1. Data We Collect
We collect only the data necessary to operate cbcSchool App for your school:
- School info: Name, location, contact phone, email
- Staff accounts: Teacher/headteacher names, phone numbers for OTP login
- Student records: Names, class, admission numbers (provided by the school)
- Parent contacts: Phone numbers for M-Pesa and WhatsApp notifications
- Attendance & assessment data: Generated by teachers during daily use
- Payment records: M-Pesa transaction IDs, amounts, timestamps (via Safaricom Daraja)
2. How We Use Your Data
- Provide offline-first attendance, CBC reports, fee collection, and parent alerts
- Sync data to cloud when internet is available (IndexedDB → server)
- Send WhatsApp notifications via Meta Business API (approved templates only)
- Process M-Pesa STK Push payments via Safaricom Daraja API
- Generate PDF reports and fee statements for parents
- Improve the product with anonymised usage analytics
3. Data Storage & Security
- All data encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Offline data stored locally in browser IndexedDB until sync
- Hosted on secure cloud infrastructure (Render.com, AWS/GCP)
- Access limited to authorised school staff via phone OTP
- No card details ever stored — M-Pesa PIN entered on parent's device
4. Data Sharing
We do not sell or rent your data. We share data only with:
- Safaricom Daraja API (M-Pesa payments)
- Meta WhatsApp Business API (parent notifications)
- Africa's Talking (SMS OTP for login)
- Legal authorities if required by Kenyan law
5. Your Rights
- Access, correct, or delete your school's data
- Export all data as CSV/PDF at any time
- Withdraw consent for WhatsApp/SMS notifications
- Request account closure (data purged within 30 days)
6. Children's Data
Student data is provided and controlled by the school. We do not collect data directly from children. Schools act as data controllers under Kenya's Data Protection Act, 2019.
7. Contact
Questions? Email privacy@cbcschool.co.ke or write to Smarternow Data Venture, Nairobi, Kenya.