1.Overview
This Privacy Policy explains how Novalss Technology Solutions (“Skula”, “we”, “us”) collects, uses, shares and protects personal data when a school uses the Skula platform. It applies to school administrators, staff, students and parents/guardians whose data is processed through Skula.
We take the privacy of children’s and families’ data seriously and only process it to provide the school management service.
2.Who controls the data
Each school is the data controller of the student, staff and parent records it enters into Skula — it decides what data to collect and why. Skula acts as the data processor, handling that data on the school’s behalf and under its instructions.
For the school’s own account information and our website, Skula is the controller.
3.What we collect
Account data: school name, administrator name, email, phone and login credentials.
School records you enter: student, staff and parent details (e.g. names, contact details, dates of birth, guardian information), attendance, fees, exam results, payroll and related academic data.
Payment data: handled by third-party payment processors — we do not store full card details.
Technical data: IP address, device/browser type and basic usage logs, used to keep the service secure and working.
4.How we use data
To provide and operate the platform, authenticate users, and deliver the features each school enables.
To send service messages (e.g. fee receipts, notices) on the school’s instruction, and to provide support.
To secure the service, prevent abuse, back up data, and meet legal obligations.
We do not sell personal data, and we do not use student data for advertising.
6.Security
Data is encrypted in transit, access is restricted, and each school’s data is isolated. We take regular backups. No system is perfectly secure, but we work to protect your data using industry-standard measures.
7.Data retention
We keep school data for as long as the account is active. If a school closes its account, we delete or anonymise its data within a reasonable period, except where we must retain certain records to meet legal obligations. Schools can request export or deletion at any time.
8.Children’s data
Skula is used by schools to manage records that include minors. This data is provided by the school, not collected directly from children. Schools are responsible for obtaining any consent required from parents or guardians under applicable law. Parents/guardians can ask their school to review, correct or remove a child’s data.
9.Your rights
Subject to applicable law, individuals may request access to, correction of, or deletion of their personal data, and may object to or restrict certain processing. Because schools control their records, such requests are usually made to the school; we assist schools in fulfilling them. School account holders can contact us directly.
11.International data hosting
Our hosting and service providers may store or process data in data centres located outside Ghana. Where this happens, we take steps to ensure your data remains protected to a comparable standard.
12.Changes & governing law
We may update this Policy from time to time; the current version is always available here with the “last updated” date above. This Policy is governed by the laws of the Republic of Ghana, including the Data Protection Act, 2012 (Act 843).