Effective Date: 1/8/2026
Last Updated: 5/9/2026

1. Introduction

This Acceptable Use Policy (“AUP”) governs the acceptable use of SchoolFlow ERP (“SchoolFlow”, “we”, “us” or “our”) and applies to all customers, schools, administrators, teachers, staff, students and other authorised users accessing or using the SchoolFlow platform.

By using SchoolFlow, you agree to comply with this Policy, our Terms of Service and all applicable laws and regulations.

2. Permitted Use

SchoolFlow may be used for legitimate educational, administrative, academic, financial and operational purposes, including:

• Managing student and teacher records;
• Managing classes and academic sessions;
• Recording continuous assessment and examination results;
• Generating report cards;
• Managing school fees and payments;
• Managing school accounting information;
• Tracking student performance;
• Managing school activities;
• Generating reports;
• Importing and exporting authorised school data; and
• Other legitimate functions provided through the SchoolFlow platform.

3. Prohibited Activities

You must not use SchoolFlow to:

3.1 Unlawful Activities

• Violate any applicable law or regulation;
• Facilitate criminal activity;
• Process data unlawfully;
• Infringe another person's legal rights; or
• Use SchoolFlow for fraudulent purposes.

3.2 Unauthorised Access

You must not:

• Attempt to access another school's account;
• Access another user's account without permission;
• Circumvent authentication or security controls;
• Attempt to obtain passwords or authentication credentials;
• Probe or scan SchoolFlow infrastructure without written authorisation; or
• Attempt to gain access to restricted administrative functions.

3.3 Malware and Security Abuse

You must not introduce or transmit:

• Viruses;
• Malware;
• Ransomware;
• Trojans;
• Worms;
• Malicious scripts;
• Destructive code; or
• Any other technology designed to disrupt or compromise SchoolFlow.

3.4 Abuse of the Platform

You must not intentionally:

• Overload SchoolFlow infrastructure;
• Interfere with service availability;
• Conduct denial-of-service attacks;
• Circumvent usage restrictions;
• Use automated systems in a manner that materially degrades service;
• Attempt to bypass security mechanisms; or
• Conduct unauthorised penetration testing.

3.5 Unauthorised Data Access

Customers must ensure that users only access information appropriate to their role.

For example, a teacher should not be given access to financial information unless the school has authorised such access.

4. User Credentials

Users are responsible for maintaining the confidentiality of their login credentials.

Accounts must not be knowingly shared where doing so compromises security or accountability.

School administrators are responsible for promptly disabling accounts belonging to users who:

• Leave the school;
• Change roles;
• Are suspended; or
• No longer require access.

5. Student and Children's Data

SchoolFlow may process information relating to students, including information concerning minors.

Customers are responsible for ensuring that they have an appropriate legal basis and authority to provide student information to SchoolFlow and to instruct SchoolFlow to process that information.

Customers must take particular care when entering sensitive or confidential information.

6. Security Testing

Security testing against SchoolFlow infrastructure is prohibited unless expressly authorised by SchoolFlow in writing.

This does not prevent customers from conducting reasonable security assessments of their own data, configurations or user accounts.

7. Intellectual Property

Users must not use SchoolFlow to store or distribute material that infringes intellectual-property rights belonging to another person or organisation.

8. Enforcement

Where we reasonably believe that this Policy has been violated, SchoolFlow may:

• Investigate the activity;
• Request additional information;
• Restrict access;
• Temporarily suspend an account;
• Remove unlawful or harmful content where appropriate;
• Require corrective action; or
• Terminate the account where permitted under the Terms of Service.

Where reasonably possible, SchoolFlow will consider the seriousness of the violation and provide an opportunity to remedy the issue.

9. Reporting Abuse

Suspected security incidents or misuse of SchoolFlow should be reported to:

Security/Support Email: support@schoolflow.ng

10. Changes

We may update this Acceptable Use Policy from time to time. The updated version will be published on the SchoolFlow website.