Privacy Policy

Schools trust us with records about children, and we treat that seriously. The school owns its data. We store it securely, show it only to the people the school authorises, never sell it, and never use it for advertising. This page explains the details in plain language.

• School information: name, logo, contact details, bank details the school chooses to show on invoices.
• Staff accounts: names, roles, phone numbers, email addresses, login records.
• Student records: names, admission numbers, dates of birth, gender, class, passport photos where the school uploads them.
• Academic records: scores, grades, report card comments, attendance.
• Fee records: invoices, payments, receipts, outstanding balances.
• Parent accounts: names, phone numbers, and which children they are linked to.
• Message logs: the SMS messages the school sends and their delivery status.

Access is strictly role-based. Teachers see only their own classes. Accountants see fees, not results. Parents see only their own children: their balance, their published results, and their attendance. Results are never visible to parents until the school publishes them. Each school's data is isolated from every other school on the platform.

Most records on SchoolNest concern children, entered by their school. The school is the data controller: it decides what is recorded and who is authorised. SchoolNest is the data processor and acts only on the school's instructions. We do not contact students, profile them, or use their records for anything except operating the service for their school. Parents with questions about their child's records should contact the school first, since the school manages them.

• Records are stored in a managed, professionally secured database hosted in the European Union, encrypted at rest and in transit.
• The platform is served over HTTPS everywhere; nothing travels unencrypted.
• Every account requires a password; temporary passwords must be changed at first sign-in.
• Encrypted backups run nightly and are stored separately from the live database.

We share the minimum needed for each service to do its job:

• Paystack processes online fee payments. Card details go to Paystack directly and never touch SchoolNest.
• The school's own SMS provider (for example Termii) receives the phone number and message text for each SMS the school sends.
• Our email delivery provider sends transactional emails, such as invites and password resets.
• Our hosting and database providers store and serve the platform as described in section 5, under contracts that restrict them to doing exactly that.

SchoolNest processes personal data in line with the Nigeria Data Protection Act 2023 and its General Application and Implementation Directive 2025. Each subscribing school is the data controller of its student, parent, and staff data; SchoolNest is the data processor. A Data Processing Agreement governs this relationship and is available to any school on request.

Data is kept while the school's subscription is active. If a school leaves, its data is kept for 90 days (so the school can return or still export its data), then deleted. A school can download a full export of everything it owns from its Settings page at any time, and can request earlier deletion at any time.

Schools can request access, export, correction, or deletion of their data. Parents and staff should direct requests about their records to their school, which controls them; we support the school in fulfilling every such request. For anything else, message us on WhatsApp at 0906 532 8108 or email [email protected].

See also our Terms of Service.