FrankdomSchoolOS Privacy Notice
1. Who is responsible
Each school that uses SchoolOS decides what personal data to enter and is responsible for it. Frankdom Hub Services Limited provides the software and handles that data on the school's instructions. We are responsible for the user accounts we create ourselves. Our data protection contact is the founder of Frankdom Hub Services Limited (RC 9643567), Ogun State, Nigeria, at hello@frankdom.net.
2. What data is held
Pupils: name, class, admission number, date of birth, attendance, fees, grades and remarks.
Parents or guardians: name, phone number and email.
Staff: name, role, email and login details.
Messages between parents and the school are also stored.
3. Why we use it and our legal basis
To run the school's records, fees, attendance, grades and parent messages, and to give support. We handle school data on the school's instructions and under our agreement with the school. The school is responsible for having a lawful basis for the pupil, parent and staff data it enters. For accounts we create ourselves, we rely on our agreement with the user.
4. Who sees it
The school's authorised users, and Frankdom staff only when needed to run or support the service. We use cloud hosting and database providers to run SchoolOS, and schools can ask us for a list of them. We do not sell personal data or use it for advertising.
SchoolOS also includes an AI lesson-planning feature. The details a teacher types into it are sent to an AI service. Teachers should not type pupils' names or other personal details into it.
5. Where it is stored
Our database is in Ireland, and some processing happens on servers in the United States. Some of our providers store or process data outside Nigeria. Where that happens, we rely on the safeguards the Nigeria Data Protection Act allows, such as contract terms with those providers. We take reasonable steps to keep each school's data separate from other schools' data.
6. How long we keep it
While the school is our customer. We return or delete a school's data within 30 days of the school leaving, and copies in backups are removed within a further 90 days.
7. Children's data
Pupils are children, so their data needs extra care. Schools should tell parents and guardians how pupil data is used and should have the permission or lawful basis they need. We use pupil data only to provide the service.
8. Your rights
Parents, pupils and staff should first ask their school. You can ask to see, correct or delete your personal data, ask us to restrict how we use it, object to how we use it, withdraw consent you have given, and ask for a copy in a portable format where that applies. Write to hello@frankdom.net. The founder reads these messages and replies within 7 days. You may also complain to the Nigeria Data Protection Commission.