Privacy Policy

1. Who we are

HRAP EDU is a school management platform operated by Cizonet Solutions Limited, a company incorporated in Nigeria. We provide software that enables schools to manage attendance, academic records, fee schedules, and parent communication.

In this agreement, "HRAP EDU", "we", or "Cizonet" refers to Cizonet Solutions Limited. "School" refers to any educational institution that has registered on HRAP EDU. "You" refers to the school administrator, teacher, or parent using the platform.

2. Data roles under NDPA 2023

Under the Nigeria Data Protection Act 2023 (NDPA):

• The school is the Data Controller - it decides what student data is collected and for what purpose.
• Cizonet Solutions Limited is the Data Processor - we process data only on the school's instructions and do not use student data for any other purpose.

A Data Processing Agreement (DPA) is presented to and accepted by school administrators during onboarding.

3. What data we collect

For school administrators and teachers:

• Full name and email address
• Role within the school
• Login session information

For students (collected by the school):

• Name, class, and enrollment details
• Daily attendance records
• Assessment scores and academic results
• Fee schedule and payment confirmation records

We do not collect:

• National Identification Numbers (NIN) or Bank Verification Numbers (BVN)
• Biometric data (fingerprints, facial scans)
• Payment card details (we do not process payments)

4. How we use your data

• To provide and operate the HRAP EDU platform
• To send transactional emails (OTP verification, result notifications, fee reminders)
• To enable parents to view their child's school data
• To generate PDF reports and report cards
• We do not sell, share, or use your data for advertising

5. Parental consent

Because HRAP EDU processes data about minors (students under 18), we require explicit consent from a parent or guardian before displaying any student data in the parent portal. Consent is recorded with a timestamp and is required once per parent per school. Parents may withdraw consent at any time by emailing [email protected].

6. Data storage and security

All data is stored on Appwrite Cloud (Frankfurt region, EU servers) using industry-standard encryption at rest and in transit. Access to school data is restricted by role-based permissions - school admins, teachers, and parents can only access data relevant to their role and school.

7. Data retention

Student and school data is retained for as long as the school account is active on HRAP EDU. When a school account is closed, data is deleted within 90 days unless a longer retention period is required by Nigerian law.

8. Your rights

Under NDPA 2023, you have the right to:

• Access the data we hold about you or your child
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw consent (for parents)

To exercise any of these rights, email our Data Protection Officer at [email protected]. We will respond within 72 hours.

9. Contact