Privacy Policy

This Privacy Policy explains how My School App (“we”, “us”) collects, uses, and protects personal data when you register a school or use the Platform.

1. Who this policy covers

• School administrators who register and manage a school account.
• Teachers, staff, students, parents/guardians, and other users invited by a school.
• Website visitors and affiliate applicants where those features are used.

2. Data we collect

• Account data: names, school name, contact phone (SMS), optional email, password (stored hashed), and optional school logo.
• School operations data: students, classes, attendance, exams, scores, report cards, fees, bills, messages, and related records entered by your school.
• Technical data: login sessions, device/browser information, IP addresses, and logs needed for security and support.
• Payment data: payment references and status from processors; we do not store full card numbers on our servers when payments are handled by Paystack or similar providers.

3. How we use data

• To create and operate school accounts and deliver Platform features.
• To send transactional notices (registration, approval, password resets, fee or report notifications) by SMS and/or email when configured.
• To process subscriptions and feature unlocks.
• To secure the service, prevent abuse, and provide support.
• To improve reliability and features using aggregated or de-identified insights where possible.

4. School responsibility

• Each school decides what personal data to enter about students, parents, and staff.
• Schools must have a lawful basis and any required consent (especially for minors’ data, photos, biometrics/face templates if used, and parent contacts).
• School administrators control staff access within their portal.

5. Sharing

• We do not sell personal data.
• We may share data with infrastructure, SMS, email, and payment providers solely to run the service.
• We may disclose information if required by law or to protect the Platform, users, or the public from serious harm or fraud.

6. Retention

• We keep account and school data while the school account remains active and as needed for billing, security, and legal obligations.
• Schools may request correction or deletion of records according to Platform tools and applicable law; some records may be retained where required (for example payment evidence).

7. Security

• We use reasonable technical and organisational measures (including access controls and hashed passwords).
• No online service can guarantee absolute security; schools should also protect devices and staff logins.

8. Your choices

• School administrators can update profile and school settings in the portal.
• You may contact us to request access, correction, or deletion where applicable.
• SMS/email preferences for optional marketing (if any) can be managed separately from essential service messages.

9. Children

The Platform is intended for school organisations. Student data is processed at the school’s direction for educational administration. Schools must follow child-protection and data-protection rules that apply to them.

10. Changes and contact

We may update this Privacy Policy and will post the revised version on the Platform or website. For privacy questions, contact the Platform administrator through the support channels published on the My School App website or inside your school portal.

Last updated: 2026