Privacy Policy

1. Who we are

SchoolFlow is a school management platform built for Zambian schools. We are operated by SchoolFlow (Zambia). Our contact email is support@schoolflowzm.com.

2. What data we collect

We collect the following types of data when you use SchoolFlow:

• Account data: your name, email address, phone number, and school details when you register.
• School data: student records, staff records, attendance, fees, results, and report cards that you enter into the platform.
• Payment data: transaction references and amounts processed via Lenco. We do not store card numbers or mobile money PINs.
• Usage data: standard server logs including IP addresses and page visits, used only for security and debugging.

3. How we use your data

• To provide and operate the SchoolFlow platform.
• To send transactional emails (account verification, payment receipts, subscription reminders).
• To generate report cards and fee receipts on your behalf.
• To send service announcements and product updates (you may opt out at any time).

We do not sell your data to third parties. We do not use your school's student data for advertising.

4. Data storage and security

Your data is stored on Supabase (PostgreSQL), hosted on secure cloud infrastructure. All data is encrypted at rest and in transit (HTTPS/TLS). We use role-based access controls so staff members only see data relevant to their role.

5. Third-party services

SchoolFlow uses the following third-party services:

• Supabase — database and authentication
• Lenco — payment processing (card and mobile money)
• Resend — transactional email delivery
• Vercel — web hosting

Each provider operates under their own privacy policy. We only share the minimum data necessary for these services to function.

6. Student data

Student records (names, results, attendance, fees) belong to your school. We act as a data processor on your behalf. You are responsible for obtaining appropriate consent from parents or guardians as required by Zambian law before entering student data into SchoolFlow.

7. Data retention

We retain your school's data for as long as your account is active. If you cancel your subscription, your data is retained for 90 days before deletion, giving you time to export it. You may request immediate deletion by emailing support@schoolflowzm.com.

8. Your rights

You have the right to access, correct, or delete your personal data at any time. Contact us at support@schoolflowzm.com and we will respond within 5 business days.

9. Changes to this policy

We may update this policy from time to time. We will notify you by email if we make significant changes. Continued use of SchoolFlow after changes constitutes acceptance of the updated policy.

10. Contact

Questions about this policy? Email us at support@schoolflowzm.com.