EduTrak
Your Privacy Matters

Privacy Policy

Last updated: June 2026. We believe in plain-English privacy — no legalese, no surprises.

1

Information We Collect

We collect the following categories of information when you use EduTrak:

Account data: Name, email address, school name, and role (teacher, admin, parent).
Student data: Names, class information, attendance records, grades, and report card content — provided by school administrators.
Usage data: Pages visited, features used, login timestamps, and device/browser information.
Payment data: Processed securely by our payment provider. We never store full card numbers.
Communications: Any messages you send to our support team.
2

How We Use Your Information

We use your information solely to provide and improve EduTrak services:

Create and manage your account and school profile.
Generate and distribute student report cards.
Send important service notifications and updates.
Respond to support requests.
Analyse anonymous, aggregated usage patterns to improve the platform.
Process payments for subscriptions.

We never use student data for advertising, profiling, or any purpose beyond delivering EduTrak services to your school.

3

Sharing of Information

We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:

Within your school: Teachers see students in their classrooms. Admins see school-wide data. Parents see only their own children's data.
Service providers: We use trusted third-party services (hosting, email delivery, payment processing) under strict data processing agreements.
Legal requirements: We may disclose data if required by law or to protect rights, safety, or property.
Business transfers: In the event of a merger or acquisition, data will be transferred under equivalent protections.
4

Data Retention

We retain your data for as long as your account is active. Upon account deletion:

Your account data is permanently deleted within 30 days.
Student data is deleted within 30 days unless you request immediate deletion.
Payment records are retained for 7 years as required by financial regulations.
Anonymised, aggregated analytics data may be retained indefinitely.

You can request deletion of your data at any time by contacting us at privacy@edutrak.io.

5

Cookies & Tracking

We use cookies and similar technologies to:

Keep you logged in to your account (essential cookies).
Remember your preferences and settings.
Understand how the platform is used through anonymised analytics.

We do not use third-party advertising cookies. You can control cookies through your browser settings. Disabling essential cookies will prevent you from logging in.

6

Children's Privacy

EduTrak is a school management tool used by adults (teachers, parents, administrators) to manage information about students. We are committed to protecting the privacy of children:

Students do not directly create accounts or submit personal information on EduTrak.
Student data is entered by authorised school staff.
We do not knowingly collect personal information directly from children under 13.
All student data is handled in accordance with applicable child privacy laws, including FERPA (US), GDPR (EU/UK), and equivalent legislation.
7

Your Rights

Depending on your location, you may have the following rights regarding your personal data:

Access: Request a copy of the personal data we hold about you.
Correction: Request correction of inaccurate data.
Deletion: Request deletion of your data (subject to legal retention requirements).
Portability: Request your data in a machine-readable format.
Objection: Object to certain types of processing.
Withdrawal of consent: Where processing is based on consent, withdraw it at any time.

To exercise any of these rights, email privacy@edutrak.io. We respond within 30 days.

8

Security

We implement industry-standard security measures to protect your data:

All data is encrypted in transit using TLS 1.2 or higher.
All data is encrypted at rest using AES-256 encryption.
We conduct regular security audits and penetration tests.
Access to production systems is restricted and logged.
We maintain a responsible disclosure programme — report vulnerabilities to security@edutrak.io.

While we take every precaution, no system is 100% secure. If a breach affects your data, we will notify you within 72 hours as required by applicable law.

9

International Transfers

EduTrak is operated from Ghana, West Africa, and our servers are primarily located in the EU (Frankfurt) and US (Virginia). If you are located outside these regions, your data may be transferred internationally.

All international transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) and adequacy decisions where applicable. By using EduTrak, you consent to these transfers.

10

Contact Us

For privacy-related questions, data requests, or to report a concern:

Email: privacy@edutrak.io
Postal: EduTrak Privacy Team, 14 Education Lane, Accra, Ghana
Response time: We respond to all privacy requests within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.