Last Updated: January 08, 2026
At Edustream, we take the privacy of educational communities seriously. This Privacy Statement explains how we collect, use, disclose, and safeguard personal information when you use our cloud-based school management platform, mobile applications, and official website (collectively, the "Service").
For the vast majority of information handled by Edustream—such as student grades, attendance, and disciplinary records—the educational institution (the school or district) is the Data Controller. Edustream acts strictly as a Data Processor.
This means we handle student, parent, and staff data solely under the direction of the school and in accordance with our agreement with them. If you are a parent or student with questions about how your school manages your information, please contact your school administration directly.
We collect information in three ways: directly from your school, directly from users, and automatically through system usage.
Student Information: Names, student ID numbers, dates of birth, grade levels, classes, academic performance, grades, and attendance records.
Parent/Guardian Information: Names, contact details (email addresses, phone numbers, physical addresses), and relationship to the student.
Staff/Teacher Information: Names, professional emails, employment details, and classroom assignments.
Communication Data: Messages, announcements, or notifications sent between teachers, parents, and students within our secure portal.
When users access Edustream, our servers automatically log certain data to ensure security and system optimization:
Log Files: IP addresses, browser types, device operating systems, and access timestamps.
Device Information: Unique device identifiers when accessing the system via our mobile application.
Cookies: We use essential cookies to maintain user sessions and secure logins. We do not use tracking or advertising cookies within the student application portal.
We use the collected information strictly to deliver, maintain, and improve the educational service. Specifically, we use it to:
Authenticate user identities and provide secure access to portal accounts.
Process and display student grades, report cards, and attendance records.
Facilitate administrative communications between schools, teachers, parents, and students.
Provide technical support and diagnose software performance bugs.
Ensure data security and prevent fraudulent access to school networks.
No Advertising: We do not sell or rent student data to third parties. We never use student data for targeted advertising or behavior tracking.
No Data Mining: We do not build marketing profiles based on student performance or user interactions.
We only share personal information under the following tightly controlled circumstances:
With the School's Authorization: Data is shared entirely inside the school’s ecosystem (e.g., sharing a student's grades with their designated parent or guardian).
With Trusted Service Providers: We use trusted cloud infrastructure providers (like AWS, Google Cloud, or Microsoft Azure) to host our software. These sub-processors are legally bound by strict data protection contracts and cannot use the data for any other purpose.
For Legal Compliance: We may disclose information if required to do so by law, court order, or a valid government subpoena.
Business Transfers: If Edustream undergoes a merger or acquisition, student data will remain protected under the same privacy commitments, and schools will be given advance notice to export or delete their data if they object to the transfer.
Edustream is designed to comply with international standards regarding student data and user privacy, including:
FERPA (Family Educational Rights and Privacy Act): We protect student education records and act as a "school official" with legitimate educational interests.
COPPA (Children’s Online Privacy Protection Act): We do not knowingly collect personal information directly from children under 13 without verified institutional or parental consent through the school.
GDPR / NDPR / Local Data Protection Acts: Depending on where your school operates, users may have rights to access, correct, delete, or restrict the processing of their personal data. For school-managed data, these rights must be exercised through the school administration.
We implement rigorous administrative, physical, and technical safeguards to protect data from unauthorized access, loss, or alteration. This includes:
Full data encryption in transit (using HTTPS/TLS) and at rest.
Regular security audits and vulnerability scanning.
Strict internal access controls limiting data visibility only to employees who need it for technical support.
We retain personal data only as long as necessary to fulfill the educational purposes of the school. When a school terminates its contract with Edustream, all associated institutional data is permanently deleted or anonymized within sixty (60) days, unless a different timeline is requested by the school or required by local archives laws.
We may update this Privacy Statement periodically to reflect changes in our technology or legal requirements. If we make material modifications that lower your privacy protections, we will notify schools via email and display a prominent alert inside the application dashboard at least thirty (30) days before the changes take effect.
If you have any questions, concerns, or requests regarding this Privacy Statement or how Edustream handles data safety, please reach out to us at:
Edustream Data Protection Officer
Email: hello@edustream.ng
Mailing Address: 29A Jide Agbalaya Crescent, Chevyview Estate, Lekki. Lagos State.