Privacy Policy

We collect student data (name, admission number, grades, attendance, guardian contacts), staff data (name, email, role), and financial data (M-Pesa transactions, invoices).

Data is used for school management: academic records, fee processing, SMS notifications, report cards, and parent portal access. We never sell data or use it for advertising.

Passwords are bcrypt-hashed. HTTPS/TLS 1.3 for transit. Role-based access control. Parent authentication with rate limiting. Audit logging. Hosted on Vercel (SOC 2 Type II).

Smart report comments and performance analytics use anonymized data. All generated content is reviewed by a human before publishing.

Active student data retained while enrolled. Alumni records 7 years (KNEC). Financial records 7 years (KRA). Biometric templates deleted when student leaves.

Under Kenya Data Protection Act 2019: access, correct, delete, object, withdraw consent. Contact: privacy@skulhub.co.ke