Privacy Policy

SkoolDrive is a multi-tenant platform used by schools to manage admissions, students, staff, attendance, results, fees, and communication. This policy applies to everyone who interacts with the Service, including school administrators, teachers, accountants, parents/guardians, students, and visitors to our website.

The school is the data controller of the student, parent, and staff records it uploads or generates — it decides what data is collected and why. SkoolDrive acts as a data processor, handling that data on the school's behalf and on its documented instructions.

For a limited set of data — your account credentials, billing details, support requests, and information collected through our public website — SkoolDrive acts as the data controller.

Depending on how the Service is used, we may process:

• Account & profile data — names, emails, phone numbers, roles, and passwords (stored only hashed).
• School & academic records — student bio-data, enrolment, attendance, scores, results, and report cards.
• Parent/guardian data — contact details used to link a guardian to a student and deliver school communication.
• Financial data — fee records and subscription/billing info. Card and bank details are handled by our payment partners, not stored by us.
• Communications — announcements, messages, SMS/email logs, and support correspondence.
• Usage & device data — log data, IP address, device/browser type, and in-app activity, used to keep the Service secure and reliable.
• Push tokens — when you enable notifications, a device token so we can deliver alerts.

• Provide, operate, and maintain the Service for your school.
• Authenticate users and protect accounts from unauthorised access.
• Generate results, report cards, invoices, and analytics for the school.
• Send transactional and school-authorised communications (result alerts, fee reminders, announcements).
• Provide customer support and respond to your requests.
• Monitor, debug, and improve performance, security, and reliability.
• Comply with legal obligations and enforce our Terms.

Much of the data on the platform relates to children. Student data is collected by, and remains under the control of, the school the student is enrolled in. SkoolDrive processes it only to provide the Service to that school and never sells it. Where the law requires parental or guardian consent, the school is responsible for obtaining it. Parents/guardians may exercise their rights by contacting their child's school, or us at the address below.

Under the NDPA, we rely on one or more of:

• Contract — to deliver the Service to schools and account holders.
• Legitimate interests — to secure, support, and improve the Service, balanced against your rights.
• Legal obligation — where processing is required by law.
• Consent — where you opt in (e.g. push notifications); you may withdraw it any time.

We do not sell personal data. We share it only as needed to run the Service, with vetted sub-processors under contract, including:

• Cloud hosting and infrastructure providers that store and serve the platform.
• Communication providers that deliver email and SMS on a school's behalf.
• Payment processors that handle subscription and fee payments.
• AI providers that power optional features such as insights and remark drafting (see section 8).
• Professional advisers, or authorities where disclosure is required by law.

Some optional features use AI to generate insights, draft teacher remarks, or assist with assessment content. Relevant data may be sent to our AI provider solely to produce the requested output. We do not permit our AI providers to use your school's data to train their general models, and AI output is a draft for human review — not a substitute for professional judgement.

We use measures appropriate to the risk, including encryption in transit, hashed passwords, role-based access controls, tenant isolation between schools, and regular backups. No system is perfectly secure, but we work continuously to protect your data and will notify affected parties and regulators of a breach where the law requires.

We retain personal data while a school's account is active and as needed to provide the Service, then for a reasonable period to meet legal, accounting, and dispute-resolution needs. A school may request export or deletion of its data; on closure we delete or anonymise it within a reasonable timeframe, except where retention is legally required.

Some providers may process data outside Nigeria. Where data is transferred abroad, we take steps to ensure an adequate level of protection consistent with the NDPA, such as contractual safeguards with the receiving party.

Subject to applicable law, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your data, where applicable.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time, without affecting prior lawful processing.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

Because schools control their own student and staff records, requests about that data are often best directed to the relevant school. You can also contact us and we'll help route your request.

We use cookies and local storage to keep you signed in, remember preferences, and understand how the Service is used so we can improve it. You can control cookies through your browser settings; disabling some may affect how the Service works.

We may update this policy from time to time. When we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you. Continued use after an update means you accept the revised policy.

For privacy questions or to exercise your rights, email management@skooldrive.com or use our contact page. You may also reach the Nigeria Data Protection Commission for unresolved concerns.