Privacy Policy

Originally Published: September 1st, 2014

Last Updated: August 3rd, 2026

1. Introduction

Welcome to the EduPorch Ecosystem. This Privacy Policy covers all products, services, and applications developed and operated by Alusoft Technologies (hereinafter referred to as "we," "us," or "our"), including but not limited to:

EduPorch – A comprehensive School Management System designed to help educational institutions manage student records, school activities, and parent-teacher interactions efficiently.
WardFetch – A secure ward pickup application that enables parents, guardians, and authorized persons to safely collect wards (students) from school, with real-time verification and tracking capabilities.
EduPoser – A Computer-Based Testing (CBT) platform that enables schools to create, administer, and grade examinations digitally.
EduLearn – A Learning Management System (LMS) that facilitates online learning, course delivery, and educational content management.
Any other current or future addon applications, tools, or services derived from or integrated with the EduPorch ecosystem.

This Privacy Policy explains how we collect, use, store, and protect user data in compliance with applicable data protection laws, including the Nigeria Data Protection Regulation (NDPR), and other relevant regulations in regions where our client schools and users operate.

1.1. Scope & Coverage

This Privacy Policy applies to all services accessed through or served from:

eduporch.com and all subdomains thereof (e.g., app.eduporch.com, api.eduporch.com, *.eduporch.com)
wardfetch.com and all subdomains thereof (e.g., app.wardfetch.com, api.wardfetch.com, *.wardfetch.com)
eduposer.com and all subdomains thereof (e.g., app.eduposer.com, api.eduposer.com, *.eduposer.com)
edulearn.ng and all subdomains thereof (e.g., app.edulearn.ng, api.edulearn.ng, *.edulearn.ng)
alusofttechnologies.com and all subdomains thereof (e.g., apps.alusofttechnologies.com, *.alusofttechnologies.com)

This includes all web applications, mobile applications (Android and iOS), APIs, and any other digital services operated under these domains at any subdomain level.

By using any application or service within the EduPorch ecosystem, you agree to the terms outlined in this Privacy Policy.

2. Data We Collect

2.1. Data Collected from Schools (Administrators & Staff)

Student and parent bio-data (e.g., names, emails, phone numbers, photographs)
Educational records (grades, attendance, assignments, etc.)
Fee payment records
Internal communications between teachers, parents, and students
Staff records and employment information

2.2. Data Provided by Parents & Students

Payment details for processing school fees
Assignment submissions
Messages sent within the platform
Basic medical information (e.g., allergies, family physician details)
Profile photographs and identification documents

2.3. Data Collected via WardFetch

Parent/guardian identity verification data (name, photograph, phone number)
Authorized pickup person details and verification credentials
Ward (student) identification and association data
Geolocation data (for real-time tracking during pickup sessions)
Pickup verification photographs and timestamps
Pickup history and audit logs
Push notification tokens and preferences
Device identifiers for secure session management

2.4. Data Collected Automatically

Log files and activity data for app improvements
Device information (e.g., browser type, IP address, operating system, device model)
Push notification preferences and tokens
App usage analytics and performance data
Crash reports and diagnostic data
Firebase Instance IDs and installation identifiers

2.5. Data Collected by Other Addon Applications

Other current or future addon applications within the EduPorch ecosystem may collect additional data specific to their functionality. Such data collection will be consistent with the principles outlined in this Privacy Policy. Where an addon app requires data collection beyond the scope described herein, users will be notified and, where required, asked to provide separate consent.

3. How We Use Your Data

Managing student records and school activities
Personalizing user experiences across all ecosystem applications
Enabling communication between schools, parents, and students
Processing payments securely
Sending transactional emails and notifications
Enhancing system security and preventing unauthorized access
Improving the platform through analytics and crash reporting
Facilitating secure ward pickup verification and tracking (WardFetch)
Authenticating users and managing access control
Delivering push notifications and real-time updates
Remotely configuring app features and experiences
Monitoring app stability and performance

4. Third-Party Integrations & Services

We may share certain data with trusted third-party services to enhance the functionality of our applications:

4.1. Cloud & Infrastructure Services

AWS (S3, RDS, EC2, etc.) – Secure cloud storage, database hosting, and computing infrastructure

4.2. Google Firebase Ecosystem

Our applications, including WardFetch and other ecosystem apps, may utilize the following Google Firebase services:

Firebase Authentication – User identity verification and secure sign-in (email/password, phone number, social login providers). Firebase Auth processes user credentials and authentication tokens.
Firebase Cloud Messaging (FCM) – Delivery of push notifications and in-app messages. FCM processes device tokens and notification payloads.
Firebase Cloud Firestore / Realtime Database – Real-time data synchronization and cloud-based data storage for application data.
Firebase Cloud Storage – Storage of user-generated content such as profile photos, verification images, and uploaded documents.
Firebase Analytics (Google Analytics for Firebase) – Collection of app usage data, user engagement metrics, and behavioral analytics to improve our services. This may include device information, app interactions, and aggregated usage patterns.
Firebase Crashlytics – Automated crash reporting and diagnostic data collection to identify and resolve application stability issues. Crashlytics may collect device state information, crash stack traces, and device identifiers.
Firebase Remote Config – Dynamic configuration of app behavior and appearance without requiring app updates.
Firebase Cloud Functions – Server-side processing for backend operations, data validation, and automated workflows.
Firebase App Check – Protection against unauthorized API access and abuse by verifying that requests come from legitimate app instances.

Data processed through Firebase services is subject to Google's Firebase Privacy Policy and Google's Privacy Policy. Google may process data on servers located outside your country of residence.

4.3. Communication & Payment Services

Zoho Mail – Transactional email delivery
Paystack – Payment processing (we do not store card details or sensitive payment information on our servers)

There may be other third-party services not listed here due to unintentional omission or future integration. All third-party service providers are selected based on their commitment to data protection and are contractually obligated to safeguard user data and comply with applicable privacy laws.

5. Data Security Measures

One-way irreversible hashing of passwords
Strong firewall and AWS security groups to prevent unauthorized access
HTTPS/TLS encryption for all data transmission
SQL injection and vulnerability protection
Firebase Security Rules for database and storage access control
Firebase App Check for API request verification
Role-based access control (RBAC) across all applications
Regular security audits and vulnerability assessments
Encrypted data storage for sensitive information

6. Data Access by Support Staff and Engineers

Our company (Alusoft Technologies, EduPorch ecosystem provider) support staff and engineers may have occasional access to user data during support/maintenance sessions or in the course of development and testing the application. All such access is bound by a strong non-disclosure agreement, ensuring that user data is never used for any purpose other than the sole reason for which access was initially granted.

7. Data Retention & Deletion

We retain user data only as long as necessary to fulfill educational, operational, and legal obligations. The retention period varies based on the type of data and the applicable legal requirements:

Active account data is retained for the duration of the user's relationship with the institution
WardFetch pickup logs and verification records are retained as required by school policy and applicable law
Firebase Analytics data is retained according to Google's data retention policies
Crash reports and diagnostic data are retained for a reasonable period to support ongoing app stability improvements

Users may request data deletion in compliance with school policies and legal requirements. Upon receiving a valid deletion request, we will delete or anonymize the data within a reasonable timeframe, except where retention is required by law.

8. Children's Privacy

Our services are designed for use by educational institutions, parents, guardians, and authorized school staff. We recognize that data relating to minors (students/wards) may be processed through our platforms. We are committed to protecting children's privacy and:

Only collect children's data as provided by or on behalf of their parent, guardian, or educational institution
Do not knowingly solicit personal information directly from children without parental or institutional consent
Implement appropriate safeguards for all data relating to minors
Allow parents and guardians to review, modify, or request deletion of their child's personal data

9. Compliance with Data Protection Laws

The EduPorch ecosystem complies with data protection regulations including, but not limited to, the Nigeria Data Protection Regulation (NDPR) and other applicable laws in countries where our client schools and users operate. We respect user rights regarding data access, modification, portability, and deletion.

10. User Rights & Choices

Users have the right to:

Request access to their personal data held across any EduPorch ecosystem application
Request correction or deletion of inaccurate data
Opt-out of non-essential communications and notifications
Withdraw consent for data processing where consent was the basis for processing
Request data portability in a commonly used format
Lodge a complaint with the relevant data protection authority

11. Updates to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or the addition of new applications to the EduPorch ecosystem. Users will be notified of any significant changes through our applications, email, or website. The "Last Updated" date at the top of this policy indicates when the latest revision was made.

12. Contact Information

For privacy-related inquiries concerning any application within the EduPorch ecosystem, please contact us at:

Email: support@eduporch.com

Company: Alusoft Technologies

Websites: eduporch.com | wardfetch.com | eduposer.com | edulearn.ng | alusofttechnologies.com