Company Logo

Loading...

Privacy & Data Protection

Privacy Policy

How Alpha Junior Academy collects, uses, protects, and manages information across our school management system and mobile application.

Last updated October 11, 2026
School management system & mobile app

Your information matters

This policy explains what information our school system collects, why it is needed, who may receive it, and the rights available to account holders.

10 Policy sections
01

Scope

Who this covers

Alpha Junior Academy runs a school management system (web and the My Alpha Companion mobile app) used by our staff, teachers, students, and parents/guardians. This policy explains what information the system collects, why, and what control you have over it. It applies whether you're a member of staff, a parent, or a student account holder.
02

Data collection

Information we collect

Account & identity

Name, email, phone number, gender, date of birth, role, and profile photo/bio where provided.

Academic & welfare records

Enrolment, classroom, attendance, marks and exam results, homework, discipline and welfare records, and awards — recorded by staff as part of running the school.

Financial records

Fee invoices, payments, and balances. Payments made via bank or mobile-money paybill are processed by the relevant bank/mobile-money provider — we store the transaction record, not your card or mobile-money PIN.

Location

We use your device's location only in the moment, for a specific reason — never continuously, and never in the background.

  • Transport tracking — while a school vehicle is on a live run, its driver's GPS location is shared with the relevant parents and transport staff, for safety and coordination. This stops the moment the trip ends.
  • Attendance verification — when a staff member taps "Scan" to record their own attendance, we check their location once to confirm it's being recorded from school grounds.
  • On-site-only actions — entering exam marks or recording a payment may require confirming you're physically at school before the action is allowed, where a school has enabled this.
  • School setup — an administrator configuring the school's location boundary can use their current position to set it.

Communications

SMS and email sent through the system (fee reminders, announcements, feedback), and messages you send us directly. If you asked us about admissions, a visit or a job, we may later send you adverts or invitations by email or text. Every one ends with a link to opt out; when you use it we keep your email address and phone number on a list so that we never advertise to them again. The phone app can also show notifications (announcements, fee notices, trip updates and similar): you can switch each kind off in the app’s settings, apart from emergency alerts, and we note when a notification was opened — only to count how many people it reached — and never read anything else on your phone. Every Sunday morning parents also get a weekly report by email and phone notification: each of their children’s attendance and school-bus journeys for the week, then the school’s news and next week’s events. It holds only your own children’s information, and you can switch it off in your profile, in the app’s notification settings or with the link at the bottom of the email. Messages about your child — fees, attendance and safety — are not adverts and still reach you. If you apply for a job, we keep your CV, cover note and answers privately, only for the people choosing for that job; each time a CV is opened it is recorded. We delete the CV, cover note and answers of anyone who was not appointed six months after the vacancy closes — ask us sooner and we will remove them.

Device & security

Login sessions, device/browser information, and security events (sign-ins, password changes) — kept to protect your account and detect unauthorized access. Passwords are stored scrambled, so nobody at the school can read yours. When an account is created for you we send a temporary, randomly generated password by email or text message, and you must replace it with your own the first time you sign in; the system also refuses well-known passwords such as “password”. A lock-screen PIN is optional, and if you set up a PIN or passkey, only a secure credential is stored, never a readable copy of your biometric data (biometric matching happens on your own device).

03

Purpose

How we use it

Running day-to-day school operations: admissions, attendance, academics, discipline, and welfare.

Billing and recording fee payments, and sending payment/fee reminders.

Coordinating school transport and keeping parents informed of pickup/drop-off.

Sending communications you'd reasonably expect from your school (SMS, email, in-app notifications).

Keeping the system secure — detecting suspicious logins and enforcing access controls.

Meeting legal, financial, and regulatory record-keeping obligations.

We do not sell personal information, and we do not use student data for advertising.

04

Children

Children's data

Student records are created and managed by the school and, where relevant, a parent/guardian — not submitted directly by children. Access to a student's records is limited to the school staff who need it and to that student's own parent/guardian account. We collect no more than is needed to educate and safeguard the child.
05

Disclosure

Who we share it with

We share information only where it's needed to run the service:

1

SMS & email delivery

Our messaging provider, to deliver the messages you're sent.

2

Payment processing

Banks and mobile-money providers, to process the payment you initiate.

3

Sign-in

Google, only if you choose to sign in with a Google account.

4

Legal requirements

Where disclosure is required by law or to protect the safety of a student or staff member.

We never sell or rent personal information to third parties for marketing.

06

Retention

How long we keep it

We keep records for as long as you're active with the school, and afterwards for as long as we're legally or financially required to (academic transcripts, financial records, safeguarding records).

Staff and parent accounts can request deletion of their own personal account data at any time. Details of that process — including what's removed and what's retained for legal/safety reasons — are on our Data Deletion page.

07

Your rights

Your rights

Under Kenya's Data Protection Act, 2019, you have the right to:

  • ✓ Know what personal data we hold about you and why.
  • ✓ Ask us to correct inaccurate or incomplete data — most of your own profile fields can be edited directly in your Profile page.
  • ✓ Request deletion of your personal account data, subject to our legal retention obligations.
  • ✓ Object to certain processing, and lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya.
08

Protection

Security

Security controls are built into account access and system operations.

Access to the system requires a password (and, optionally, a PIN, passkey, or one-time code for sensitive actions), and staff access is limited by role — a teacher, for example, does not see finance or HR records.

Passwords are stored using industry-standard one-way hashing; we never store your password in a form we could read. Traffic between your device and our servers is encrypted.

09

Technology

Cookies & app storage

The web app uses a session cookie to keep you signed in and remember basic preferences like dark mode — we don't use third-party advertising or tracking cookies. The mobile app stores your login session securely on your device.
Counting visits to the public website. So the school can see which pages are useful and which adverts bring in enquiries, the public pages of this website give your browser a random number and remember it — in the browser, and in a first-party cookie kept for about a year. The number is not linked to your name, and we keep no IP address, no device fingerprint and nothing that says who you are: only the number, the pages opened, where you came from (for example a search engine or one of our adverts), and whether you used a phone or a computer. The same number lets a popup on the website avoid showing itself to you again and again. If you send us an enquiry, it is linked to that number so the school can see what led you to write. Nothing is recorded for anyone signed in, for search engines, or for a browser that sends "Do Not Track" or "Global Privacy Control". Records are removed after 400 days. Clearing your browser's data removes the number.
Sign-in and verification codes. When we text you a code, the message ends with this website's address and the code so your phone can offer to fill it in. On Android, your phone — not us — asks whether to let the site or the app read that one message, and nothing is read unless you agree. The app and website look at your clipboard only at the moment you tap "Paste code", only to look for the code, and do not keep or send what is on it. We never read your other messages.
10

Updates

Changes to this policy

If we make a material change to how we handle your data, we'll update this page, revise the "last updated" date above, and ask you to read and confirm a short summary of the new version the next time you sign in.
Questions?

Have a question about your data?

If you have questions about this policy or how your information is handled, our team is here to help.

Contact Us