Edurena is a tool for schools. Schools subscribe and manage their own students and teachers. We process data on behalf of schools, not directly from students or parents. This policy explains what we collect, why, and how we protect it.
This policy applies to all users of the Edurena platform, including school administrators, teachers, and students accessing the platform through a school account. It is governed by the Nigeria Data Protection Regulation (NDPR) 2019.
School administrators: Name, email address, school name, and payment details (processed by Paystack — we do not store card numbers).
Teachers: Name and email address, provided by the school administrator.
Students: Name and any identifiers added by the school (such as a student ID). Students do not create accounts directly.
Exam data: Answers submitted during assessments, scores, timing, and assessment results.
Proctoring data: When a school enables proctored exams, the platform captures images from the student's device camera during the exam session. These images are used solely to detect integrity violations and are stored securely.
Usage data: Standard server logs including IP addresses, browser type, and pages visited. This is used for security and platform improvement only.
We do not sell your data to third parties. We do not use student data for advertising.
All platform data is stored in Supabase, a cloud database provider. Data is encrypted at rest and in transit. Supabase infrastructure operates in data centres with industry-standard physical and logical security controls.
Transactional emails (such as account creation and login details) are sent via Brevo (formerly Sendinblue), a compliant email service provider.
Payment processing is handled by Paystack, a PCI-DSS compliant payment processor. Card data never passes through or is stored on Edurena's servers.
The proctoring feature captures images from a student's camera during an exam. This constitutes biometric data under Nigerian law. Schools are responsible for obtaining appropriate consent from students (and parents or guardians for students under 18) before enabling proctored exams.
Proctoring images are stored securely and are accessible only to authorised school administrators and teachers for the purpose of reviewing exam integrity. They are not shared with third parties.
Active subscription data is retained for the duration of the subscription plus 90 days after expiry, during which the school can request an export. After 90 days post-expiry, account and student data may be permanently deleted.
Payment records are retained as required by applicable financial regulations.
You may request deletion of your data at any time by contacting us at hello@edurena.online.
Under the Nigeria Data Protection Regulation, you have the right to:
To exercise any of these rights, contact us at hello@edurena.online. We will respond within 30 days.
Edurena is designed for schools and does not collect data directly from children. Student data is added to the platform by school administrators, who are responsible for ensuring appropriate consent and legal basis for processing student data, particularly for students under 18.
We may update this Privacy Policy. When we do, we update the date at the top of this page. Significant changes will be communicated via email to active account holders.
For any privacy-related questions, requests, or concerns, contact us at hello@edurena.online.