Scope
Privacy Policy
How Alpha Junior Academy collects, uses, protects, and manages information across our school management system and mobile application.
Your information matters
This policy explains what information our school system collects, why it is needed, who may receive it, and the rights available to account holders.
Data collection
Information we collect
Account & identity
Name, email, phone number, gender, date of birth, role, and profile photo/bio where provided.
Academic & welfare records
Enrolment, classroom, attendance, marks and exam results, homework, discipline and welfare records, and awards — recorded by staff as part of running the school.
Financial records
Fee invoices, payments, and balances. Payments made via bank or mobile-money paybill are processed by the relevant bank/mobile-money provider — we store the transaction record, not your card or mobile-money PIN.
Location
We use your device's location only in the moment, for a specific reason — never continuously, and never in the background.
- Transport tracking — while a school vehicle is on a live run, its driver's GPS location is shared with the relevant parents and transport staff, for safety and coordination. This stops the moment the trip ends.
- Attendance verification — when a staff member taps "Scan" to record their own attendance, we check their location once to confirm it's being recorded from school grounds.
- On-site-only actions — entering exam marks or recording a payment may require confirming you're physically at school before the action is allowed, where a school has enabled this.
- School setup — an administrator configuring the school's location boundary can use their current position to set it.
Communications
SMS and email sent through the system (fee reminders, announcements, feedback), and messages you send us directly.
Device & security
Login sessions, device/browser information, and security events (sign-ins, password changes) — kept to protect your account and detect unauthorized access. If you set up a PIN or passkey, only a secure credential is stored, never a readable copy of your biometric data (biometric matching happens on your own device).
Purpose
How we use it
Running day-to-day school operations: admissions, attendance, academics, discipline, and welfare.
Billing and recording fee payments, and sending payment/fee reminders.
Coordinating school transport and keeping parents informed of pickup/drop-off.
Sending communications you'd reasonably expect from your school (SMS, email, in-app notifications).
Keeping the system secure — detecting suspicious logins and enforcing access controls.
Meeting legal, financial, and regulatory record-keeping obligations.
We do not sell personal information, and we do not use student data for advertising.
Children
Children's data
Disclosure
Who we share it with
We share information only where it's needed to run the service:
SMS & email delivery
Our messaging provider, to deliver the messages you're sent.
Payment processing
Banks and mobile-money providers, to process the payment you initiate.
Sign-in
Google, only if you choose to sign in with a Google account.
Legal requirements
Where disclosure is required by law or to protect the safety of a student or staff member.
We never sell or rent personal information to third parties for marketing.
Retention
How long we keep it
We keep records for as long as you're active with the school, and afterwards for as long as we're legally or financially required to (academic transcripts, financial records, safeguarding records).
Staff and parent accounts can request deletion of their own personal account data at any time. Details of that process — including what's removed and what's retained for legal/safety reasons — are on our Data Deletion page.
Your rights
Your rights
Under Kenya's Data Protection Act, 2019, you have the right to:
- ✓ Know what personal data we hold about you and why.
- ✓ Ask us to correct inaccurate or incomplete data — most of your own profile fields can be edited directly in your Profile page.
- ✓ Request deletion of your personal account data, subject to our legal retention obligations.
- ✓ Object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
Protection
Security
Security controls are built into account access and system operations.
Access to the system requires a password (and, optionally, a PIN, passkey, or one-time code for sensitive actions), and staff access is limited by role — a teacher, for example, does not see finance or HR records.
Passwords are stored using industry-standard one-way hashing; we never store your password in a form we could read. Traffic between your device and our servers is encrypted.
Technology
Cookies & app storage
Updates
Changes to this policy
Have a question about your data?
If you have questions about this policy or how your information is handled, our team is here to help.