Introduction
Welcome to Schooly ERP ("we," "our," or "us"). This Privacy Policy and Terms of Service explains how we collect, use, disclose, and safeguard your information when you use our mobile application and services. We are committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and the Kenya Data Protection Act, 2019.
PRIVACY POLICY
1. Data Controller
Schooly ERP is the data controller responsible for your personal data. For data protection inquiries, contact us at: privacy@schoolyerp.com
2. Information We Collect
Personal Information:
- Name, email address, phone number
- School affiliation and role
- Student information (for parents and teachers)
- Academic records and performance data
- Attendance and behavior records
- Financial information (fee payments)
Technical Information:
- Device information and identifiers
- IP address and location data
- Usage data and analytics
- Log files and crash reports
3. Legal Basis for Processing (GDPR)
We process your data based on:
- Consent: You have given explicit consent
- Contract: Processing is necessary for service delivery
- Legal Obligation: Compliance with education regulations
- Legitimate Interests: Improving our services and security
4. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Process transactions and send notifications
- Communicate important updates
- Improve user experience and functionality
- Ensure security and prevent fraud
- Comply with legal obligations
- Generate analytics and reports
5. Data Sharing and Disclosure
We may share your information with:
- Your school administrators and authorized staff
- Parents (for student information)
- Service providers (cloud hosting, analytics)
- Law enforcement when legally required
- Third parties with your explicit consent
We do NOT sell your personal data to third parties.
6. Data Security
We implement industry-standard security measures:
- End-to-end encryption for data transmission
- Encrypted data storage
- Regular security audits and updates
- Access controls and authentication
- Employee training on data protection
- Incident response procedures
7. Data Retention
- We retain personal data only as long as necessary for the purposes stated.
- Student records are retained according to educational regulations (typically 7 years).
- Financial records are retained for 7 years as per Kenya tax laws.
- You may request deletion of your data subject to legal requirements.
8. Your Rights (GDPR & Kenya DPA)
You have the right to:
- Access your personal data
- Rectify inaccurate data
- Request data deletion ("right to be forgotten")
- Object to data processing
- Data portability
- Withdraw consent at any time
- Lodge a complaint with supervisory authorities
To exercise these rights, contact us at:
9. Children's Privacy
- We collect student data only with parental/guardian consent.
- Parents have the right to review and request deletion of their child's data.
- We implement additional safeguards for children's data.
- Student data is only accessible to authorized school staff and parents.
10. International Data Transfers
- Data may be transferred to and processed in countries outside Kenya.
- We ensure adequate safeguards are in place for such transfers.
- We comply with GDPR requirements for international transfers.
11. Contact Information
For questions about these terms or privacy concerns:
- Email: privacy@schoolyerp.com
- Email: support@schoolyerp.com
- Phone: +254 705 327998
- Address: Off North Airport Road, Kandia Building Suit 1, Off Mombasa road, Nairobi, Kenya
12. Supervisory Authority
Kenya: Office of the Data Protection Commissioner
13. Governing Law
These terms are governed by the laws of Kenya. Any disputes shall be resolved in Kenyan courts.
14. Entire Agreement
These terms constitute the entire agreement between you and Schooly ERP regarding the use of our services.
By using Schooly ERP, you acknowledge that you have read, understood, and agree to be bound by these Terms of Service and Privacy Policy.