Privacy notice
Last updated 17 October 2026
Adalin SchoolHub is school management software made by Adalin Technologies. This notice explains what personal data is held in it, who is responsible for it, and the rights of the parents, students and staff it is about, under the Nigeria Data Protection Act 2023 (NDPA).
1. Who is responsible
Each school decides what data it keeps about its students, parents and staff, and why. The school is the data controller. Adalin Technologies stores and processes that data for the school, only on its instructions, as its data processor, under a data processing agreement every school accepts. For the accounts of school owners and for running our own business (billing schools, support), Adalin Technologies is the controller.
Questions about a school's records should go to the school first. You can also write to us at privacy@adalintech.com.
2. What is held
- Students: name, date of birth, gender, class, admission number, photo, attendance, scores and results, behaviour and health records the school chooses to keep, fees and payments.
- Parents and guardians: name, phone number, email, relationship to the child, and messages with the school.
- Staff: name, contact details, role, attendance, leave and, where the school uses payroll, pay and bank details.
- Everyone who signs in: sign-in details (passwords are stored only as a one-way hash), devices and times of sign-in, and a record of important actions for security.
3. Children's data
Most records in Adalin SchoolHub are about children. Schools collect them as part of educating and caring for the child, and parents give consent on the school's admission form. Children's data is never sold, never used for advertising, and never shown to anyone outside the child's school except the service providers listed below, who handle it only to run the service.
4. How it's protected
Every school's records are walled off from every other school's in the database itself. Data is encrypted in transit and at rest. Staff see only what their role allows. Adalin Technologies staff cannot see inside a school unless the school's proprietor opens access for support, for a limited time, and everything they do is recorded in the school's own activity log.
5. Service providers
We use these companies to run Adalin SchoolHub. Some are outside Nigeria; transfers rely on the safeguards the NDPA allows, including contractual protections.
| Provider | What for | Where |
|---|---|---|
| Neon | Database hosting | European Union |
| Vercel | Application hosting | European Union and global edge network |
| Resend | Sending email | United States |
| Termii | Sending SMS | Nigeria |
| Paystack | Fee and subscription payments | Nigeria |
| Cloudinary | Storing logos, photos and signatures | United States |
| Cloudflare | Storing documents and learning materials | Global |
| Google and Microsoft | Sign-in, only for people who choose it | Global |
6. How long it's kept
| Signed-out and expired sessions | 30 days after they expire |
| Failed sign-in attempts | 30 days |
| Password reset links | 7 days after they're used or expire |
| Text of SMS and email messages sent | 180 days (the record that a message was sent stays) |
| In-app notifications | 1 year |
| Webhook delivery records | 90 days |
| Unfinished online payments | 90 days |
| School records (students, results, fees and the rest) | While the school uses Adalin SchoolHub; deleted within 90 days of the account closing, after the school has had the chance to download everything |
7. Your rights
Under the NDPA you can ask for a copy of the data held about you or your child, have it corrected, object to its use, ask for it to be deleted where the law allows, and take it elsewhere. Ask the school; it can download everything it holds about a person from Adalin SchoolHub for you. If you aren't satisfied, you can complain to the Nigeria Data Protection Commission.
8. If something goes wrong
If personal data is ever exposed, we tell the affected schools straight away, and the school and we notify the Nigeria Data Protection Commission within 72 hours where the law requires it.