Privacy Policy
How Shule Central collects, uses, stores, and protects your data — in plain language.
Last updated: April 2026
Your data is isolated
Each school's data lives in its own environment — completely separate from all other schools.
We never sell your data
We do not sell, share, or rent your school's data to third parties, advertisers, or data brokers.
Africa-first storage
We store data in servers located within Africa where available, keeping it in appropriate jurisdiction.
Full audit access
School administrators have access to logs of who accessed what, and when — always.
1. Who we are
Shule Central is an educational technology platform operated in Uganda, designed for schools, teachers, students, families, and curriculum bodies across Africa. When we say "we", "us", or "Shule Central", we mean the company and its platform.
When you use any Shule Central product — TeachTab, StudyTab, AmisFiller, Curriculum, Accounts, or Admin — you are agreeing to the data practices described in this policy.
2. What data we collect
We collect data in three categories:
Account data
Name, email address, phone number, and role (teacher, student, admin). This is used for authentication and communication.
School & academic data
Student records, marks, attendance, lesson plans, report cards, subject structures, and curriculum content. This is the operational data your school creates.
Usage data
Which features you use, when you log in, and which actions you perform. This is used to improve the platform and detect suspicious activity. It is never shared with third parties.
We do not collect financial card details directly — payments are processed by a licensed payment provider and we only store transaction references and token balances.
3. How we use your data
To operate the platform
Your data is used to deliver the service — showing teachers their student lists, generating reports, authenticating logins.
To improve the service
Aggregated and anonymised usage patterns help us identify what to improve. No individual school's data is ever used in a way that identifies them.
To communicate with you
We send transactional emails (password resets, account confirmations). We do not send marketing emails without your explicit consent.
To enforce platform integrity
Usage logs help us identify abuse, policy violations, and security incidents.
4. Data isolation between schools
This is the foundation of how Shule Central is built. Every school operates in a completely isolated data partition. This means:
- A teacher at School A cannot see any data from School B — even if they have an account on both.
- Student records, marks, and files are never co-mingled across institutions.
- Database queries are always scoped to the current school's partition.
- Even our own internal staff can only access a school's data for explicit support purposes, and this access is logged.
5. Data storage & location
We prioritise hosting data within Africa. Our primary infrastructure is located in data centres within the region, and we make commercially reasonable efforts to keep school data in-territory.
Some auxiliary services (authentication, email delivery) may involve processing outside Africa. Where this occurs, we ensure those providers operate under appropriate data protection frameworks.
We maintain regular encrypted backups. Backup data is subject to the same access controls as live data.
6. Third-party sharing
We do not sell your data. We do not share school or student data with advertisers, analytics companies, or data brokers.
We use a small number of trusted third-party services to operate the platform:
Authentication (Clerk)
Manages login sessions, password resets, and multi-factor authentication. They do not have access to your academic data.
Payment processing
Licensed payment providers handle token purchases. We only receive transaction confirmations — never raw card details.
Email delivery
A transactional email provider sends password resets and system notifications. They do not have access to your school data.
All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.
7. Student data
Student data receives the highest protection on the platform. Specifically:
- Students' personal information is only visible to their school's authorised staff.
- Parents and guardians can request access to their child's records through the school administrator.
- We never use student data for advertising, profiling, or resale.
- When a student leaves a school, their records remain with the institution unless the institution requests deletion.
8. Your rights
As a school administrator or individual user, you have the right to:
Access your data
Request a copy of any personal data we hold about you.
Correct your data
Update or correct inaccurate personal information at any time through your account settings.
Delete your data
Request deletion of your personal data. For school data, deletion requests must come from the school administrator. Note that some data may be retained for legal or financial compliance.
Export your data
Download your school's data in a standard format at any time from the Admin panel.
Audit access logs
School administrators can view who accessed what data and when, from the Admin dashboard.
9. Security measures
We protect your data through multiple layers of security:
- Encryption in transit: all data between your browser and our servers is encrypted using TLS.
- Encryption at rest: database contents and file storage are encrypted on disk.
- Row-level security: database queries are enforced at the database layer to prevent cross-school data leaks.
- Regular security reviews: we perform periodic security assessments and penetration tests.
- Staff access controls: internal access to production data requires two-factor authentication and is logged.
10. Changes to this policy
We may update this privacy policy when we make significant changes to how we handle data. When we do, we will update the "Last updated" date at the top and notify school administrators by email for material changes.
Continued use of the platform after a policy update constitutes acceptance of the revised policy.
11. Contact us
If you have questions about this policy, want to exercise your rights, or have a data-related concern, contact us at:
Shule Central
privacy@shulecentral.com
Kampala, Uganda