Privacy Policy

Eduysle ("we", "our", "us") is committed to protecting the privacy and personal data of all users, including students, parents, teachers, and school administrators. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in line with the Nigeria Data Protection Act (NDPA) 2023 and its General Application and Implementation Directive (GAID) 2025, and other applicable laws.

1. Information We Collect

We collect the following types of information:

• Personal Identification Information: Name, address, email address, phone number, date of birth, government-issued ID numbers
• Educational Information: Student records, grades, attendance, exam results, class schedules
• Parent/Guardian Information: Contact details, relationship to student, payment information
• Technical Information: IP address, browser type, device information, usage data
• Financial Information: Payment details, transaction history (processed through secure third-party payment gateways)
• Exam Webcam Verification Images: For exams where a school has enabled webcam identity verification, periodic photos of the student taken during the exam session, plus photos triggered by suspicious activity (e.g. leaving the exam screen). This feature is opt-in — each school decides whether to enable it, and for which exams — and a student may decline the webcam without being prevented from taking the exam.

2. How We Collect Information

We collect information through:

• Direct registration and account creation
• School enrollment processes
• Usage of our platform and services
• Communication with our support team
• Cookies and similar tracking technologies

3. Legal Basis for Processing (NDPA Compliance)

Under Section 25 of the Nigeria Data Protection Act (NDPA) 2023, we process your personal data on one or more of the following lawful bases:

• Consent: You have given clear consent for us to process your personal data for specific purposes
• Contract: Processing is necessary for the performance of a contract with you (e.g., providing educational services)
• Legal Obligation: Processing is necessary for compliance with a legal obligation to which we are subject
• Legitimate Interests: Processing is necessary for our legitimate interests (e.g., improving our services) unless overridden by your rights

4. How We Use Your Information

We use your information to:

• Provide, operate, and maintain our educational platform
• Process school fees and other financial transactions
• Generate academic reports and transcripts
• Communicate with parents about student progress and school events
• Send notifications about exams, results, and fee deadlines
• Improve our services and user experience
• Comply with legal and regulatory requirements

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information with:

• Schools and Educational Institutions: To facilitate educational services and communication
• Service Providers: Third-party vendors who assist with payment processing, data hosting, and customer support
• Legal Authorities: When required by law or to protect our legal rights

6. International Data Transfers

Our infrastructure providers (including Supabase and Vercel) host data in data centres that may be located outside Nigeria. Where personal data is transferred outside Nigeria, we rely on the safeguards permitted under Section 41 of the NDPA — transfer to a jurisdiction with adequate protection, or appropriate contractual safeguards such as the Standard Contractual Clauses incorporated into our providers’ data processing agreements. For data subjects in the EU/EEA, equivalent safeguards under Chapter V of the GDPR (adequacy decisions or Standard Contractual Clauses) apply.

7. Data Retention

• Trial Accounts: If you do not subscribe after your free trial ends, your data is retained for 90 days, after which it is permanently deleted. We email you before deletion so you have time to subscribe and keep your data.
• Active Subscribers: Your data is retained for the duration of your active subscription. You may request deletion at any time.
• Cancelled or Expired Subscriptions: If your paid subscription ends (whether by cancellation or non-renewal), your data is retained for 12 months to allow for reinstatement — long enough to cover the school year, so a school that skips a term can return without losing anything. We email you before deletion. After this period, all data is permanently deleted.
• Deletion Requests: You may request immediate deletion of your account and all associated data by contacting hello@eduysle.com. We will process such requests within 30 days.
• Exam Webcam Verification Images: Retained for 30–90 days after capture (60 days by default; each school may configure its own retention window within that range), then permanently deleted automatically.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These include encryption, access controls, regular security audits, and staff training.

9. Children's Privacy

Our platform processes the personal data of students, who are typically minors (under 18 under Nigerian law). We act as a data processor for this information on behalf of the school, which is the data controller. Schools are responsible for establishing the lawful basis for processing student data — including obtaining parental or guardian consent where required — before providing it to Eduysle. We do not knowingly collect personal data directly from children without the school's authority. Parents should contact their child's school directly to access, correct, or delete student records. Exam webcam verification images are a biometric-adjacent form of student data and are treated with the same standard: the feature is opt-in per school, a student is shown a notice and may decline the webcam without being blocked from taking the exam, and the school (as data controller) remains responsible for its own parental or guardian consent obligations before enabling it — our in-app notice to the student is an additional layer of transparency, not a substitute for the school's own consent process.

10. Your Rights Under the NDPA

As a data subject under the Nigeria Data Protection Act (NDPA) 2023, you have the following rights:

• Right to be informed about how your data is used
• Right of access to your personal data
• Right to rectification of inaccurate data
• Right to erasure (right to be forgotten)
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Rights related to automated decision-making including profiling

11. How to Exercise Your Rights

To exercise any of your data protection rights, please contact us using the information below. We will respond to your request within the timeframe required by the NDPA (generally within one month).

12. Complaints to NDPC

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

13. Territorial Scope and EU/EEA Visitors

Eduysle is intended for schools and users in Nigeria and other parts of Africa; we do not actively target the European Union or European Economic Area (EU/EEA). Where we do process the personal data of individuals located in the EU/EEA, we handle it in line with the EU General Data Protection Regulation (GDPR): our lawful bases correspond to those in Section 3 (GDPR Article 6), you have the data-subject rights set out above, international transfers are handled as described in Section 6, and you may lodge a complaint with your local data protection supervisory authority.

14. Data Protection Contact

For any questions about this policy, or to exercise your data protection rights, contact our data protection team at hello@eduysle.com. If you are a parent or student, please also contact your school, which is the controller of student records and can action requests on your behalf.

Contact Us

Email: hello@eduysle.com

Phone: +234 706 172 6605

Address: Trinity Mall, 79 Obafemi Awolowo Way, Ikeja, Lagos State 100271, Nigeria