Your privacy matters

Privacy Policy

Learn how SchoolPilot handles personal information and the steps we take to help protect the information entrusted to our platform.

Last updated: 16 October 2026

Our commitment

We aim to handle personal information responsibly, limit access to authorised users, and support schools in managing their records appropriately.

This policy is intended to describe SchoolPilot's general privacy practices. It should be reviewed and adapted to reflect the platform's actual technical configuration, service providers, contracts, and data handling procedures before publication.

1. Introduction

Welcome to SchoolPilot, a school management platform designed to help schools manage their academic and administrative activities more efficiently.

This Privacy Policy explains how SchoolPilot collects, uses, stores, protects, and shares personal information when you access our platform, website, and related services.

By using SchoolPilot, you acknowledge that your information may be processed as described in this policy. Where consent is required by applicable law, we will obtain it through the appropriate process.

2. Who Is Responsible for Your Data?

SchoolPilot provides technology that schools can use to manage students, staff, parents, academic records, attendance, assignments, fees, and other school operations.

Depending on the information and the circumstances, a school may be the data controller responsible for deciding why and how student information is processed, while SchoolPilot may process that information on the school's behalf.

For information collected directly through SchoolPilot's own website, accounts, and service administration, SchoolPilot may have separate responsibilities as a data controller.

3. Information We Collect

Depending on how the platform is used, information may include:

  • Account information: Names, email addresses, usernames, roles, and authentication-related information.
  • School information: School name, address, contact information, academic sessions, terms, and classes.
  • Student and guardian information: Student names, admission details, class information, parent or guardian details, and other information entered by an authorised school.
  • Academic information: Attendance, assignments, submissions, assessments, examination scores, results, and teacher comments.
  • Financial information: School fee records, payment status, transaction references, and subscription records. Payment card details may be handled by the relevant payment provider rather than stored directly by SchoolPilot.
  • Technical information: Device, browser, log, security, and usage information generated when the platform is accessed.
  • Support communications: Information you provide when requesting assistance or reporting a problem.

Schools and authorised users are responsible for ensuring that information they upload is accurate, appropriate, and collected in accordance with applicable law.

4. Children's and Students' Information

SchoolPilot may process information about children and students as part of providing school management services. We recognise that this information requires particular care.

Schools using the platform should ensure they have the necessary authority, notices, permissions, and lawful basis to provide student information to SchoolPilot.

Access to student records should be limited to authorised users, according to their roles and legitimate school responsibilities. Parents and guardians should use the access provided to them by the relevant school.

SchoolPilot is not intended to encourage children to submit unnecessary personal information directly through public-facing services.

5. How We Use Personal Information

Information may be used to:

  • Provide and operate the SchoolPilot platform.
  • Create and administer school and user accounts.
  • Manage student records, attendance, assignments, and results.
  • Support school fee records and subscription administration.
  • Authenticate users and enforce role-based access.
  • Maintain platform security and investigate suspected misuse.
  • Respond to support requests and service-related enquiries.
  • Improve reliability, functionality, and user experience.
  • Meet applicable legal and regulatory obligations.

We do not intend to use student records for unrelated purposes incompatible with the purpose for which the information was collected.

6. Legal Basis for Processing

Where required by applicable data protection law, personal information will be processed on an appropriate lawful basis. This may include consent, performance of a contract, compliance with a legal obligation, protection of vital interests, performance of a public task, or legitimate interests where permitted by law.

The appropriate basis depends on the type of information, the purpose of processing, and whether SchoolPilot or a school is responsible for the relevant processing activity.

7. When We Share Information

Information may be shared when necessary with:

  • Authorised school administrators, teachers, parents, students, and other permitted users.
  • Technology providers that help host, maintain, secure, or operate the platform.
  • Payment providers involved in processing relevant transactions.
  • Professional advisers or public authorities where legally required or otherwise permitted by law.

Service providers should receive only the information reasonably necessary for their assigned functions and should be subject to appropriate confidentiality and data protection obligations.

We do not intend to sell students' personal information to third parties.

8. International Data Transfers

Some service providers may process or store information outside Nigeria. Where personal information is transferred internationally, we will take steps required by applicable law to ensure that the transfer has an appropriate legal basis and safeguards.

The locations used for hosting and processing depend on the infrastructure and service providers selected for the platform.

9. Data Security

SchoolPilot is intended to use appropriate technical and organisational measures to protect information against unauthorised access, loss, misuse, alteration, or disclosure.

Such measures may include access controls, authentication, secure connections, password protection, and monitoring for suspicious activity.

No internet-based service can guarantee absolute security. Schools and users should also protect their login credentials, restrict account access, and promptly report suspected security incidents.

10. Data Retention and Deletion

Personal information should be retained only for as long as necessary for the purposes for which it was collected, subject to applicable legal, contractual, accounting, and recordkeeping requirements.

School records may be retained according to the school's instructions and its legal obligations. When information is no longer required, it should be securely deleted or anonymised where appropriate and technically feasible.

Some information may need to be retained temporarily in backups, security logs, or records required by law.

11. Your Privacy Rights

Subject to applicable law and any relevant limitations, individuals may have the right to:

  • Request access to their personal information.
  • Request correction of inaccurate or incomplete information.
  • Request deletion of information where legally applicable.
  • Object to or request restriction of certain processing.
  • Withdraw consent where processing is based on consent.
  • Request a copy of eligible information in a portable format where the law provides that right.
  • Raise a complaint with the relevant data protection authority.

Requests relating to student records may need to be directed through the relevant school, particularly where the school controls those records. We may need to verify identity and authority before responding.

To make a privacy request, use the contact information provided in the SchoolPilot website footer.

12. Cookies and Technical Data

SchoolPilot may use cookies or similar technologies where necessary to maintain sessions, support authentication, improve security, or remember relevant preferences.

If optional analytics or advertising technologies are introduced, they should be implemented with the notices, consent mechanisms, and controls required by applicable law.

You can also manage cookies through your browser settings, although disabling essential cookies may affect platform functionality.

13. Public School Websites

SchoolPilot may allow schools to publish public-facing websites containing information such as school descriptions, announcements, admissions information, and school contact details.

Schools are responsible for ensuring that information published publicly is authorised for disclosure and that personal information, particularly information about children, is not published inappropriately.

Publicly available information may be viewed, copied, or shared by visitors. Schools should carefully review content before publishing it.

14. Third-Party Services and Links

The platform may rely on third-party services or contain links to external websites. Those services may have their own privacy policies and practices.

We encourage users to review the relevant policies before providing personal information to third-party services. SchoolPilot is not responsible for external websites that it does not operate.

15. Changes to This Policy

We may update this Privacy Policy as the platform, our practices, or applicable legal requirements change.

The latest version will be published on this page with an updated revision date. Where required by law, we will provide additional notice of material changes.

If you have a privacy question or want to exercise a privacy right, please use the contact details in the SchoolPilot website footer. Requests involving records managed by a school may need to be handled with that school.