Legal

Privacy Policy

Last updated September 2026

1. What this policy covers

This policy describes how Schoolum collects, uses and protects information when a school, its staff, students and parents use the Schoolum platform ("the Service"). It applies to data submitted directly to us and data generated through normal use of the Service.

2. Information we collect

We collect information in three ways:

  • Account information — names, email addresses and roles for staff, parent and student accounts a school creates.
  • School records — academic, attendance, financial, and communication data a school enters to run its operations, including CBT exam attempts and results.
  • Usage data — log and device information collected automatically to keep the Service secure and reliable.

3. Who owns school data

Each school owns the data it enters into the Service. Schoolum is multi-tenant by design: one school's records are never visible to another school, and access within a school is controlled by the roles and permissions that school's administrators configure.

4. How we use information

We use collected information to:

  • Provide, maintain and secure the Service for the school that submitted it.
  • Communicate with account holders about their account, billing, and service updates.
  • Where a school enables it, power AI-assisted features — always reviewed by a human before anything is finalized.
  • Improve the reliability and security of the platform.

5. Data sharing

We do not sell school or student data. Information is shared only with service providers who help us operate the platform (such as payment processors for fee collection, strictly limited to what's needed to process a payment), or when required by law.

6. Data retention

School data is retained for as long as a school's account is active, and for a reasonable period afterward to allow for account recovery, unless a school requests earlier deletion or applicable law requires a different retention period.

7. Your rights

Depending on your role and location, you may have rights to access, correct, or request deletion of your personal information. School administrators can manage most of this directly from their dashboard; other requests can be made through our Contact page.

8. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the date at the top of this page.

9. Contact us

Questions about this policy can be sent through our Contact page.