Privacy Policy

This notice outlines how Educational Data Technology, Nigeria Limited (EDATECH) collects, uses, and protects the data of users interacting with our EDAT platform (the "Platform") in accordance with the Nigerian Data Protection Regulation (NDPR), the US Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR), and the UK General Data Protection Regulation (UK GDPR).

The data we collect depends on the user's role on the EDAT Platform:

Students:

Required Data:

• Anonymized ID: This unique identifier ensures student privacy while allowing us to track their progress on the platform. EDATECH prioritizes student privacy and never collects personally identifiable information (PII) about students without verifiable parental consent.
• Age Range: Knowing the student's age range allows EDAT to filter content and recommendations to ensure they are age-appropriate and comply with COPPA regulations for users under 13 (or the relevant age limit set by the specific region).

Optional Data (with Parental Consent):

• Name: Personalizing the learning experience by name can motivate students and make their interaction with the platform more engaging. However, we understand the importance of parental control over student data. We require verifiable parental consent before collecting a student's name.
• School Information: School affiliation can provide context for student performance and can be helpful for teachers who manage multiple classes across different schools. Like the student's name, school information is only collected with verifiable parental consent.

Learning Data (Always Anonymized):

• Performance on Exams and Learning Activities: This anonymized data allows us to personalize learning paths for each student by identifying their strengths and weaknesses. It also enables us to track progress over time and provide valuable insights to students, parents, and teachers.
• Usage of Personalized Recommendations: By analysing how students interact with our recommended learning activities, we can continuously improve the recommendation engine, ensuring it suggests the most suitable content for each student's individual needs.

Teachers:

• Login Credentials: Username and password are securely stored using industry best practices like hashing and salting to protect user credentials in case of a data breach.
• Class Management Data: Anonymized student IDs associated with the teacher's classes allow teachers to efficiently manage student progress, assignments, and communication within their classes.

Optional Data (with User Consent):

• Name: Sharing names fosters better communication and collaboration between teachers, especially those working within the same school or district.
• School Affiliation: Like student information, a teacher's school affiliation provides context and can be helpful for administrators managing multiple schools or districts using EDAT. We obtain the teacher's consent before collecting this information.

Parents:

• Login Credentials: Securely stored login credentials ensure authorized access to their child's data on the platform.

Child Information (with Parental Consent):

• Name: Parents can easily identify their child's data and reports within the platform.
• Anonymized Student ID: This links the parent to their child's anonymized learning data, allowing them to monitor their child's progress without compromising student privacy. We require verifiable parental consent before collecting a child's name and linking it to their learning data.

Access to Student Reports:

• Progress on Learning Activities: Parents can see how their child is progressing through different learning modules and activities offered by the platform.
• Performance Data (Always Anonymized): Anonymized performance data on exams, quizzes, and assignments provides valuable insights to parents about their child's strengths and weaknesses without revealing any personally identifiable information.

School and Local Administrators:

• Login Credentials: Secure login credentials ensure only authorized administrators have access to student data reports.
• Aggregated Student Data (Always Anonymized): Group (e.g. overall Class, School, or local authority) Performance Reports: These reports provide administrators with valuable insights into student performance at the class or school level, enabling them to make data-driven decisions to improve educational programs and learning outcomes for all students. By using anonymized data, EDAT protects student privacy while empowering administrators to optimize educational resources.

We use the collected data for the following purposes:

Students:

• Personalize learning experiences with recommendations and content suitable for their age and skill level (based on anonymized learning data).
• Provide progress tracking and reports to students, parents, and teachers (using anonymized data to protect student privacy).
• Improve the EDAT Platform's functionalities through analysis of anonymized learning data to continuously enhance the platform's effectiveness.

Teachers:

• Manage student progress and learning activities within their classes.
• Gain insights into anonymized student performance data to develop effective teaching strategies tailored to their students's specific needs.

Parents:

• Monitor their child's progress on the EDAT Platform and access anonymized performance data and learning activity reports to understand their child's learning journey and identify areas where they might require additional support.

School and Local Administrators:

• Track overall student performance at the class or school level (using anonymized data reports) to identify areas for improvement in curriculum, teaching methods, or resource allocation.
• Make data-driven decisions to optimize educational programs and learning outcomes for all students.

EDAT prioritizes data security and privacy. We implement the following measures:

• Secure Storage: All data is stored on secure servers with industry-standard security practices like encryption and access controls to prevent unauthorized access.
• Anonymization: We prioritize student privacy. Student performance data is always anonymized before analysis or reporting. This ensures valuable insights can be gained for improving the platform and learning experience without compromising student identity.
• Parental Consent: We obtain verifiable parental consent for collecting and using data beyond basic information for students under the age limit defined by COPPA (or the relevant age limit set by the specific region).
• User Control: Users have the right to access, modify, or delete their data upon request (subject to legal and regulatory restrictions). For student data, we will process such requests in accordance with parental consent.
• Data Retention: We retain student data for a maximum of five years after a student becomes inactive on the platform (unless parental consent is provided for longer retention). This timeframe allows us to maintain historical data for platform improvement and to provide valuable insights to parents and educators who might rejoin the platform in the future. We regularly review and update our data retention policies in accordance with best practices and regulatory requirements.
• Compliance with Regulations: We adhere to the Nigerian Data Protection Regulation (NDPR), the US Children's Online Privacy Protection Act (COPPA), the EU General Data Protection Regulation (GDPR), and the UK General Data Protection Regulation (UK GDPR).

The anonymized learning data we collect allows us to develop sophisticated models that analyse student performance trends and learning styles. These models power the EDAT platform's recommendation engine, suggesting the most suitable learning activities and content for each student's individual needs. Additionally, anonymized data is used to create adaptive assessments that adjust difficulty levels and question types based on student performance, providing a more personalized and engaging learning experience.

• Access and Modification: You have the right to access and modify your data upon request (subject to legal and regulatory restrictions). For student data, we will process such requests in accordance with parental consent.
• Erasure: You have the right to request the erasure of your data. However, there may be circumstances where we are unable to do so due to legal or regulatory obligations.
• Complaint: If you have any concerns about how we handle your data, you can make a complaint with the relevant data protection authority.

• Nigeria (NDPR): The notice explicitly mentions the rights of data subjects under NDPR, including rectification, erasure, and restriction of processing of their data.
• US (COPPA): The notice clearly states the age limit below which parental consent is mandatory for collecting any personal information beyond basic student identification.
• EU (GDPR) and UK (UK GDPR): The notice specifies the legal basis for data processing (e.g., consent, legitimate interest) and data retention periods. Under these regulations, users have the right to data portability.

We may update this Privacy Policy and Cookies Policy from time to time. Any changes will be posted on our website, and the effective date will be indicated. Please review this policy regularly to stay informed about how we handle your information and use cookies. By using our website and services, you acknowledge that you have read and understood this Privacy Policy and Cookies Policy.