Who we are
schoolhouse is an app that connects Nigerian schools with their teachers and parents. It is run by One Tari Technologies Ltd (RC 9974467) ("schoolhouse", "we", "us").
This policy explains what the schoolhouse app and website collect, why, who we share it with, how long we keep it and the choices you have. It applies to proprietors, staff, teachers and parents who use schoolhouse. We are the data controller for account information. For a school's own records (classes, results, attendance, fees), the school decides what is recorded and we process it on the school's behalf.
Questions about privacy: hello@loveschoolhouse.com. We follow the Nigeria Data Protection Act 2023 (NDPA).
The waiting list on our website
If you join the waiting list on loveschoolhouse.com we collect: whether you are a proprietor, school staff, teacher or parent; your name; your phone number; your email (if you give it); your school's name, town, state and number of pupils (if you give them); and how you found us (for example a link you clicked). We record the time you agreed to be contacted.
We use it only to contact you about joining schoolhouse and to plan which towns to open in first. Our legal basis is your consent. We do not sell it or share it with anyone except the providers that store it for us (Supabase). We keep it until you join schoolhouse or for 12 months after we open in your area, then delete it. To be removed sooner, email hello@loveschoolhouse.com.
Children
schoolhouse is for adults: proprietors, school staff and parents or guardians. Children do not have accounts and cannot sign in.
A parent adds their own child's details when joining a school, and records their consent to the school and schoolhouse using them for the purposes below. A school's staff add school records about pupils (class, results, attendance, fees). We never use children's information for advertising, and we never sell it.
What we collect
| Information | From whom | Why |
|---|---|---|
| Name, email, phone number, home address (street, city or town, LGA, state), role | Everyone | Your account, so the school knows who is joining, and to contact you |
| A photo of your face (selfie) | Everyone | So the school can check who is asking to join. The check that a face is in the photo runs on your phone; we do not create face templates or biometric identifiers. |
| Staff ID or appointment letter | Teachers and staff | So the school can confirm you work there |
| CAC number and registration documents | Proprietors | To confirm the school is a real, registered school |
| Child's name, date of birth, class, uniform photo, blood group (optional) | Parents | So the school can confirm the child is theirs and keep its pupil records |
| Results, homework, class news, notices, documents, attendance | The school and its teachers | To run the school and keep each parent informed |
| Messages, posts and comments | Everyone | So members of a school can talk to each other |
| A notification address for your phone (only if you allow notifications) | Everyone | To deliver phone notifications about new messages, notices, homework and alerts. It is forgotten when you sign out or uninstall the app |
| Invoices, bank transfer receipts you upload, payment records | Parents and the school | To record school fees and app payments |
| Bank account for withdrawals (shown to you only as the bank name and last four digits) | Proprietors and teachers who withdraw from their wallet | To pay out money you have received |
| Phone number for WhatsApp or SMS alerts | Only if you turn these on | To send copies of important alerts |
| Basic technical data: sign-in times, app version, error logs | Everyone | To keep the service secure and working |
We do not collect your location, contacts, call logs or advertising identifiers, and we do not use tracking or advertising cookies on this website.
How we use it
- To provide the app: accounts, school membership, notices, results, homework, attendance, messages and fees.
- To keep schoolhouse safe: verifying schools and members, preventing fraud, handling reports and enforcing our Terms of use and child safety standards.
- To process online payments (such as marketplace orders and gifts) and pay them out to schools and teachers.
- To send notifications you need (for example a new result, a fee reminder or a security alert).
- To translate notices into Hausa, and to prepare the optional homework teaching guide for parents, when someone asks for them.
- To meet legal obligations, such as keeping payment records.
Our legal bases under the NDPA are: performing our agreement with you, the consent you give when you join (and a parent's consent for their child's details), our legitimate interest in keeping the service secure, and legal obligations.
Who can see it
Inside your school. What you share is seen only by people with a reason to see it. For example, a child's results are seen only by that child's parent and the school's staff; the people who approve members see the photos and documents sent with a join request; a teacher sees the parents of their own classes.
Service providers who work for us under contract and only for these purposes:
- Supabase (database, file storage and sign-in hosting).
- Paystack (online payments and payouts). We never see or store full card details.
- An email provider, to send sign-in and confirmation codes.
- An AI service, to translate notices and prepare homework teaching guides. It receives only the notice or homework text (and a homework photo if the homework is a photo), never names of children or parents, and may not use it to train its models.
- Termii, to send WhatsApp or SMS copies of alerts, only for people who turn them on.
- Google Firebase Cloud Messaging and Apple Push Notification service, to deliver phone notifications (the notification's title and a short preview) to phones that allow them.
The law. We disclose information when Nigerian law requires it, or when needed to protect a child or anyone else from serious harm.
We do not sell personal information and we do not share it for advertising.
Where it is stored
Our providers may store information on servers outside Nigeria. When they do, we rely on the safeguards the NDPA requires, including contracts that protect your information to the same standard.
How long we keep it
| Information | How long |
|---|---|
| CAC documents and staff IDs | Deleted 30 days after the school or member is approved or rejected |
| Uniform photos on rejected requests | Deleted 30 days after the rejection |
| Notices and posts | Until the time the writer chose runs out, or until deleted |
| Your account and profile | While you use schoolhouse; deleted within 30 days of a deletion request |
| Payment and fee records | As long as Nigerian tax and financial law requires, then deleted |
| A school's pupil records | As long as the school keeps them; deleted when the school leaves schoolhouse or a parent's deletion request is completed, except what the law requires the school to keep |
Your rights and choices
Under the NDPA you can ask to see, correct, download or delete your information, object to how it is used, or withdraw consent. In the app:
- Correct your details in Profile and settings.
- Download your child's data from the child's page (⋮ menu).
- Ask for a copy of all your data or ask us to delete your account in Profile and settings, Security setting. See Delete your account.
- Stop WhatsApp or SMS alerts at any time in Profile and settings.
You can also email hello@loveschoolhouse.com. We reply within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
How we protect it
- All traffic is encrypted. Every table in our database has access rules so each person can reach only what their role allows.
- Withdrawals and bank changes need a money PIN and send alerts; two-step sign-in is available to everyone and required for our staff.
- On Android, screenshots are blocked on children's pages, results and join requests, and an optional app lock asks for your fingerprint or phone lock.
- Sign-in sessions are stored in the phone's secure storage and end after an hour without use.
No system is perfectly secure. If a breach puts your information at risk, we will tell you and the Nigeria Data Protection Commission as the law requires.
Changes to this policy
When we change this policy we update the date at the top. If a change is important, the app will ask you to read and accept it again.
Contact
One Tari Technologies Ltd (RC 9974467)
Email: hello@loveschoolhouse.com