1. Who we are
Ginimeg is responsible for your personal information in Eduspal. Eduspal lets educators create a school or educational centre and invite teachers, students and parents or guardians to join it.
Each school decides what information it adds to Eduspal about its members, such as classes, schedules, assignments and results. For that information, the school is responsible for having a valid reason to use it, and we process it on the school's behalf to provide the service.
2. Information we collect
Information you give us
- Account details: your name, email address, phone number, country and profile photo. If you sign up with an email and password, we store your password only in a securely hashed form.
- Google sign-in: if you choose "Continue with Google", Google shares your name, email address and profile photo with us, along with a sign-in token that confirms your identity. We never see your Google password and we do not access your Gmail, Drive or other Google data.
- School and learning information: the schools you belong to, your role (for example owner, teacher, student or parent), groups and classes, schedules, assignments, your answers and submissions, scores, results and attendance where your school uses these features.
- Messages and support: what you send us when you contact support.
Information collected automatically
- Device information: a device identifier, device type and operating system, used to keep you signed in securely and to deliver notifications to the right device.
- Notification tokens: if you allow notifications, a push token from Apple, Google or Expo so we can send you reminders about schedules, assignments and school activity.
- Time zone: so schedules and reminders show at the correct local time for you.
- Logs: technical records such as IP address, request times and error reports, used to keep the service secure and fix problems.
Information that stays on your device
- Fingerprint and Face ID: if you turn on biometric sign-in, your fingerprint or face is checked by your phone's operating system. We never receive or store your biometric data.
- Saved sign-in details: to make biometric sign-in work, your sign-in details are kept encrypted in your phone's secure storage (iOS Keychain or Android Keystore). They are removed when you turn biometric sign-in off or uninstall the app.
3. How we use your information
- To create and manage your account and sign you in, including with Google.
- To let you create or join schools, accept invitations and use features according to your role.
- To show schedules, assignments and results to the right people in your school.
- To send notifications and reminders you have allowed, and service messages such as one-time codes.
- To keep Eduspal secure, prevent misuse and fix problems.
- To provide support and respond to your requests.
- To improve Eduspal, using information that is aggregated or does not identify you.
- To meet our legal obligations.
4. Our legal bases
Under the Nigeria Data Protection Act 2023 and, where they apply, the UK and EU General Data Protection Regulation, we rely on:
- Contract: to provide the service you or your school signed up for.
- Legitimate interests: to keep Eduspal secure and working well, where this does not override your rights.
- Consent: for push notifications and biometric sign-in. You can withdraw consent at any time in your device or app settings.
- Legal obligation: where the law requires us to keep or share information.
6. International transfers
Eduspal is run from Nigeria and used by people in Nigeria and abroad. Some of our service providers store or process information in other countries, such as the United States or the European Union. When we transfer information internationally, we take steps to make sure it stays protected, such as using providers with appropriate safeguards and contractual protections.
7. How long we keep information
We keep your account information for as long as your account is active. When you delete your account, we delete or anonymise your personal information within 30 days, except where we must keep it longer to meet a legal obligation, resolve a dispute or enforce our terms. Copies in backups are removed within a further 90 days.
Records that belong to a school, such as results and attendance, may be kept by that school in line with its own record-keeping duties.
8. Your rights and choices
Depending on where you live, you can ask us to:
- give you a copy of your personal information;
- correct information that is wrong or incomplete;
- delete your information or your account;
- restrict or object to how we use your information;
- send your information to you or another service in a portable format;
- withdraw consent you have given.
You can update most profile details in the app. For anything else, email support@ginimeg.com from the email address on your account. We may need to confirm your identity and will reply within 30 days.
You can turn off notifications and biometric sign-in at any time in the app or in your device settings.
9. Deleting your account
To delete your Eduspal account and the personal information linked to it, email support@ginimeg.com from the email address on your account with the subject "Delete my account". We will confirm when it is done. See How long we keep information for what happens next.
10. Children and students
Eduspal is used by schools, so some users may be under 18. Students under 18 should use Eduspal only through a school that has invited them, and with the permission of a parent or guardian. Schools that invite students are responsible for getting any consent required by law.
We use students' information only to provide Eduspal to their school. We do not use it for advertising or to build marketing profiles. If you believe a child's information has been added without proper consent, contact support@ginimeg.com and we will review and, where appropriate, delete it.
11. Security
We protect your information with measures such as encrypted connections (HTTPS), hashed passwords, access controls that keep each school's data separate, and encrypted storage on your device for saved sign-in details. No system is completely secure, so please keep your password private and tell us straight away if you think your account has been compromised.
12. Changes to this policy
We may update this policy from time to time. We will change the effective date at the top, and if the changes are significant we will let you know in the app or by email before they take effect.
13. Contact us and complaints
For questions about this policy or your information, email support@ginimeg.com. You can also read our Terms of Service.
If you are not happy with our response, you can complain to the Nigeria Data Protection Commission (NDPC). If you live in the UK or the European Union, you can also contact your local data protection authority, such as the Information Commissioner's Office (ICO) in the UK.