Privacy Policy

Last updated: 11 July 2026

This Privacy Policy explains how Distinct Model Schools ("we", "us", "the School") collects, uses, stores, and protects personal data through our website, staff/student/parent web portal, and mobile app (collectively, "the Services").

1. Who this applies to

The Services are used by students, parents/guardians, teachers, and other school staff. Some data (e.g. medical information, academic records) is collected on behalf of a minor by their school or parent/guardian, not directly from the child.

2. Data we collect

Category	Examples	Why we collect it
Account & identity	Username, real name, email, role	Sign-in and access control
Contact & demographic	Address, city, state of origin, nationality, phone	School records, emergency contact
Health	Blood group, genotype, medical history/notes (students)	Student welfare and emergency response
Academic	Grades, attendance, assignments, timetable, discipline records	Delivering education and reporting to parents
Financial	Invoices, payments, wallet balance, payroll (staff)	Fee collection, payroll, refunds
Communications	Messages sent via in-app chat, webmail, announcements	School-to-parent/student/staff communication
Device & usage	IP address, session tokens (mobile app)	Security, keeping you signed in

3. How we use it

• Operating the student information system, fee collection, and payroll.
• Communicating announcements, grades, attendance, and billing to the right audience.
• Securing accounts (password hashing, session tokens, CSRF protection).
• Legal/statutory record-keeping (financial and academic records).

We do not sell personal data, and we do not use it for behavioral advertising.

4. Who we share it with

Payment data is shared with our payment processor (United Bank for Africa) solely to process bank transfers and reconcile payments. We do not share personal data with any other third party except where required by law.

5. Your rights

• Access: view your data any time in your Profile page or the mobile app.
• Correction: request corrections through your school administrator.
• Deletion: delete your account and personal data at any time from the mobile app's Profile → Delete Account, from the web deletion page (works even if you've uninstalled the app), or by contacting the school office. Academic and financial records subject to statutory retention requirements are anonymized, not erased outright, so the school can meet its record-keeping obligations without retaining anything that identifies you.

6. Data retention

Account data is retained while your account is active. Upon deletion, identifying fields are anonymized immediately; academic and financial records are retained in anonymized form for statutory record-keeping periods, after which they are purged.

7. Security

Passwords are hashed (bcrypt), all traffic is served over HTTPS, and mobile app credentials are stored in the device's secure keychain/keystore rather than plain storage.

8. Children's data

Student accounts are created and managed by the School on behalf of parents/guardians. We do not knowingly allow children to self-register or manage their own data without a parent/guardian and the School's involvement.

9. Contact us

For privacy questions or data requests, contact the school office via the Contact page.