Privacy Policy

1. Who we are

Educore is operated by MaveriQ Technologies. In data-protection terms, your School is typically the data controller for student and parent data, and Educore acts as a data processor handling that data on the School's instructions, in line with the Kenya Data Protection Act, 2019.

2. Data we process

• Student data: names, admission numbers, class, attendance, marks and report cards.
• Parent/guardian data: names, phone numbers and email for communication and fee statements.
• Staff data: accounts and role information for teachers and administrators.
• Payment data: fee transactions and references needed to record and reconcile payments.

3. Children's data

We treat children's personal data with heightened care. It is processed only to deliver the Services the School has engaged us for — never sold, never used for advertising. Schools are responsible for obtaining appropriate parental consent.

4. How data is used

To provide and secure the Services, process fee payments, generate reports, communicate on the School's behalf, and meet legal obligations.

5. Sharing

We share data only with service providers needed to run the Services (such as SMS and payment partners), within the MaveriQ group under safeguards, and with authorities where required by law. We do not sell personal data.

6. Security & retention

Data is encrypted in transit and at rest, with role-based access controls. We retain data for as long as the School requires the Services and as needed to meet legal obligations, then delete or anonymise it.

7. Rights

• Parents and staff may request access to or correction of their data via the School.
• Complaints may be raised with the Office of the Data Protection Commissioner.

8. Contact

For privacy questions, email privacy@educore.ke.