Privacy Policy

Score360 ("we," "our," or "us") is committed to protecting your privacy and handling your personal data with integrity, transparency, and care. This Privacy Policy describes our data practices across all our services, platforms, events, and facilities.

This policy applies to all users of our services: students, educators, school administrators, parents, event participants, innovation hub members, and website visitors.

This Privacy Policy applies to personal data collected through:

• Our websites and web applications
• Our mobile applications (iOS and Android)
• Our educational platforms and learning management systems
• Physical spaces including our Innovation Hub
• Events, competitions, hackathons, and workshops
• Direct communications (email, phone, live chat)
• Third-party integrations and partners

We collect the following categories of personal information:

3.1 Identity & Contact Information

• Full name, date of birth, gender
• Email address, phone number, postal address
• Profile photograph (where provided)
• School name, class level, and academic year

3.2 Account & Authentication Data

• Username and encrypted password
• Login timestamps and access logs
• Device information and IP addresses
• Authentication tokens and session data

3.3 Learning & Performance Data

• Assessment results, scores, and progress data
• Time spent on topics, questions, and activities
• Learning patterns, strengths, and areas for improvement
• AI-generated insights and personalised recommendations

3.4 Payment Information

• Transaction history and billing details
• Payment method (type only, not full card numbers)
• Subscription status and renewal dates

3.5 Device & Technical Data

• Device type, operating system, and browser
• IP address and approximate location (country/city)
• Cookies, usage logs, and analytics data
• App version and crash reports

3.6 Communications Data

• Messages sent to our support team
• Feedback, survey responses, and reviews
• Event registration details and attendance records

We collect personal information through the following methods:

• Directly from you when you create an account, complete a form, or contact us
• Automatically when you use our Platform (via cookies and analytics tools)
• From schools or institutions that register users on your behalf
• From third-party authentication providers (e.g., Google Sign-In)
• From payment processors when you make a transaction
• During events, competitions, or in-person activities

We process your personal data on the following legal bases in accordance with the NDPA 2023:

• Consent: where you have given explicit permission for specific processing activities
• Contract: where processing is necessary to deliver services you have requested
• Legitimate interests: where we have a legitimate business reason that does not override your rights
• Legal obligation: where we are required to process data to comply with applicable laws
• Vital interests: where processing is necessary to protect life or safety

We use the personal information we collect to:

• Create, manage, and maintain your account
• Deliver personalised learning experiences and adaptive assessments
• Generate AI-powered insights, recommendations, and study plans
• Process payments and manage subscriptions
• Send important service updates, notifications, and alerts
• Provide customer support and respond to enquiries
• Improve our platforms, products, and services through analytics
• Ensure platform safety, security, and fraud prevention
• Comply with legal obligations and regulatory requirements
• Communicate about events, updates, and relevant educational opportunities (with your consent)

Score360 uses artificial intelligence and automated technologies to enhance learning outcomes. Our AI systems analyse your performance data to:

• Identify knowledge gaps and learning patterns
• Generate personalised study plans and topic recommendations
• Predict exam readiness and estimate likely performance ranges
• Adapt question difficulty and content based on your progress
• Provide real-time feedback during practice sessions

AI-generated insights are intended to support, not replace, human judgement. We are committed to responsible AI use, including transparency, fairness, and non-discrimination. You have the right to request human review of significant AI-based decisions affecting you.

We use cookies and similar tracking technologies to improve your experience on our Platform. These include:

• Essential cookies: required for core functionality (e.g., authentication, session management)
• Analytics cookies: to understand how users interact with our Platform
• Preference cookies: to remember your settings and personalisation choices
• Marketing cookies: used only with your explicit consent for relevant advertising

You can manage your cookie preferences through your browser settings or via our Cookie Preference Centre. Note that disabling essential cookies may affect Platform functionality.

We do not sell your personal data. We may share your information in the following circumstances:

• With service providers who assist us in delivering our services (under strict data processing agreements)
• With schools or institutions you are enrolled with, for academic monitoring purposes
• With parents or guardians of minor users, where required by law or consent
• With payment processors for transaction handling
• With regulatory authorities or law enforcement where required by law
• With professional advisers (legal, accounting, auditing) under confidentiality obligations
• In connection with a merger, acquisition, or business restructuring (users will be notified)

We take children's privacy seriously. For users under the age of 13, we require verifiable parental or guardian consent before collecting or processing their personal data.

• We do not display targeted advertising to users under 18
• We apply enhanced privacy protections for all minor users
• Schools that register students take on responsibility for ensuring appropriate consent
• Parents and guardians may request access to, correction of, or deletion of their child's data at any time

To exercise parental rights, contact us at privacy@schoolville.com.

Score360 implements robust technical and organisational security measures to protect your personal data from unauthorised access, disclosure, loss, or destruction. These include:

• End-to-end encryption for sensitive data in transit and at rest
• Secure password hashing and salting
• Multi-factor authentication options for accounts
• Regular security audits and penetration testing
• Access controls and role-based permissions for staff
• Incident response procedures and breach notification protocols

While we take reasonable precautions, no system can guarantee absolute security. We encourage you to use strong passwords and to report any suspicious activity to privacy@schoolville.com.

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, or as required by law. Our retention periods are:

• Active account data: Retained for the duration of your account and up to 2 years after closure
• Learning and performance data: Retained for up to 5 years to support long-term academic tracking
• Payment records: Retained for 7 years as required by Nigerian financial regulations
• Event records: Retained for up to 3 years following the event
• Support communications: Retained for up to 2 years

You may request deletion of your data at any time, subject to any legal obligations we have to retain it.

Our primary data storage and processing infrastructure is located in Nigeria. Where we transfer data to service providers outside Nigeria, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the Nigeria Data Protection Commission (NDPC)
• Transfers only to countries with adequate data protection standards
• Contractual obligations on overseas processors to maintain equivalent protections

Under the NDPA 2023 and applicable data protection law, you have the following rights:

• Right of access: request a copy of your personal data we hold
• Right to rectification: correct inaccurate or incomplete data
• Right to erasure: request deletion of your data (subject to legal retention obligations)
• Right to portability: receive your data in a structured, machine-readable format
• Right to object: object to specific processing activities
• Right to restrict processing: request that we limit how we process your data
• Right to withdraw consent: withdraw consent at any time without affecting lawfulness of prior processing
• Right not to be subject to solely automated decisions: request human review of significant automated decisions

To exercise any of these rights, contact us at privacy@schoolville.com. We will respond within 30 days.

Our Platform may contain links to third-party websites, tools, or services. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.

Third-party services we integrate with may have their own data collection practices. We select partners carefully and require them to maintain appropriate data protection standards.

Score360 events may be photographed or recorded. Images and recordings may be used for educational, promotional, or documentary purposes.

• Consent for media use is obtained separately at event registration
• Participants may opt out of photography and recording at any time
• Minor participants require parental/guardian consent for media use
• Requests for removal of media featuring you should be sent to privacy@schoolville.com

Access to personal data within Score360 is restricted to employees and contractors who need it to perform their job functions. All staff with access to personal data:

• Are trained on data protection obligations and best practices
• Are subject to confidentiality agreements
• Have access permissions regularly reviewed and updated
• Are required to report potential data incidents immediately

In the event of a personal data breach, Score360 will:

• Investigate the breach immediately and contain any ongoing risk
• Notify the Nigeria Data Protection Commission (NDPC) within 72 hours where required
• Notify affected users promptly with information about the breach and steps they can take
• Document the breach and all remedial actions taken
• Review and strengthen security measures following any incident

You retain ownership of any content you create or submit on our Platform. By submitting content, you grant Score360 a non-exclusive, royalty-free licence to use, display, and adapt it within our Services.

We will not use your content for purposes beyond our educational services without your explicit consent.

Score360 is registered and compliant with applicable Nigerian regulatory frameworks, including:

• Nigeria Data Protection Commission (NDPC), as a Data Controller and Data Processor
• National Information Technology Development Agency (NITDA)
• Federal Competition and Consumer Protection Commission (FCCPC)
• Central Bank of Nigeria (CBN), for payment processing compliance

We are committed to making our privacy notices and controls accessible to all users, including those with disabilities. If you require this Privacy Policy in an alternative format, please contact us at privacy@schoolville.com.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. When we make significant changes, we will:

• Notify you via email or in-app notification
• Update the "Last Updated" date at the top of this policy
• Provide at least 14 days' notice before major changes take effect

Your continued use of our Services after the effective date of the updated policy constitutes your acceptance of the changes.

For privacy-related enquiries, to exercise your rights, or to raise a concern, please contact our Data Protection Officer:

This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR). Any disputes relating to this Privacy Policy shall be resolved in accordance with Nigerian law.

By using Score360's services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection and use of your personal data as described herein. You further acknowledge that this policy is a binding agreement regarding how your data is handled.

Your privacy and trust are at the heart of everything we do at Score360. We are committed to maintaining the highest standards of data protection, transparency, and user control.

If you have any concerns about how your data is handled, please do not hesitate to reach out. We are here to help.

The Score360 Team