Privacy Policy

1. Introduction

A+ Child Technologies Ltd. ("A+ Child", "we", "us", or "our") is committed to protecting the privacy of the schools, staff, parents, and students who use our platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights in relation to it.

By using A+ Child, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Who We Are

A+ Child Technologies Ltd. is the data controller for personal data collected directly from users. Where we process data on behalf of a school, the school is the data controller and we act as a data processor under a Data Processing Agreement (DPA).

• Company name: A+ Child Technologies Ltd.
• Email: privacy@apluschild.com
• Address: Lagos, Nigeria

3. Data We Collect

3.1 School & Admin Data

• School name, address, and contact details
• Administrator name, email address, and phone number
• Billing information (processed securely via payment providers)
• School branding assets (logo, colours)

3.2 Staff Data

• Full name, email, phone number, and role
• Professional qualifications and subject assignments
• Leave records, appraisal data, and payroll information
• Login credentials (passwords are hashed and never stored in plain text)

3.3 Student Data

• Full name, date of birth, gender, and class
• Academic records — grades, exam results, attendance
• Health and medical information (where provided by the school)
• Disciplinary records and behavioural notes
• Parent/guardian contact information

3.4 Parent & Guardian Data

• Full name, email address, and phone number
• Relationship to student and communication preferences
• Fee payment history

3.5 Usage Data

• IP address, browser type, device type, and operating system
• Pages visited, features used, and time spent on the platform
• Error logs and crash reports

4. How We Use Your Data

• To provide, operate, and improve the A+ Child platform
• To process fee payments and issue receipts
• To send SMS and email notifications on behalf of the school
• To generate academic reports and analytics
• To provide customer support and respond to enquiries
• To comply with legal obligations, including NDPR
• To detect and prevent fraud, abuse, and security incidents

We do not sell your data to third parties. We do not use student data for advertising. We do not use your data for any purpose not described in this policy without your explicit consent.

5. Legal Basis for Processing

We process personal data on the following legal bases under Nigeria's Data Protection Regulation (NDPR) and applicable law:

• Contract: to fulfil our service agreement with your school
• Legitimate interest: to operate, secure, and improve the platform
• Legal obligation: to comply with applicable laws and regulations
• Consent: for optional features such as marketing communications

6. Data Sharing

We may share your data with trusted third-party service providers who assist us in operating the platform, including:

• Cloud hosting providers (data stored in Nigeria or the EU)
• SMS gateway providers (for parent and student alerts)
• Payment processors (for fee collection)
• Analytics tools (anonymised usage data only)

All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.

7. Data Retention

We retain personal data for as long as your school's account is active. Upon cancellation, data is retained for 30 days to allow export, then securely deleted. Backup copies are purged within 90 days. Some data may be retained longer where required by law.

8. Data Security

• All data encrypted at rest (AES-256) and in transit (TLS 1.3)
• Automated daily backups with 30-day retention
• Role-based access controls (RBAC) — staff only see what they need
• Regular penetration testing and security audits
• Two-factor authentication (2FA) available for all accounts

9. Your Rights

Under the NDPR and applicable law, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data (subject to legal obligations)
• Portability — receive your data in a portable format
• Objection — object to certain types of processing
• Withdrawal of consent — where processing is based on consent

To exercise any of these rights, email us at privacy@apluschild.com. We will respond within 30 days.

10. Children's Privacy

A+ Child processes student data, including data relating to minors, solely on behalf of and under the instruction of the school (acting as data controller). We do not knowingly collect data from minors directly. Parents wishing to access or delete their child's data should contact their school administrator.

11. Cookies

We use cookies to maintain your session and improve platform performance. See our Cookie Policy for full details.

12. Changes to This Policy

We may update this policy from time to time. We will notify school administrators of material changes by email at least 14 days before they take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

13. Contact Us

For any privacy-related questions or requests, contact our Data Protection Officer at privacy@apluschild.com or write to us at A+ Child Technologies Ltd., Lagos, Nigeria.