Privacy Policy
Overview
Eduformium ("Eduformium", "we", "our", or "us") is committed to protecting the privacy, confidentiality, and security of personal information entrusted to us by users across the African continent. This Privacy Policy explains how we collect, use, disclose, store, and protect personal data when you access or use the Eduformium platform, learning management system, dashboards, instructional tools, school management systems, and related regional services.
This Privacy Policy forms an integral part of Eduformium's legal framework and operates in alignment with our Terms and Conditions and Refunds, Returns, and Coin Wallet Policy.
Legal Basis and Compliance
Eduformium processes personal data in strict accordance with:
- The Data Protection Act, 2012 (Act 843) of the Republic of Ghana.
- The Electronic Transactions Act, 2008 (Act 772) of the Republic of Ghana.
- Reciprocal data privacy frameworks across our active African partner states (e.g., Nigeria's NDPA, Kenya's Data Protection Act).
By creating an account, acquiring virtual coins, or utilising our educational utilities, you explicitly consent to the collection and processing of your data as described herein. Consent is captured dynamically at registration.
Information We Collect
We collect information necessary to operate an effective, secure, and educationally optimised platform.
3.1 Information You Provide Directly
Depending on your role (Learner, Educator, or Administrator), this includes:
- Full name, professional email address, username, and secure authentication tokens.
- Academic credentials, institutional affiliations, or professional details required for regional Instructor approval.
- Communications sent to our teams, including system support tickets and verification text.
3.2 Lesson Generator Prompt and Input Data
When you utilise the Eduformium Lesson Generator, we process the raw instructional parameters, curriculum descriptions, topics, and specific prompts you type into the interface.
3.3 Information Submitted by Schools via the SMS
Where Eduformium acts as a School Management System (SMS) within an institution, schools enter data on behalf of their entities. This covers:
- Student personal, enrolment, and academic progress metrics.
- Parent and guardian contact details for SMS/WhatsApp institutional alerts.
- Fee compliance records, regional billing references, and academic report cards.
3.4 Regional Payment and Transaction Data
For course enrolments and Eduformium Coin bundle top-ups across our African footprint, we collect transaction statuses, payment channels (e.g., specific Mobile Money numbers, regional banking cards), and transaction reference IDs.
3.5 Automatically Collected Technical Information
To maintain system performance and security across varying regional telecom infrastructures, we log IP address, regional ISP identifiers (e.g., MTN, Telecel, AT, Safaricom, Orange), device signatures, browser details, and time stamps.
How We Use Your Information
Eduformium processes personal data exclusively for legitimate educational and operational mandates:
- Provisioning and managing secure accounts.
- Metering and adjusting virtual wallet balances for the Lesson Generator based on usage.
- Optimising AI output logic specifically using localised African curriculum inputs.
- Processing instructor revenue share structures and regional payouts.
- Distributing critical platform alerts or service disruptions via email or SMS.
We enforce a strict policy: we do not sell, rent, or trade user data or school records to third-party advertising brokers.
School Management System (SMS) Data Processing Architecture
5.1 Eduformium as Data Processor
For all institutional metadata inputted into the SMS, Eduformium serves strictly as a Data Processor. The registering school remains the Data Controller under Ghana's Act 843 and holds absolute responsibility for the lawful collection and verification of student and guardian data.
5.2 Local Telecom Communications
Schools utilising our bulk notification integrations (SMS/WhatsApp) are solely responsible for ensuring they have appropriate parental consent before initiating broadcasts via our platform infrastructure.
5.3 Institutional Data Deletion Protocol
Upon the termination or non-renewal of an SMS subscription, Eduformium applies a hard sixty (60) day storage hold to allow administrators to securely export institutional records. On day 61, all data linked to that institution is permanently purged or completely anonymised from our primary server nodes.
Data Sharing, Disclosures, and Regional Boundaries
We share data only within highly controlled operational bounds:
- Infrastructure Partners: with trusted cloud hosting providers and application programming interfaces (APIs) necessary to run our system diagnostics, computational operations, and financial accounting.
- Legal Compulsion: where strictly compelled by a valid court order or statutory demand from a competent legal authority within the Republic of Ghana or our approved regional jurisdictions.
- No External Sharing: your student records, grading logs, and payment references are never made available to outside advertisers.
Data Security and Breach Management
Eduformium applies robust technical and administrative protocols, including transport layer encryption and system-level access firewalls, to safeguard user data.
7.1 Data Breach Notification Timelines
In the improbable event of a data security anomaly that compromises user records, Eduformium will notify affected platform users and school controllers without undue delay, targeting a window of 48 to 72 hours from internal confirmation. Notifications will outline the scope of the exposure, anticipated risks, and concrete mitigation steps implemented by our engineering team.
Data Retention and Regional Storage Lifespans
Active Balances
Data tied to active learner accounts, completed course archives, and Eduformium Coin transaction logs are maintained as long as the user account remains operational.
Account Deletion
If a user requests complete platform deletion, their profile data is scrubbed or anonymised within 30 days, subject to compliance records required for tax or transaction auditing under Ghanaian financial regulations.
Pan-African Data Transfers and Infrastructure Locality
Eduformium leverages global cloud networks and specialised data systems to deliver low-latency web platforms to educators across Africa.
While user profiles may be processed on secure cloud environments located globally (such as in the EU or US), all data transfers adhere strictly to cross-border transfer standards under Section 45 of Ghana's Data Protection Act.
We enforce rigorous contractual data protection agreements with all infrastructure suppliers, ensuring data handling remains safe regardless of server geography.
User Rights
Every educator and learner using Eduformium retains fundamental rights over their data. You may:
- Request an electronic copy of your archived personal data records.
- Rectify clerical errors or outdated professional qualifications on your profile.
- Request absolute account deletion (where not restricted by active transactional audits).
All official data inquiries must be submitted directly to our compliance office. We resolve valid verification requests within 30 calendar days.
Policy Evolution
Eduformium reserves the right to modify this Privacy Policy to mirror engineering upgrades, regional expansion, or legal adjustments across Africa. Material updates will be highlighted via in-app dashboard alerts or direct email notices. Continued use of the platform following an update indicates acceptance of the updated framework.
View Terms of Service → View Refund and Returns Policy → Go to Homepage →