Privacy policy
Last updated 27 Oct 2026
Schools trust us with their children's records. This is how we look after them, and everyone else's data, in plain words.
1. Who we are
Qyskul is school management software made by Qynix Limited (“we”, “us”), a company registered in Nigeria. This policy explains what personal data we handle, why, and the choices and rights you have. It follows the Nigeria Data Protection Act 2023 (NDPA) and the regulations and guidance of the Nigeria Data Protection Commission (NDPC).
2. Our role: schools are in charge of their records
When a school uses Qyskul, the school decides what records to keep about its students, parents and staff and what to do with them. For that data the school is the data controller and we are its data processor: we hold and process it only to provide Qyskul to the school, following the school's instructions and our agreement with it.
If you are a parent, student or staff member and have a question about your records, please contact your school first. We will help the school answer you.
We are the data controller for the data we collect for ourselves: visitors to this website, people who ask us for a demo, school owners and administrators as our customers, and billing records.
3. What we collect
From this website and when you contact us: your name, school, role, phone number, email address and what you tell us; and basic technical data such as your browser, device and IP address. If you agree to analytics cookies, also how you use the website (see our Cookie policy).
For schools using Qyskul (as their processor), depending on what the school uses:
- Students: name, gender, date of birth, photo, class, admission number, attendance, scores, results, homework, test answers, fees and payments, and where the school records them, health, pick-up, transport, hostel and counselling information.
- Parents and guardians: name, relationship, phone number, email and the payments they make.
- Staff: name, contact details, job, classes taught, and where the school uses payroll, pay, bank details, tax and pension information, and leave.
- Sign-in data for everyone: username or phone number, a securely hashed password (we never see the password itself), sign-in times, IP address and device, and a log of important actions.
4. Children's data
Most students are children. Their data is collected by their school, which is responsible for having a lawful basis for it, including the consent of a parent or guardian where the law requires it. We only use children's data to run Qyskul for their school. We never sell it, never use it for advertising, and never use it to build profiles for anyone else.
Inside a school, each person sees only what their role allows: parents see their own children, and sensitive information such as health and counselling notes is limited to the staff the school chooses. Children's records are kept in our own database and are not sent to the AI lesson-note helper.
5. Why we use personal data, and our lawful bases
- To provide Qyskul to schools: under our contract with the school, and on the school's instructions as its processor.
- To answer enquiries, set schools up and support them: to take steps you asked for before a contract, and to perform it.
- To bill schools and keep accounts: to perform our contract and to meet our legal obligations, such as tax.
- To keep Qyskul secure, prevent fraud and fix problems: our legitimate interest in a safe, working service.
- To send texts and emails a school has turned on (absence alerts, results, fee reminders): on the school's instructions.
- Website analytics: only with your consent, which you can withdraw at any time.
7. Data outside Nigeria
Some providers, such as cloud, email or AI services, may process data outside Nigeria. When that happens we make sure it is protected as the NDPA requires, for example by contractual safeguards with the provider, and we keep transfers to what is needed.
8. How long we keep it
- School records: for as long as the school uses Qyskul. When a school leaves, it can ask us for a copy of its records, and we delete them within a reasonable period afterwards unless the law requires us to keep them.
- Enquiries from this website: up to 2 years after our last contact, unless you become a customer.
- Billing records: as long as tax and accounting law requires.
- Security logs: as long as needed to keep accounts safe and investigate problems.
9. How we protect it
Data is encrypted in transit (HTTPS), passwords are hashed, each person sees only what their role allows, our own staff must use two-factor authentication, and important actions are logged with who did them and when. Read more on our Security page.
If a personal data breach happens that is likely to put people at risk, we will tell the affected school without undue delay so it can act, and notify the NDPC where the law requires it.
10. Your rights
Under the NDPA you have the right to:
- be told how your data is used (this policy);
- get a copy of your data;
- have it corrected if it is wrong, or deleted;
- restrict or object to how it is used;
- receive it in a format you can take elsewhere;
- withdraw consent where we rely on it;
- not be subject to decisions based solely on automated processing that significantly affect you (we don't make such decisions).
For school records, ask your school, which controls them. For anything else, contact us using the details below. We reply within the time the law allows. You can also complain to the Nigeria Data Protection Commission.
12. Changes to this policy
We may update this policy as Qyskul or the law changes. We will post the new version here with its date, and tell schools about important changes.
13. Contact us
For privacy questions, requests or complaints, contact our data protection contact at Qynix Limited:
- Email: privacy@qyskul.com