Is our data safe with you?
It is a fair question and you should ask it of anyone holding your pupils’ records. Here are the answers in ordinary words, with nothing hidden behind technical language.
“If we stop using you, do we lose everything?”
The records are yours, not ours
No. Everything you put in stays yours, and you can take a copy of all of it whenever you like, without asking us and without paying for it. Pupils, guardians, results, attendance, fees: the lot, in ordinary spreadsheet files you can open anywhere.
If you decide to leave, nothing is locked. You keep full access for 90 days after your account ends, purely so you have time to take what you need. We do not hold a school's records hostage to a renewal, and we never will.
- Download everything at any time, while you are with us and for 90 days after
- Ordinary spreadsheet files, not a format only we can open
- No export fee, no notice period, no phone call to request it
“If we ask you to delete our data, is it actually gone?”
And you can have it deleted
Yes. Once your 90 days are up we delete your school's records. You can also ask us to delete them sooner and we will, as long as you have taken your copy first.
One honest caveat, because most companies leave this part out. We take a backup of everything every night, in case of a disaster. When we delete your records from the live system they are gone from it immediately, but a copy still sits inside those older backups until the backups themselves expire, which is within 12 months. We cannot reach into a sealed backup and pluck one school out without destroying its usefulness for everyone else. Nobody looks at those backups unless we are recovering from a failure, and when they expire, that copy goes too.
- Deleted from the live system as soon as you say so
- Fully gone, including from every backup, within 12 months
- We will confirm in writing when it is done
“Our results are on the same system as other schools. What stops them seeing ours?”
One school cannot see another
This is the question we get asked most, and it is the right one to ask.
The wall between schools is not a setting in the app that somebody could switch off, and it is not a filter a programmer might forget to write one day. It sits in the database itself. Every single time the system reaches for a record, the database checks which school the person asking belongs to, and simply refuses to hand over anything belonging to a different one.
That matters because it means a mistake in the app cannot leak your data. Even if we wrote a page badly, the records still would not come out. We also run an automated test, every time we change the software, that deliberately tries to read another school's pupils and fails on purpose. If that test ever succeeded, the change would be blocked before it reached you.
“Can a teacher look at another class's marks, or at what parents owe?”
Inside your school, people see only their part
No. Everyone who signs in has a role, and the role decides what opens. A class teacher reaches their own classes and nothing else. Whoever handles fees sees money but not somebody else's marking. A parent sees their own children and no other child in the school.
When a member of staff leaves and you remove their role, they can no longer change anything, straight away. They may still be able to read what was already on their screen for up to fifteen minutes, until the session they are signed into runs out, and you can end every session immediately if the situation calls for it.
- You decide what each person can open, and can change it at any time
- A parent can never see a pupil who is not their own child
- Every change to a published result is recorded against the person who made it
“Could somebody intercept it, or read it off your servers?”
Protected on the way and once it arrives
Everything is encrypted, which means scrambled into something unreadable unless you hold the key. It is scrambled while it travels between your phone and us, so nobody sitting on the same wifi in a cyber cafe can read it. It is scrambled again while it sits on the server, so anyone who somehow walked off with the raw files would be holding gibberish.
Passwords are never stored as words we could read. We could not tell you your own password if you asked us, because we do not have it.
Every night the whole thing is backed up somewhere else entirely. More importantly, we regularly take one of those backups, load it into a clean system and check the records actually came back. A backup nobody has ever tested is not a backup, it is a hope.
“Is it only your company that touches our records?”
Who else is involved
Not quite, and you should know who. Like every online service, we sit on top of a few specialist companies: one runs the servers, one runs the database, one processes card and transfer payments, one sends the emails and text messages, and one alerts us when something breaks. They are bound by contract to the same rules we are, they may only use your data to do that job, and we remain responsible for them to you. If we ever add another, we will tell your school before we do, and you can object.
What we will never do
Short list, and every item on it is something somebody in this market does.
- Sell your school's data, or anyone's in it. There is no version of our business where this happens.
- Show advertising to your parents or pupils, or let anyone else advertise to them.
- Use the children's records to train artificial intelligence models.
- Charge a parent to see their own child's result. Your fees already cover it.
- Read your records out of curiosity. Access is logged, and limited to the few people who need it to support you.
“What happens if something does go wrong?”
Where you stand legally
Under the Nigeria Data Protection Act 2023, your school is the one in charge of its pupils' data and we act on your instructions. In plain terms: it is your data, we are holding it for you, and we cannot decide to do something else with it.
If records are ever exposed, we tell your school without delay and give you what you need to handle it, including anything you must report to the Nigeria Data Protection Commission. We will not sit on bad news and hope you do not notice.
The full detail is in our Privacy Notice and Data Processing Addendum. If anything on this page and those documents ever disagree, the documents are the ones that bind us, and we would want to know so we can fix the wording here.
If you think you have found a problem
Tell us through our contact page and we will look at it the same day. We will not pursue anyone who reports something in good faith, and we would rather hear it from you than from a parent.
Start with one term and see if it holds up
We will set up your classes, import your current pupil list, and walk your staff through it. If it does not fit how your school works, you have lost an afternoon.