Privacy Policy

Last updated: 19 August 2026

This is a draft policy. Replace the placeholder contact details and legal entity name below before publishing, and have it reviewed against Nigeria's Data Protection Act 2023 (NDPA) requirements for your specific setup.

1. Who this policy covers

This Privacy Policy explains how Skrunt ("we," "us," "our") collects, uses, and protects information when schools, school administrators, teachers, parents, and students use the Skrunt platform to manage academic performance tracking.

2. Information we collect

We collect different information depending on your role:

School applicants and administrators: school name, address, phone number, website, administrator name and email address.
Teachers: name, email address, and class/subject assignments provided by their school administrator.
Students: name, class, category (where applicable), and academic scores, entered by school staff. We do not collect information directly from students.
Parents/guardians: contact information (phone or email) provided by the school for the purpose of linking them to their child's academic records.
Account and usage data: login timestamps, and technical information such as browser type, needed to operate and secure the platform.

3. Children's information

Skrunt is used by schools to record academic performance data about students, some of whom are minors. Schools act as the party responsible for collecting and entering this information, and are responsible for obtaining any consent from parents or guardians required by their own enrollment or data protection processes before entering a student's information into Skrunt. We process this information solely on the school's behalf and do not use student data for any purpose other than providing the platform's academic tracking features to that school.

4. How we use information

To create and manage accounts for school administrators, teachers, parents, and students/parents.
To review and process school applications, including approving or rejecting them.
To record and display academic scores and performance data to the appropriate school staff and linked parents.
To send account-related emails, such as application status updates, account setup links, and welcome messages.
To maintain the security and integrity of the platform.

5. Who we share information with

We do not sell personal information. We share information only with the service providers that help us operate Skrunt, including:

Google Firebase (Google Cloud): for authentication, database storage (Firestore), and hosting.
Resend: for delivering transactional emails such as application confirmations and account setup links.

These providers process information on our behalf and are not permitted to use it for their own purposes.

6. Data retention

We retain school, staff, and student records for as long as a school's account remains active on Skrunt, and for a reasonable period afterward to allow for account recovery or as required by law. A school administrator may request deletion of their school's data by contacting us using the details below.

7. Data security

Access to student and academic records is restricted by role: teachers can only access classes and subjects they are assigned to, and parents can only access records for their own linked child. Passwords are never stored in plain text and are handled entirely by Firebase Authentication.

8. Your rights

Depending on your role and applicable law, you may have the right to access, correct, or request deletion of your information. School administrators should contact us directly; teachers, parents, and students should generally contact their school administrator first, since schools control the records entered about their students.

9. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above.

10. Contact us

Questions about this policy can be sent to [privacy@schoolview.example].