← Back

Privacy Policy

Last updated: April 2026

What Eviva Does

Eviva is an oral defense recording tool used by schools. Teachers assign questions to students, who then record short video responses. Recordings are reviewed by the assigned teacher only.

Data We Collect

When a teacher creates an assignment, the following data is stored:

  • Student name and email address - provided by the teacher via CSV or manual entry
  • Questions - written by the teacher for each student
  • Video recordings - captured by the student during the oral defense

For teachers, we store:

  • Name and email address - from your Google or Microsoft school account

We do not collect passwords, location data, device identifiers, or browsing history.

Where Data Is Stored

All data is stored in Supabase (hosted on AWS) in the Asia-Pacific region. Video files are stored in a private storage bucket with no public access. All connections use HTTPS encryption in transit.

Who Can Access Student Data

Student recordings and personal information are accessible only to the teacher who created the assignment. Access is enforced at the database level through row-level security policies. Students cannot view, edit, or delete their own recordings after submission.

Eviva administrators (the development team) can access the database for maintenance and support purposes only.

How Students Access Eviva

Students do not create accounts. They receive a unique, one-time link via email from their teacher. This link provides access to their specific questions and recording interface only. No login is required.

Data Retention

Recordings and student data are retained for the duration of the academic year in which they were created, unless the teacher deletes the assignment sooner. Teachers can download all recordings and delete assignments at any time from their dashboard.

School Authorisation

Eviva is used under the authority of the school. The school authorises the use of Eviva on behalf of its students in accordance with its own data protection policies. Students are informed before recording begins that their responses will be shared with their teacher.

Third-Party Services

  • Supabase - database and file storage
  • Vercel - web hosting
  • Resend - email delivery (student links and teacher notifications)
  • Google / Microsoft - teacher authentication only

No data is sold to or shared with advertisers or analytics providers.

Contact

For questions about this policy or to request data deletion, contact the Eviva team at privacy@eviva.tech.