Privacy Notice

Last updated: October 2026

Who this is from

Demo Academy (“the school”) uses this portal to run teaching, attendance, results, communication and fees. The school decides what information is collected and why. Skulah provides the software and stores the information on the school's behalf, and only handles it on the school's instructions.

What information is held

• Pupils: name, admission number, gender, date of birth, class, photo (if uploaded), attendance, scores and report cards, remarks, fee records, assignments and test answers, messages in the class chat, and questions asked to the AI study assistant (if the school has it switched on).
• Parents and guardians: name, phone number, email address, and which child or children they are linked to.
• Staff: name, contact details, qualification, role, and pay records.
• Everyone who signs in: login email or admission number, and a security record of sign-ins (time, the device and browser type, and the internet address used).
• Staff, parents and administrators: a list of the browsers you have signed in from (browser and device type, the country worked out from the internet address, and when you last used it), kept in your account so a sign-in from an unfamiliar browser can be noticed. We may email you about a new device, or send a one-time code to your email address to confirm it is you. You can see and remove your devices under My Devices. Browsers unused for 180 days are forgotten.

Why it is used

To teach and look after pupils, record attendance and results, produce report cards, tell parents about their child's progress and fees, keep the portal safe, and meet the school's own record-keeping duties.

Who can see it

• School staff see what their role needs. A teacher sees their own classes; the school Admin sees the whole school.
• A parent sees only their own linked children.
• Classmates see only messages posted in their shared class chat. The Class Teacher and school Admin can read, and remove, messages in that chat, and a pupil can report a message that upsets them.
• Skulah staff open a school's portal only to give support. Each such visit is recorded, and the school can see that record.

Other organisations involved

Only when the school switches these features on:

• Email: an email service delivers messages such as new login details and notices.
• WhatsApp messages: a messaging provider delivers notices to parents' phones.
• QR passes: when a pupil's pass is created, its random code (no name or other personal detail) is sent once to a public QR-picture service, which returns the picture. Scanning at the gate does not use the internet service.
• Online fee payment: Paystack handles card and bank details. This portal never sees or stores card numbers.
• AI study assistant: a pupil's first name, class, the school name, and the questions asked are sent to an external AI service so it can answer. The school can turn the assistant off. Pupils should never type passwords or private secrets into it.
• Hosting and backups: the portal runs on servers in Amsterdam, the Netherlands. Encrypted backup copies are kept for about 30 days with a backup storage provider.

Because of this, some information is processed outside Nigeria. It is protected by encryption of backups, separate storage for each school, and restricted access.

How long it is kept

Information is kept while a pupil is at the school and afterwards for as long as the school needs it for its records. A message that a user deletes is removed from view. Uploaded payment proofs are deleted automatically about a week after the school has reviewed them. Security records of sign-ins are kept for a limited period.

How it is protected

• Passwords are stored scrambled and cannot be read, even by Skulah.
• Admin accounts use a second sign-in step.
• Information travels over an encrypted connection.
• Each school's information is kept in its own separate database.
• Important actions are recorded in an activity log.

Your rights

You (or, for a child, a parent or guardian) can ask the school to: give you a copy of the information held; correct anything that is wrong; delete information where the law allows; and stop or limit certain uses. If you are unhappy with how information is handled, you can complain to the Nigeria Data Protection Commission. The school Admin can produce a copy of a pupil's record from this portal's Data & Privacy page.

Children

Pupils' information is collected with the knowledge and authority of their parents or guardians, for school purposes only. It is never sold, and never used for advertising.

Contact

For anything about your or your child's information, contact the school first:
Email: info@example.com
Phone: 08000000000

For questions about the portal software itself: