied to all login attempts. Accounts are temporarily locked after 5 failed attempts within 15 minutes.
⚙️
5. How We Use Information
Purposes for which your data is processed
- Generate AI-powered progressive student report cards
- Track academic performance cumulatively across terms and sessions
- Provide AI-based career stream suggestions (Science / Commerce / Arts / Vocational)
- Share reports with parents via WhatsApp and school administration
- Help school management identify students who need academic support
- Maintain audit logs for security and access monitoring
- Send OTP for passwordless login via email or SMS
- Authenticate users via Google OAuth when selected
⚠️ We do not use your data for advertising, commercial profiling, or any purpose unrelated to school academic management.
🤖
6. AI Analysis & Career Direction
How artificial intelligence is used in Careevo
Careevo uses AI (Gemini / ChatGPT / Claude API) to analyse cumulative academic performance and generate personalised report card feedback, career stream suggestions, and strength/improvement area identification.
AI analysis uses anonymised academic data only (marks, grades, attendance percentages). No personally identifiable information such as student names or contact details is sent to AI APIs.
⚠️ Advisory Only: All AI-generated suggestions are advisory in nature. Final decisions on career streams, promotions, and academic planning rest solely with students, parents, and school educators.
🔐
7. Data Storage & Security
How we protect your information
All data is stored on secure servers at todo.mycityportal.in (A2 Hosting). Security measures include:
- HTTPS Encryption — all data transmitted over encrypted TLS connections
- Password Hashing — bcrypt algorithm; never stored in plain text
- Role-Based Access Control — only authorised staff can access specific data
- CSRF Token Protection — all forms protected against cross-site request forgery
- Rate Limiting — login throttling to prevent brute force attacks
- Session Management — server-side sessions with auto-expiry
- Activity Logging — login events logged with IP and timestamp
- Regular Backups — database backed up regularly via cPanel
🚫
8. Data Sharing
We do not sell or share your data
We do not sell, trade, rent, or share student data with any third party, advertiser, or external organisation. Data is used solely within the school's Careevo system for generating academic reports shared with concerned school staff and parents.
Limited sharing occurs only in:
- Within school: Between authorised staff and admin of the same school
- AI APIs: Anonymised academic data only — no names or contact details sent to AI
- WhatsApp: Report PDFs shared by school admin to parents — only when explicitly sent by staff
❌ No data is shared with advertisers, data brokers, marketing companies, or any commercial third party.
👶
9. Children's Privacy
How we handle school-age student data
Careevo serves students from Balvati/Nursery through Class XII (ages 3–18+). Student data is entered exclusively by authorised school staff — not by children directly. Children do not create accounts, log in, or interact with the app independently. We comply with applicable laws regarding protection of minors' data and are committed to following the Google Play Families Policy.
- Children do not have direct login accounts — access is managed by teachers and administrators
- Student academic data visible only to school staff and the student's own parents/guardians
- No behavioural tracking, location tracking, or advertising profiling of students
- No social features, chat, or user-generated content that could expose children to risk
✅ In accordance with Indian IT Act 2000 and IT (Amendment) Act 2008, all student data is treated as sensitive personal information.
✅
10. Your Rights
Access, correction, portability of your data
Schools, parents and guardians may request:
- Access — a copy of the student's stored data
- Correction — correction of inaccurate information
- Deletion — removal of data upon school exit or request
- Portability — export of academic data in a readable format
Contact your school administration or reach us at the address in Section 13 below.
🗑️
11. Account Deletion
Required by Google Play — right to delete your account and data
Users have the right to request deletion of their account and all associated personal data. To request account deletion:
🗑️ Delete My Account
⚠️ Account deletion permanently removes your login credentials and personal profile data. Academic records may be retained by the school as per institutional policy. Deletion requests are processed within 7 working days.
📋 Play Console: Account deletion URL → https://todo.mycityportal.in/delete-account.php
📝
12. Changes to This Policy
How we notify you of updates
We may update this Privacy Policy from time to time. Continued use of Careevo after changes constitutes acceptance. The "Last Updated" date above reflects the latest revision.
The current version is always available at todo.mycityportal.in/privacy-policy.php.
📬
13. Contact Us
For privacy questions, data requests, or complaints
✅ We aim to respond to all privacy-related queries within 7 working days.