Legal & Compliance
Privacy Policy
How Skoolfly collects, uses, stores and protects personal data.
1. Privacy Policy
This Privacy Policy explains how Skoolfly may collect, use, disclose, store and protect personal data when providing its educational management software, website, applications and related services. It is designed for school owners, administrators, teachers, students, parents and guardians, staff, visitors and other authorised users.
2. Introduction
Skoolfly is an educational management platform intended to bridge traditional school administration with modern digital education. Depending on how a school configures and uses the platform, Skoolfly may facilitate administration, academic management, communication, learning activities, reporting and related services.
Because schools may use Skoolfly to process information about students, including minors, privacy and data protection are treated as core considerations.
3. Who We Are
Skoolfly is operated by Skoolfly ("Skoolfly", "we", "us" or "our").
Registered address: Nigeria, Côte d'Ivoire
Website: https://skoolfly.com
Privacy contact: info@skoolfly.com
Data Protection Officer / Privacy Contact: Data Protection Officer
4. Scope of This Privacy Policy
This Policy applies to personal data processed through Skoolfly's website, applications, school-management platform, support channels and related services, to the extent those activities are operated by or on behalf of Skoolfly.
A school may also provide its own privacy notice and may have separate obligations concerning information it enters into Skoolfly. Where a school determines the purposes and means of processing student, parent, teacher or staff information, the school may act as the data controller and Skoolfly may act as its data processor/service provider.
5. Definitions
6. Roles of Skoolfly and Schools
Schools may determine why student, parent, teacher and staff information is collected and how it is used for school purposes.
Skoolfly may process such information on a school's documented instructions to provide hosting, administration, academic, communication, learning and related services.
Skoolfly may act as a controller for processing necessary for its own website administration, account management, billing, security, support, legal compliance and certain business operations.
Schools are responsible for ensuring that they have an appropriate lawful basis, authority and permissions for personal data they submit to Skoolfly, including where required for children or other protected data subjects.
Where required, the parties should document controller/processor responsibilities in an appropriate data processing agreement or equivalent contractual terms.
7. Personal Data We Process
The following table describes categories that Skoolfly may process based on the platform's intended functionality.
8. Student and Children's Data
Skoolfly may process personal data relating to students who are minors. Because children's information can require heightened safeguards, Skoolfly should apply data minimisation, appropriate access controls, confidentiality and other safeguards required by applicable law.
Schools should ensure that collection and use of student data is authorised and supported by an appropriate lawful basis. Where parental or guardian involvement, consent or another authorisation is required by applicable law or the school's circumstances, the school should obtain and maintain it.
Skoolfly will not assume a specific minimum age for users in this draft. Requests relating to a child's data may need to be handled through the school, parent/guardian or other legally authorised representative, depending on the circumstances.
9. How We Collect Personal Data
Directly from users when accounts are created or information is submitted.
From schools and authorised school personnel using the platform.
From parents/guardians or other authorised persons where the platform supports such interactions.
Automatically from devices and systems when users access the service, such as technical logs and security information.
From support or business interactions with Skoolfly.
Through integrations or third-party services where enabled.
10. Why We Process Personal Data
Provide and operate the Skoolfly platform.
Create and manage user accounts and permissions.
Support school administration, academic records, attendance and assessments.
Facilitate school communications.
Support learning and educational activities.
Provide customer support and troubleshoot problems.
Maintain security, prevent abuse and investigate incidents.
Process subscriptions and payments where applicable.
Improve reliability, functionality and user experience.
Meet legal, regulatory and contractual obligations.
Send service communications.
Send promotional communications where legally permitted and applicable.
Conduct analytics or product improvement where appropriately authorised.
11. Lawful Bases for Processing
Skoolfly will not treat consent as the automatic lawful basis for every processing activity. The appropriate lawful basis depends on the purpose, data involved, relationship between the parties, applicable Nigerian law and, where applicable, international law.
Potential bases may include compliance with a legal obligation, performance of a contract, legitimate interests where permitted and appropriately balanced, consent where required or appropriate, performance of a task carried out in the public interest or other lawful bases recognised by applicable law.
For processing carried out by a school as controller, the school should determine and document the appropriate lawful basis. Where GDPR or UK GDPR applies, the relevant GDPR/UK GDPR lawful bases and special-category requirements should be separately assessed.
12. AI-Assisted Features and Automated Processing
Skoolfly may provide AI-assisted functionality intended to support learning. The AI functionality is treated as part of the broader platform rather than as a separate category of service.
AI may assist with educational support, content generation, explanations, practice or other learning-related functions .
Users may provide educational questions, prompts, text or other information to the AI feature .
AI outputs may be generated in response to user inputs and should be reviewed critically because AI-generated information may be inaccurate or incomplete.
Where AI outputs could influence an important educational decision about a student, appropriate human oversight should be maintained.
Skoolfly should not rely on solely automated processing to make significant decisions about students without an appropriate legal, technical and human-review framework.
14. International Data Transfers
Skoolfly may use infrastructure or service providers located outside Nigeria. If personal data is transferred or made accessible across borders, Skoolfly and/or the relevant school should assess and implement safeguards required by applicable Nigerian law and, where applicable, GDPR/UK GDPR requirements.
Assess the destination country and transfer circumstances.
Use appropriate contractual or other safeguards where required.
Assess whether regulatory approval, notification or other requirements apply.
Document relevant transfer arrangements and service-provider responsibilities.
15. Data Security
Skoolfly is intended to use reasonable technical and organisational measures appropriate to the risks of processing. The precise controls must be confirmed against the live environment.
Role-based access and least-privilege controls.
Authentication and account-security measures.
Encryption in transit and/or at rest where appropriate.
Secure hosting and infrastructure controls.
Logging and monitoring.
Backups and recovery procedures.
Security testing and vulnerability management.
Confidentiality obligations for personnel and contractors.
Incident detection, response and corrective-action procedures.
Data minimisation and controlled access.
No particular security certification or technology is claimed by this Policy unless separately verified.
16. Data Retention
Skoolfly retains personal data only for as long as reasonably necessary for the relevant purpose, contractual relationship, legal obligation, dispute resolution, security or other lawful business need.
Exact retention periods must be established in a documented retention schedule.
When information is no longer required, Skoolfly should securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements and contractual arrangements.
17. Your Privacy Rights
Subject to applicable law and relevant limitations, individuals may have rights including:
Right to be informed about processing.
Right to access personal data.
Right to correction or rectification.
Right to erasure/deletion in applicable circumstances.
Right to restriction of processing where applicable.
Right to object to certain processing.
Right to data portability where applicable.
Right to withdraw consent where processing relies on consent.
Rights concerning certain automated decision-making and profiling where applicable.
Right to lodge a complaint with the relevant data protection authority.
The exact rights available depend on the applicable law and whether Skoolfly or the relevant school is the controller for the processing in question.
18. How to Exercise Your Rights
Privacy requests may be submitted to:
Privacy Email: info@skoolfly.com
DPO/Privacy Contact: Data Protection Officer
Legal Entity: Skoolfly
Registered Address: Nigeria, Côte d'Ivoire
A request should identify the requester, describe the information or right being requested, and provide enough information for Skoolfly to locate the relevant account or processing activity. Skoolfly may request reasonable information to verify identity and protect against unauthorised disclosure.
Where the request concerns data controlled by a school, Skoolfly may need to refer the request to the relevant school or act according to the school's documented instructions, subject to applicable law.
20. Marketing Communications
Skoolfly may send essential service, transactional and account-related communications where necessary to provide the service.
Promotional communications, if used, will be subject to applicable law and relevant consent or preference requirements. Users should be provided with an appropriate mechanism to opt out of promotional communications.
21. Third-Party Services and Links
Skoolfly may contain integrations, links or functionality provided by third parties. Those third parties may process information under their own privacy notices and terms. Skoolfly does not automatically control the privacy practices of external services.
The actual third-party integrations and providers should be listed or otherwise documented where appropriate.
22. Data Breach and Incident Management
Skoolfly maintains an approach for identifying, investigating, containing and responding to suspected personal-data incidents. Depending on the circumstances, this may include:
Detecting and logging the incident.
Containing and investigating the incident.
Assessing the nature and risk of the incident.
Taking corrective and preventative measures.
Notifying the relevant regulator where required.
Notifying affected individuals or customers where legally required or otherwise appropriate.
Documenting the incident and response.
Specific notification timelines will be determined by the applicable law, regulatory requirements, contractual obligations and circumstances of the incident.
23. Changes to This Privacy Policy
Skoolfly may update this Privacy Policy to reflect changes in its services, processing activities, legal requirements or privacy practices. Material changes should be communicated through appropriate channels where required. The effective date and last-updated date will appear at the beginning of the Policy.
24. Governing Law
This Privacy Policy is intended primarily to reflect applicable Nigerian data-protection requirements. Nigerian law should govern the interpretation and operation of this Policy to the extent applicable, subject to any mandatory rights or laws that apply to users in another jurisdiction.
25. Contact Us
Skoolfly Legal Entity: Skoolfly
Website: https://skoolfly.com
Privacy Email: info@skoolfly.com
Data Protection Officer/Privacy Contact: Data Protection Officer
Registered Address: Nigeria, Côte d'Ivoire