School Konnect ("we", "our", or "us") is committed to protecting the privacy of the schools, staff, parents, and students who use our platform. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and your rights under the Ghana Data Protection Act, 2012 (Act 843).
1. Who We Are
School Konnect is a school management platform operated by Dedee Digital. We act as a data processor on behalf of the schools ("data controllers") that subscribe to our service. Each school is responsible for obtaining the consent of its staff, parents, and students before enrolling them on the platform.
2. Data We Collect
We collect the following categories of personal data:
| Category | Examples | Who it relates to |
|---|---|---|
| Identity data | Full name, date of birth, gender, nationality, admission ID | Students, staff, parents |
| Contact data | Email address, phone number, home address | All users |
| Academic data | Assessment scores, grades, class rank, attendance records, teacher remarks | Students |
| Health data | Blood group, allergies, medical conditions, medications, disabilities | Students |
| Behavioural data | Conduct ratings and remarks | Students |
| Activity data | Extracurricular activities, roles, achievements | Students |
| Financial data | Subscription/billing payments processed via Paystack (parent subscription plans) | Parents |
| Usage data | Login timestamps, device type, IP address (for security purposes) | All users |
| Communications | Messages sent between teachers and parents within the platform | Teachers, parents |
| Precise location | A teacher's device GPS coordinates at the moment they scan the staff clock-in QR code, used only to check the distance to the school and flag whether they were within range — the raw coordinates are not stored, only the resulting distance/flag. Separately, a school admin may optionally use their device's GPS to set the school's own address in School Profile. | Teachers (clock-in), Admins (school address, optional) |
3. How We Use Your Data
Providing the service
We use personal data to operate the platform: displaying dashboards, generating report cards, recording attendance, facilitating messaging between teachers and parents, and sending notifications.
Security and fraud prevention
We log login attempts, apply rate limiting, and lock accounts after repeated failed login attempts to protect user accounts.
Communications
We use email addresses and phone numbers to send account welcome messages, password reset links, invite codes, and notifications for new messages and school notices.
Payments
We use payment and contact details to process parent subscription payments via Paystack, our payment processing partner.
Improving the platform
We may use aggregated, anonymised usage data to understand how the platform is used and to improve its features. No individual user is identified in this analysis.
4. Legal Basis for Processing
Under the Ghana Data Protection Act 2012 (Act 843), we process personal data on the following bases:
- Consent: Parents and students provide consent through the school's enrolment process.
- Contractual necessity: Processing is necessary to deliver the service agreed with the school.
- Legitimate interests: Security logging and fraud prevention are necessary for the integrity of the platform.
- Legal obligation: We may process data where required to comply with Ghanaian law.
5. Data Sharing
We do not sell personal data. We share data only with the following third-party service providers, and only to the extent necessary to operate the platform:
| Provider | Purpose | Data shared |
|---|---|---|
| Supabase (PostgreSQL) | Database hosting | All user and school data |
| Cloudinary | Profile photo and document storage | Uploaded images and files |
| Firebase (Google) | Push notifications | Device tokens, notification content |
| Brevo (SMTP) | Transactional emails | Email address, message content |
| FROG by Wigal | Transactional & notification SMS (invites, OTPs, notices, attendance alerts) | Phone number, message content |
| Paystack | Payment processing for parent subscriptions | Payment/transaction data, contact details required by the processor |
6. Data Security
We implement the following security measures to protect personal data:
- All data is transmitted over HTTPS (TLS encryption).
- Passwords are hashed using BCrypt — we never store plaintext passwords.
- Access tokens are short-lived JWTs signed with a secret key.
- Accounts are locked after 10 consecutive failed login attempts.
- Login endpoints are rate-limited to prevent brute-force attacks.
- File uploads are validated for type and size before being accepted.
- Each school's data is isolated — users can only access their own school's data.
7. Data Retention
We retain personal data for as long as the school's subscription is active. Upon termination of a school's account, data is retained for 90 days to allow for export requests, then permanently deleted. See our separate Data Retention Policy for full details.
8. Your Rights
Under the Ghana Data Protection Act 2012, you have the following rights:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct inaccurate or incomplete data.
- Right to erasure: You may request deletion of your data, subject to legal and contractual obligations.
- Right to object: You may object to processing based on legitimate interests.
- Right to data portability: You may request your data in a machine-readable format.
To exercise any of these rights, contact your school administrator, who will submit the request on your behalf. Schools may contact us at hello@dedee.digital.
9. Children's Data
School Konnect processes the personal data of minors as part of its core function. This processing takes place under the authority of the school, acting in loco parentis, and with the consent of parents or guardians obtained during the school's enrolment process. We do not use children's data for any purpose other than delivering the school management service.
10. Changes to This Policy
We may update this Privacy Policy from time to time. Schools will be notified of material changes by email at least 30 days before they take effect. Continued use of the platform after that date constitutes acceptance of the updated policy.
11. Contact
For privacy-related questions or to exercise your rights, contact us at:
Email: hello@dedee.digital
Website: schoolkonnectinfo.dedee.digital