1. Introduction
Schulup is a school management platform serving school owners, administrators, teachers, students, and parents primarily in Nigeria, with plans for international expansion. This Privacy Policy explains how we collect, use, and protect your information through our web and mobile applications.
By using Schulup, you agree to this Privacy Policy.
2. Information We Collect
2.1 From All Users
- Name, email, phone number
- Login credentials and profile photo
- Device information and IP addresses
- Usage data and activity logs
2.2 School Owners & Administrators
- Organization/school details
- Business contact information
- Multi-school management data
2.3 Teachers
- Employee ID and qualifications
- Class assignments and schedules
- Grades and attendance entered
- Communications with students/parents
2.4 Students
- Student ID, date of birth, grade/class
- Academic records (grades, attendance, assignments)
- Parent/guardian information
- Exam results and report cards
- Health information (if provided)
2.5 Parents/Guardians
- Relationship to student
- Contact information (phone numbers, email, WhatsApp)
- Communication with school
- Fee/tuition payment records
3. How We Use Your Information
We use information to:
- Provide and improve Schulup services
- Manage attendance, grades, and academic records
- Facilitate communication between users (including SMS and WhatsApp notifications)
- Generate reports and analytics
- Ensure security and prevent fraud
- Comply with legal obligations in Nigeria and internationally
- Send notifications and important updates
We DO NOT:
- Sell your personal information
- Use student data for advertising
- Share data with unauthorized parties
- Build commercial profiles of students
4. Who Can Access Information
Administrators
All students, teachers and parents in their school, plus school-wide reports. Not other schools' data or the owner's billing information.
Teachers
Students in their classes, grades for their subjects, and parent contacts. Not students outside their classes, other teachers' communications, or financial records.
Students
Their own grades, attendance, assignments and timetable. Not other students' information or system configuration.
Parents
Their own children's information, grades, attendance and fee status. Not other students' information or other parents' data.
5. How We Share Information
Within Your School
Information is shared based on roles.
With Service Providers
- Cloud hosting: AWS, Google Cloud, Microsoft Azure
- Payment processors: Paystack, Flutterwave, Interswitch, Stripe, PayPal
- SMS services: Nigerian SMS gateways
- Email services
- Analytics tools: Google Analytics, Firebase
All service providers sign data processing agreements and must protect your data.
For Legal Reasons
We may disclose information to:
- Comply with Nigerian laws, court orders, or legal processes
- Respond to requests from Nigerian regulatory authorities (NITDA, Nigerian Police, etc.)
- Protect rights, safety, or property
- Enforce our Terms of Service
- Investigate fraud or security issues
Business Transfers
If Schulup is acquired, your information may transfer to the new entity (we'll notify you).
With Your Consent
We may share data with third parties when you provide explicit consent.
We NEVER sell your information to advertisers or marketing companies.
6. Data Security
Security Measures
- SSL/TLS encryption for data transmission
- Encrypted data storage
- Strong password requirements and multi-factor authentication
- Firewalls and intrusion detection
- Regular security audits
- Daily backups with geographic redundancy
- Role-based access controls
Your Responsibilities
- Use strong, unique passwords
- Keep login credentials confidential
- Log out from shared devices
- Report suspicious activity immediately
- Enable two-factor authentication (if available)
No system is 100% secure, but we use industry-leading practices to protect your data.
7. Your Rights
All Users Can:
- Access – view all information we have about you
- Correct – update incorrect or incomplete information
- Delete – request deletion (subject to legal requirements)
- Export – download your data in a portable format
- Restrict – limit how we process your information
- Object – opt out of certain processing activities
- Complain – file complaints with NITDA or other relevant authorities
How to Exercise Rights
- Update your profile in account settings
- Contact your school administrator
- Email: privacy@schulup.com
- We respond within 30 days
Parental Rights
Parents can:
- Review their child's information
- Request corrections or deletion
- Refuse further data collection
- Provide or withdraw consent
8. Data Retention
While Active
All data is retained while your account is active.
After Account Closure
- Academic records: 7 years minimum
- Financial records: 7 years
- Communications: 1–2 years
- Personal information: deleted after the retention period
Deletion Process
When retention periods expire, data is securely and permanently deleted from all systems.
9. Children's Privacy
Our Commitments
- Collect only necessary information from children
- Use student data only for educational purposes
- Never use student data for advertising or marketing
- Provide parental access and control
- Maintain strict security measures
- Comply with NDPA 2023 and international standards
Parental Consent
- Parents/guardians must consent to collection of children's data
- Schools may act as agents for parents in educational contexts
- Parents can access, correct, or request deletion of their child's information
10. Data Storage & International Transfers
Primary Storage Location
Your data is primarily stored and processed in:
- Nigeria (when available and feasible)
- International cloud servers: AWS, Google Cloud, or Azure data centres (may include servers in Europe, the United States, or other regions)
For International Expansion
As we expand internationally, your data may be:
- Transferred to and processed in other countries
- Subject to data protection laws in those jurisdictions
- Protected by safeguards such as Standard Contractual Clauses, Data Processing Agreements and equivalent security measures
Data Sovereignty
We are working toward data localization options for Nigerian schools and comply with all applicable Nigerian data transfer regulations.
11. Legal Compliance
Nigerian Laws
We comply with:
- Nigeria Data Protection Act (NDPA) 2023
- Nigeria Data Protection Regulation (NDPR) 2019
- Nigerian Communications Act
- Cybercrimes Act 2015
- NITDA regulations
- Nigerian educational record-keeping requirements
International Standards (For Global Expansion)
We also align with:
- GDPR (EU)
- COPPA (US)
- FERPA (US)
- CCPA (California, US)
- Other applicable international data protection laws
Data Controller / Processor
- Your school is the Data Controller for educational records
- Schulup is the Data Processor
- Schools remain responsible for privacy compliance under Nigerian law
12. Cookies & Tracking
We Use:
- Essential cookies: required for login and functionality
- Functional cookies: remember preferences
- Analytics cookies: understand usage patterns
- Performance cookies: monitor app performance
Mobile App Permissions
- Camera (optional)
- Storage (optional)
- Notifications (optional)
- Location (optional)
- Phone (optional)
Manage Cookies
- Browser settings: Chrome, Safari, Firefox, Edge, Opera Mini
- Mobile: Settings → Privacy
- In-app: Profile → Privacy Settings
13. Payment Information
Payment Processors
We use trusted Nigerian and international payment processors including:
- Paystack
- Flutterwave
- Interswitch
- Bank transfers
- USSD payments
- International: Stripe, PayPal
What We Collect
- Fee payment history
- Transaction records
- Payment status
What We DON'T Store
- Complete credit/debit card numbers
- Card CVV codes
- Bank account passwords
- Sensitive financial data (handled by payment processors)
14. User Responsibilities & Terms of Use
All Users Must:
- Keep login credentials secure
- Use Schulup only for educational purposes
- Respect others' privacy
- Follow school policies
- Report security concerns
Prohibited:
- Sharing passwords
- Accessing unauthorized information
- Harassment or bullying
- Using data for non-educational purposes
- Attempting to breach security
- Fraudulent activities
Violations may result in account suspension, termination, or legal action under Nigerian law.
15. Changes to This Policy
How We Update
- Update the "Last Updated" date
- Post the new policy on our website and in-app
- For material changes: SMS, email, or WhatsApp notification 30 days in advance
Your Choices
- Continued use after changes = acceptance
- If you disagree, stop using Schulup before the changes take effect
- Contact us with concerns
16. Contact
Email: privacy@schulup.com
Website: www.schulup.com
Technical support: support@schulup.com
Regulatory Authority
National Information Technology Development Agency (NITDA)
- Website: nitda.gov.ng
- Email: info@nitda.gov.ng
If you're not satisfied with our response, you can file a complaint with NITDA.
Response time: within 30 days for privacy requests, 5 business days for general inquiries.
Last updated: December 10, 2025