Privacy Policy

Who We Are

Clarity Edge is a school management SaaS platform for Nigerian private schools, operated by Clarity Edge (operated by Rasheed Yusuf Olanrewaju). This policy covers data collected through our platform at jpute.vercel.app.

For privacy enquiries, contact us at ibnyusuf707@gmail.com.

Data We Collect

Account Information

When you register, we collect your full name, email address, phone number, school name, and a hashed password. We never store your password in plain text.

Profile & Branding

You may optionally upload a profile avatar and (for institutions) a school logo. These are stored securely via Cloudinary.

School & Student Data

School Package subscribers may input institutional data including student names, admission numbers, class assignments, academic scores, and term reports. This data is entered by the school admin and belongs to the institution.

Payment & Transaction Data

We record wallet top-up amounts, subscription charges, print order costs, and resource unlock fees. Payment processing is handled by Paystack — we do not store card numbers or sensitive payment credentials.

Usage Data

We record your last login timestamp and IP address, and track resource download counts. We do not run third-party analytics trackers.

CBT Session Data

When you complete a CBT practice session, we store your subject, score, answers, and completion time to show you your history.

How We Use Your Data

• To authenticate you and maintain your session
• To provide and operate the features of your subscription plan
• To process wallet transactions and maintain financial records
• To deliver and track print orders
• To send transactional emails (password reset, invite links, order confirmations)
• To allow school admins to manage student records, results, and staff
• To enforce subscription limits and access controls
• To investigate fraud, abuse, or security incidents

We do not use your data for advertising. We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

Data Storage & Security

Your data is stored in a PostgreSQL database hosted by Supabase on secure cloud infrastructure. Media files are stored on Cloudinary's secure CDN.

We apply the following security measures:

• Passwords are hashed using bcrypt before storage
• Authentication uses signed JWT tokens with expiry
• All data transmission occurs over HTTPS/TLS
• Backend database operations use a service-role key never exposed to clients
• Account deletion requests are subject to a 30-day grace period before permanent deletion

No system is completely secure. While we take reasonable precautions, we cannot guarantee absolute security of your data.

Data Retention

We retain your account and associated data for as long as your account is active. If you request account deletion:

• Your account is flagged for deletion with a 30-day grace period
• You may cancel the deletion request within this period
• After 30 days, all your data is permanently and irrecoverably deleted by an automated process

Transaction records required for financial or legal compliance may be retained for the period required by Nigerian law.

Student Data

Student records (names, scores, class data) are inputted by school administrators and are processed by Clarity Edge purely on behalf of the institution. Schools are the data controllers for student information.

We do not access, analyse, or use student data for any purpose other than displaying it back to authorised school users.

Schools are responsible for obtaining any required parental consents for student data entry under applicable Nigerian law.

Third-Party Services

We use the following third-party services to operate the platform:

Each third party operates under their own privacy policy. We encourage you to review them.

Cookies & Sessions

We use two functional cookies to maintain your login session. jpute_token holds your session token and is protected so that it cannot be read by scripts running in your browser. ce_session holds only your account identifier, so the interface knows you are signed in; it contains no password or token and cannot be used to access your account. Both are required for the platform to operate.

We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

Your Rights

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correct — update inaccurate information via your Settings page at any time
• Delete — request account deletion from Settings (30-day grace period applies)
• Object — object to our processing of your data for any purpose not covered by these terms
• Portability — request your data in a portable format

To exercise any of these rights, contact us at ibnyusuf707@gmail.com. We will respond within 14 business days.

Children's Privacy

The platform is intended for use by school administrators, teachers, and educators — not directly by children. Student data (e.g., scores and names) is entered by authorised school staff, not by students themselves.

If you believe that a child's personal data has been collected without appropriate authorisation, please contact us immediately.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or an in-platform notice at least 14 days before they take effect.

The date at the top of this page will always reflect when the policy was last revised.

Contact

For any privacy-related questions, data requests, or concerns: