Who we are and our role
SchoolMind AI is a school-management product operated by benik solutions ("benik", "we", "us"), based in Lagos, Nigeria. This Privacy Policy explains how personal data is handled in SchoolMind AI.
For the data a school enters into SchoolMind AI about its pupils, guardians and staff, the school is the data controller and benik acts as its data processor, handling that data only on the school’s documented instructions. This policy is written to be consistent with the Nigeria Data Protection Act, 2023 (the "NDPA") and any regulations or guidance issued by the Nigeria Data Protection Commission ("NDPC").
Information processed in SchoolMind AI
- School and account data: school name, branch details, administrator and staff names, emails, phone numbers and roles;
- Pupil data provided by the school: names, admission numbers, class, date of birth, gender, guardian contact details, attendance, behaviour, results, health records, ID photographs and similar records;
- Payment data: fee and invoice records; card and bank payment details are collected and processed directly by our payment provider (Paystack), not stored by us;
- Usage data: log, device and activity data used to secure and operate the service.
Children’s data
SchoolMind AI necessarily contains data about children because schools use it to manage pupils. We process this data solely to provide the service to the school. The school is responsible for having the appropriate legal basis, notices and, where required, parental consent for entering pupil data into the system.
How data is used
- To provide, maintain, secure and support the SchoolMind AI service for the school;
- To power features the school chooses to use, including announcements over WhatsApp and SMS, results and report cards, fee tracking, and AI features such as exam proctoring, result remarks and payment matching;
- To process the school’s subscription and payments;
- To comply with legal obligations.
We do not use pupil or school data for our own advertising, and we do not sell personal data.
AI features
Some features use automated processing to assist staff, for example flagging possible exam-proctoring events or suggesting result remarks. These outputs are aids for school staff, who remain responsible for decisions. AI features operate on the school’s data to deliver the service and are not used to build unrelated profiles.
Sub-processors we use
We engage trusted providers to deliver the service under contract, including:
- Amazon Web Services – secure cloud hosting (EU, Ireland region);
- Paystack – card and bank payment processing;
- WhatsApp and SMS providers – delivery of announcements and reminders the school sends;
- Tawk.to – support live chat.
International transfers
Our infrastructure is hosted in the Amazon Web Services Europe (Ireland) region, so data may be processed outside Nigeria. We rely on appropriate contractual and technical safeguards to protect the data consistent with the NDPA.
Retention and deletion
We retain data for as long as the school’s account is active and as needed to provide the service. On termination, the school may export its data, after which we delete or anonymise it within a reasonable period, except where retention is required by law.
Security
We protect data using encryption in transit, role-based access controls, isolated per-school records and reputable cloud infrastructure. No system is completely secure, but we work to protect the data entrusted to us.
Data-subject rights
Pupils, guardians and staff have rights under the NDPA, including access, correction and deletion. Because the school is the controller of pupil and staff records, please direct such requests to your school in the first instance; we will assist the school in responding. You may also contact the NDPC.
Changes to this policy
We may update this policy from time to time. The "Last updated" date above shows the latest revision.