Effective Date: 1/8/2026
Last Updated: 5/9/2026

SchoolFlow ERP ("SchoolFlow", "we", "us" or "our") respects your privacy and is committed to protecting personal information.

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you visit https://schoolflow.ng, communicate with us, create an account or use SchoolFlow ERP.

SchoolFlow is designed for schools in Nigeria, Africa and other countries. Accordingly, different data-protection laws may apply depending on where you or your organisation is located.

1. Who We Are

SchoolFlow ERP is operated by:

RUSHDAH INNOVATIVE RESOURCE LTD.

Registered Address:

Office 237 18 Young St, Unit Lge,
Edinburgh, Scotland,
United Kingdom, EH2 4JB

Privacy Contact:

support@schoolflow.ng

2. Information We Collect

Depending on how you use SchoolFlow, we may collect:

Account Information

• Name
• Email address
• Telephone number
• Organisation/school name
• Job title or role
• Login credentials
• Account preferences

School Information

A subscribing school may submit information including:

• Student names
• Student identification numbers
• Date of birth
• Class information
• Academic records
• Continuous assessment results
• Examination results
• Report card information
• Student activities
• Homework information
• Parent/guardian information
• Teacher and staff information
• Fee records
• Payment history
• Outstanding balances
• Invoice information
• Other information configured by the school

Technical Information

We may collect:

• IP address
• Browser type
• Device information
• Operating system
• Login activity
• Security logs
• Usage information
• Cookies and similar technologies

Communications

When you contact us, we may retain:

• Your name
• Email address
• Telephone number
• Message content
• Attachments
• Support history

3. Children's Information

SchoolFlow is an education technology platform and may process information relating to children on behalf of schools.

In general, schools determine the purposes for which student information is collected and used. The school is therefore responsible for ensuring that it has an appropriate legal basis and authority for processing student information.

SchoolFlow processes such information to provide the services requested by the school and in accordance with the school's instructions and applicable law.

We do not sell children's personal information.

We do not use children's personal information for behavioural advertising.

Where applicable law provides additional protections for children's information, we will implement appropriate measures required by that law.

4. How We Use Personal Information

We may use personal information to:

• provide SchoolFlow services;
• create and administer accounts;
• authenticate users;
• provide customer support;
• process subscriptions and payments;
• communicate service information;
• maintain system security;
• prevent fraud and abuse;
• monitor service performance;
• maintain backups;
• troubleshoot technical problems;
• comply with legal obligations;
• enforce our agreements;
• improve our services;
• conduct internal analytics; and
• respond to lawful requests.

5. Legal Bases

Depending on the circumstances, processing may be based on:

• performance of a contract;
• compliance with a legal obligation;
• legitimate interests;
• consent;
• protection of vital interests; or
• another lawful basis recognised by applicable law.

Where consent is relied upon, you may withdraw consent where legally applicable.

6. School Customer Data

Where a school uploads information about students, parents, teachers or other individuals to SchoolFlow, the school generally determines the purposes of processing.

SchoolFlow processes such information primarily to provide the contracted service.

The SchoolFlow Data Processing Agreement contains additional provisions governing this processing.

7. Sharing Information

We may share information with:

• cloud hosting providers;
• database and infrastructure providers;
• payment processors;
• email and communication providers;
• customer-support providers;
• analytics providers;
• security providers;
• professional advisers;
• regulators and government authorities where legally required; and
• other service providers necessary to operate SchoolFlow.

We require appropriate contractual and security protections from relevant service providers where required by applicable law.

8. International Transfers

Because SchoolFlow is intended for global use, information may be processed or stored in countries other than the country where the school or user is located.

Where applicable, we will implement appropriate safeguards for international transfers in accordance with applicable data-protection law.

9. Data Security

We use reasonable technical and organisational measures designed to protect personal information.

These measures may include:

• access controls;
• authentication mechanisms;
• encryption where appropriate;
• secure transmission;
• logging and monitoring;
• backups;
• vulnerability management;
• restricted administrative access; and
• incident-response procedures.

No internet-based system can guarantee absolute security.

10. Data Retention

We retain information only for as long as reasonably necessary for the purposes for which it was collected, contractual requirements, legal obligations, legitimate business requirements and dispute resolution.

Customer Data is generally retained according to the customer's subscription and our Data Retention and Deletion Policy.

11. Your Rights

Depending on applicable law, you may have rights including:

• right to be informed;
• right to access;
• right to correction;
• right to deletion;
• right to restrict processing;
• right to object;
• right to data portability;
• right to withdraw consent;
• right to lodge a complaint with a supervisory authority; and
• rights concerning automated decision-making where applicable.

The NDPC identifies rights including access, rectification, objection, restriction, portability and erasure under the Nigeria Data Protection Act.

12. Data Subject Requests

To exercise a privacy right, contact:

support@schoolflow.ng

We may need to verify your identity before processing a request.

Where the request relates to information controlled by a school, we may direct the request to the relevant school because the school may be the appropriate data controller.

13. Cookies

SchoolFlow uses cookies and similar technologies.

Cookies may be used for:

• essential functionality;
• authentication;
• security;
• preferences;
• analytics; and
• website performance.

Non-essential cookies will be used in accordance with applicable law and your preferences.

See our separate Cookie Policy.

14. Marketing Communications

Where permitted by law, we may send information about SchoolFlow products, services and updates.

You may unsubscribe from marketing communications at any time.

Transactional and service-related communications may still be sent where necessary.

15. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices of third-party websites.

You should review their privacy policies before providing personal information.

16. Data Breaches

If we become aware of a personal-data breach affecting information we process, we will assess the incident and take appropriate steps in accordance with applicable law and our contractual obligations.

Where notification is legally required, we will make the required notification within the applicable timeframe.

17. Data Protection Contact

For privacy and data-protection enquiries:

[DATA PROTECTION CONTACT/DPO]

Email: support@schoolflow.ng

Address:

Office 237 18 Young St, Unit Lge,
Edinburgh, Scotland,
United Kingdom, EH2 4JB

18. Complaints

If you believe your privacy rights have been violated, contact us first.

You may also have the right to complain to the relevant data-protection supervisory authority.

For Nigeria, the relevant authority is the Nigeria Data Protection Commission (NDPC).

19. Changes

We may update this Privacy Policy periodically.

The latest version will be published on this page with its effective date.

20. Contact

Rushdah Innovative Resource Ltd.

support@schoolflow.ng

Office 237 18 Young St, Unit Lge,
Edinburgh, Scotland,
United Kingdom, EH2 4JB

https://schoolflow.ng