EduPulse Privacy Policy

EduPulse Technologies Nigeria Ltd (“EduPulse”) is a Nigerian company that provides school administration, transport safety, and parent-communication software to schools. For data protection purposes, a subscribing school is the data controller for the personal data of its own students, guardians, and staff that it enters into EduPulse; EduPulse acts as a data processor on the school’s behalf for that data, and acts as the data controller for account and usage data it collects to operate and secure the platform itself (e.g. login credentials, device/push tokens, app diagnostics).

Registered office: Lekki Phase 1, Lagos State, Nigeria. Contact: hello@edupulse.ng, (+234) 818 877 9061.

We collect different categories of information depending on your role on the platform.

a) Account & profile information

• Name, email address, phone number, and password (stored as a salted hash, never in plain text).
• Role within the school (e.g. administrator, teacher/front-desk staff, guardian, bus marshal/driver).
• Profile photo, where uploaded by staff or a guardian.

b) Student information (entered by the school and guardians)

• Name, date of birth, admission number, class/level, admission date, and photo.
• Parent/guardian relationship and linkage.
• Health-related information voluntarily provided for safety purposes — blood group, known allergies, and medical conditions — used only to inform school staff and, in an emergency, first responders. This information is entered by the school or a verified guardian, not collected from the child directly.
• Attendance, academic scores/grades, and disciplinary or safety incident records logged by the school.

c) Guardian identity verification

• A government-issued identity document may be uploaded when a guardian requests to be linked to a student, so the school can verify and approve that the person is authorized to access that child’s information and pick-up/drop-off status. Approval is performed by school staff.

d) Live bus location (GPS)

• While a school bus trip is active, the marshal/driver’s device shares the bus’s GPS coordinates, speed, and heading with EduPulse so that the trip can be shown to the school and to guardians of students on that route. Guardians only ever see the location of buses their own child is registered to ride.
• Raw location pings are kept for a limited period and then summarized/aggregated per trip; see “Data Retention” below.

e) Payments

• School fee payments are processed directly by our payment service providers, Paystack and/or SeerBit. EduPulse does not collect or store card numbers, bank account credentials, or full payment card data on its own servers — that data is handled by the payment provider under its own PCI-DSS-compliant systems. EduPulse records the payment status, amount, and a provider-issued transaction reference.

f) Communications

• Messages sent through the in-app messaging feature between school staff and guardians.
• Announcements published by the school to guardians/students.
• SOS/incident reports filed by marshals, including an optional photo and description.

g) Device and technical information

• A push-notification device token (via Expo), used solely to deliver notifications to your device.
• Standard mobile diagnostics such as device model, operating system version, and app version, used for troubleshooting and security.

h) Biometric authentication — handled entirely on your device

The EduPulse app lets you optionally lock re-entry to the app using your phone’s own Face ID / fingerprint unlock. This uses your device operating system’s built-in biometric authentication. EduPulse never receives, transmits, or stores your fingerprint, face data, or any other biometric template — the match happens entirely on your device, and the app only receives a yes/no confirmation from the operating system.

• To operate core features: attendance, gradebook and report cards, fee invoicing, live bus tracking, announcements, and in-app messaging.
• To verify guardian identity before linking a guardian account to a student.
• To send notifications by push, email, and/or SMS — for example fee reminders, attendance alerts, bus arrival updates, and announcements — through Expo (push), our email provider, and Termii (SMS/OTP).
• To process fee payments through Paystack/SeerBit and reconcile invoices.
• To secure accounts, detect fraud/abuse, and maintain audit logs of sensitive actions (e.g. platform administrator actions).
• To respond to support requests and improve the reliability of the platform.
• To comply with legal obligations, including those under the Nigeria Data Protection Act 2023 and the Nigeria Data Protection Regulation (NDPR).

We do not sell personal data, and we do not use student or guardian data for advertising.

EduPulse is a tool used by schools, school staff, and parents/guardians to manage information about enrolled students. The app itself is not directed at, marketed to, or intended for direct use by children, and student accounts with independent login access are not part of the platform.

Student personal data (including the health-related fields described above) is entered by the school or by a guardian who has been verified and approved by the school, under the lawful basis of the school’s own relationship with the student’s family and its responsibility for pupil welfare and safety. A school remains the data controller responsible for the accuracy and lawful collection of the student data it enters into EduPulse.

A parent or guardian who wants student data corrected or removed should contact their child’s school directly, which can action the request in the Admin Console; EduPulse can also action such a request on the school’s behalf at hello@edupulse.ng.

We share data only where necessary to provide the service:

• Paystack and SeerBit — to process school fee payments.
• Termii — to deliver SMS messages and one-time passwords (OTPs).
• Expo — to deliver mobile push notifications.
• Our email delivery provider — to send transactional and reminder emails.
• Our cloud infrastructure provider — to host the application and database securely.
• Law enforcement or regulators, only where required by Nigerian law or a valid legal process.

We do not share student, guardian, or staff data with third parties for their own marketing purposes.

• Student, guardian, staff, attendance, academic, and fee records are retained for as long as the school maintains an active EduPulse subscription, plus a reasonable period afterward to meet the school’s own record-keeping and legal obligations.
• Raw live bus GPS pings are retained for approximately 30 days, after which they are reduced to a per-trip summary (route taken, timing) and the granular location pings are discarded.
• Guardian identity verification documents are retained only as long as needed to verify and maintain the guardian-student link, and are not shared outside the verifying school’s administrators.
• You may request deletion of your own account data at any time, subject to the school’s record-keeping obligations for enrolled-student data (see “Your Rights” below).

• Passwords are stored as salted, one-way hashes — never in plain text.
• Data in transit between the app and our servers is encrypted (HTTPS/TLS).
• Access to sensitive data (identity documents, health fields) within the Admin Console is restricted to authorized school staff and platform administrators, and sensitive platform-admin actions are recorded in an audit log.
• No method of transmission or storage is 100% secure; we work to apply industry-standard safeguards and to improve them over time.

Subject to applicable Nigerian data protection law, you may:

• Request access to the personal data held about you.
• Request correction of inaccurate or incomplete data.
• Request deletion of your account and associated data, subject to a school’s legitimate record-keeping requirements for enrolled students.
• Withdraw consent for optional features (e.g. push notifications, biometric app-lock) at any time from within the app.
• Object to or request restriction of certain processing.

To exercise any of these rights, contact your school administrator (for student/guardian data) or EduPulse directly at hello@edupulse.ng.

The EduPulse app requests device location permission for two distinct purposes, and only ever for the role it is relevant to:

• Marshals/drivers: location is shared while a trip is actively in progress, so the school and guardians can see the bus’s live position on its route.
• Parents/guardians: the app does not track a guardian’s own location — it only displays the location of a bus on a route their child is assigned to.

You can disable location permission at any time from your device settings; doing so will stop live bus tracking from functioning for that device.

EduPulse’s infrastructure and third-party service providers (payments, SMS, push notifications, hosting) may process data on servers located outside Nigeria. Where this occurs, we rely on providers that maintain appropriate contractual and technical safeguards for the data they process.

We may update this Privacy Policy from time to time to reflect changes to the app or to legal requirements. Material changes will be reflected by an updated “Last updated” date above, and where appropriate we will notify schools directly.

Questions about this Privacy Policy or how your data is handled can be sent to:

EduPulse Technologies Nigeria Ltd
Lekki Phase 1, Lagos State, Nigeria
Email: hello@edupulse.ng
Phone: (+234) 818 877 9061

See also our Terms of Service.