Privacy

Privacy Policy

Effective November 11, 2026 · Applies to schools-id.com and the SchoolID apps on web, iOS and Android (together, the “Platform”)

SchoolID is built by Agodi Technologies (“Agodi Technologies,” “we,” “us”), operating through its South African and Nigerian entities, as a digital operating system for schools, colleges and universities. This policy explains what personal information we process, why, and the choices you and your school have about it.

1. Who is responsible for your data

Schools sign up for SchoolID, enrol their own students and staff, and decide what records to keep. In data-protection terms, your school is the data controller for student, parent and staff information: it determines what is collected and for what purpose, consistent with its own enrolment and consent processes. Agodi Technologies acts as the data processor / service provider. We operate the Platform on the school’s instructions and don’t use student or staff data for our own independent purposes.

Where applicable, we rely on the institutional service-provider basis recognised for schools (comparable to FERPA’s “school official” exception in the US), on South Africa’s Protection of Personal Information Act (POPIA), and on Nigeria’s Data Protection Act / NDPR, depending on where a school operates.

2. Who uses SchoolID

Every account on the Platform — student, parent/guardian, teacher, administrator, counsellor, finance, library, transport, security or principal — is created and managed by the school, not self-registered from the public internet. Students do not sign themselves up; their school issues their account as part of enrolment.

3. Information we collect

Identity & contact information

Full name, date of birth, gender, nationality, photo, email address and phone number, as entered by the school.

Government ID & verified identity

Some schools choose to verify a person’s government-issued ID (national ID, passport) or a biometric selfie match as part of enrolment or staff vetting. This is performed by our identity-verification partners, AfriID and IDVero, and only proceeds where the record carries an explicit, separately tracked consent flag. We do not run ID or biometric verification silently in the background.

School-issued digital ID

A unique SchoolID number and QR token used for attendance, library, transport and gate-access verification on campus.

Academic records

Attendance, assignments, exam results, timetable and class/enrolment history.

Financial records

Fee structures, invoices and payment records logged by the school’s finance staff. Where a school enables online fee payment, card and payment details are handled directly by a licensed payment processor — SchoolID does not store full card numbers.

Library & transport records

Book loans and returns; bus routes, stops and pickup manifests.

Security & campus records

Visitor logs and gate entry/exit logs recorded by campus security staff.

Incident reports & wellbeing records

Disciplinary/incident reports, and — the most sensitive category on the Platform — wellbeing and counselling case notes. These carry the strictest access control of any record type: only a school’s counsellor and principal accounts can read them, enforced at the database level, not just in the app’s interface.

Communications & AI assistant use

In-app messages and announcements sent through the Platform. If a user chats with one of SchoolID’s AI features (tutoring, lesson planning, report writing and similar), their message content, role and school name are sent to our AI provider, Anthropic, to generate a response. Under Anthropic’s standard API terms, this data is not used to train their models.

Technical data

Standard server logs (IP address, device/browser type, timestamps) and an internal audit trail of account actions, kept for security and troubleshooting.

4. How we use information

To operate the Platform and each role’s features; to secure accounts and investigate misuse (via the audit trail); to send transactional email (account, invoice and notification emails, via our provider Resend — we don’t send marketing email without consent); to generate AI responses when a user chooses to use an AI feature; to improve the product using aggregated, de-identified usage patterns; and to comply with legal obligations.

5. Children’s data & student accounts

Many people on SchoolID are minors. Student accounts are provisioned by the school as part of enrolment, under the consent and enrolment agreement the school already has with parents/guardians — students do not independently sign up from the open internet, and we do not collect information from children outside the school’s enrolment process.

We do not run behavioural advertising, build advertising profiles of students, or sell any student data, to anyone, ever. A parent or guardian can ask their school — or contact us directly — to review, correct or request deletion of their child’s information at any time.

6. Who we share information with

We use a small number of service providers to operate the Platform, each only for the purpose described:

• Supabase — database hosting and authentication infrastructure.
• Resend — transactional email delivery (welcome emails, notifications).
• AfriID & IDVero — government ID and biometric identity verification, only for records a school chooses to verify.
• Anthropic — generates responses for SchoolID’s AI features, only when a user actively uses them.

We do not sell personal information, and we do not share it with advertisers or data brokers. We may disclose information if required by law, or to protect the safety of a student, staff member or the public.

7. Data security

Access to every record is governed by row-level database policies scoped to a person’s role and school — a teacher cannot read another school’s records, and wellbeing/counselling records are restricted to counsellors and the principal only. Sensitive actions are written to an append-only audit log. Data is encrypted in transit (HTTPS/TLS) and at rest.

8. Data retention

Schools control how long academic and administrative records are kept, consistent with their own policies and any applicable record-keeping law. When a school closes an account or requests deletion, we remove the data within a reasonable period unless we’re required to keep it for longer by law.

9. Your rights

Depending on where you or your school are located, you may have rights to access, correct, delete or receive a copy of your personal information, to object to or restrict certain processing, and to lodge a complaint with your local data-protection authority (for example, the Information Regulator in South Africa, or the Nigeria Data Protection Commission). Start with your school’s administrator, since they control enrolment records — they can also loop us in directly, or you can email us at the address below.

10. Cookies

We use only essential session and authentication cookies needed to keep you signed in. We don’t use third-party advertising or analytics cookies.

11. International data transfers

Agodi Technologies operates across Africa, and the infrastructure providers listed above may process data outside the country where your school is located. Data is only shared with the providers listed in this policy, under their own security and confidentiality commitments.

12. Changes to this policy

We’ll update the effective date above when this policy changes, and we’ll notify school administrators directly of any material change.

13. Contact us

Questions, or a request to access, correct or delete personal information: info@agoditechnologies.com.