1. Who we are
NalieTech (Pvt) Ltd ("NalieTech", "we", "us") provides cloud school management software to schools in Zimbabwe and beyond. Our registered office is in Harare, Zimbabwe.
2. Our role
For learner, staff and parent data uploaded by a school, the school is the data controller and NalieTech is the data processor. We only process this data on the school's documented instructions.
3. Information we collect
- Account information for staff (name, email, role, phone)
- School records entered by the school (learner bios, results, attendance, fees, discipline)
- Communications sent through the platform (WhatsApp, SMS, email)
- Technical data (IP, device, browser, timestamps) for audit and security
- Biometric templates (only when the school enables biometrics and parents consent)
4. Lawful basis
We rely on (a) the school's contractual instructions, (b) compliance with legal obligations (ministry reporting, ZIMRA), and (c) legitimate interests in keeping the service safe and reliable.
5. How we use information
- To deliver and improve the platform
- To send ministry, ZIMSEC and parent communications on the school's behalf
- To generate AI-assisted insights, draft messages and recommendations
- To detect fraud, abuse and security threats
We do not sell personal data and we do not use your school's data to train third-party AI models.
6. Sharing
We share data only with: (a) sub-processors we engage (cloud hosting, payment processors, WhatsApp/SMS providers, AI gateways) under written confidentiality, (b) authorities where legally required, and (c) other parties at the school's instruction.
7. Retention
We retain records per the school's configured retention schedule. Financial records: 10 years (ZIMRA). Audit logs: 7 years, immutable. Biometric templates: while the learner is enrolled plus 90 days.
8. Your rights
Under the Cyber & Data Protection Act 2021 you may request access, correction, deletion, restriction or portability of your personal data. Direct requests to your school first; we will assist them in responding within statutory timelines.
9. International transfers
Data is primarily hosted in regions selected for resilience and low latency. Cross-border transfers are protected by contractual safeguards.
10. Contact
For privacy queries: tichremias@nalietech.com.