Data Protection Policy

1. Data We Collect

To provide the Shuleapp services, we collect different types of information:

2. How We Use Your Data

We use the collected data for the following purposes:

• Service Delivery: To facilitate school management operations, including timetable scheduling, fee tracking, and report card generation.
• Communication: To send important notifications regarding system updates, school alerts, and academic progress to parents and staff.
• Security: To detect, prevent, and address technical issues, fraud, and unauthorized access to the platform.
• Improvement: To analyze usage patterns and improve the functionality, speed, and user experience of Shuleapp.
• Compliance: To comply with legal obligations and government educational reporting requirements in Tanzania.

3. Data Sharing & Disclosure

We respect your privacy and do not sell personal data to third parties. We may only share data under specific circumstances:

• School Authority: Data is accessible to authorized staff members of the subscribing school based on their role (e.g., teachers can view their assigned students; finance staff can view fee records).
• Service Providers: We may engage trusted third-party companies to perform services on our behalf (e.g., cloud hosting, data analytics) who are bound by strict confidentiality agreements.
• Legal Requirements: We may disclose data if required to do so by law or in response to valid requests by public authorities (e.g., court orders or police investigations).
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred as part of the transaction.

4. Data Security

We implement robust technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• 0: SSL/TLS encryption for data transmission.
• 1: Role-based access control (RBAC) to ensure users only access data relevant to their specific duties.
• 2: Regular security audits and vulnerability assessments.
• 3: Secure data centers with physical access controls.

However, no method of transmission over the Internet is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

5. Data Retention

We retain your personal data only for as long as is necessary for the purposes set out in this policy, unless a longer retention period is required or permitted by law.

When a school terminates its subscription, student academic records will be archived or securely deleted in accordance with the school's request and data retention laws. Active user accounts are deactivated immediately upon termination.

6. Your Data Rights

Depending on applicable data protection laws, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request the correction of inaccurate or incomplete data.
• Deletion: Request the deletion of your personal data (subject to legal obligations for record-keeping).
• Objection: Object to the processing of your personal data.

To exercise these rights, please contact us using the details provided below. We will respond to your request within 30 days.

7. Cookies and Tracking

8. Children's Privacy

9. Contact Information