Privacy Policy

A. School & Administrator Data

• School name, city, type, and student count
• Admin name, email address, and phone number
• Subscription plan and billing cycle
• Transaction IDs for payment verification (we do not store full payment card details)

B. Student & Staff Data

• Student name, roll number, class, date of birth, guardian contact
• Attendance records, fee history, exam results, and report cards
• Staff name, designation, CNIC (encrypted), salary records

C. Usage Data

• Login timestamps, IP addresses, device type, browser
• Feature usage patterns (anonymised for product improvement)
• Error logs for debugging

• Service delivery — running your school dashboard, generating reports, sending SMS alerts
• Billing — verifying payments, issuing invoices, activating/suspending accounts
• Support — responding to queries, diagnosing technical issues
• Product improvement — aggregated, anonymised analytics to improve features
• Security — detecting fraud, abuse, or unauthorised access
• Legal compliance — responding to lawful requests from Pakistani authorities

We do not sell, rent, or share your data with third parties for advertising purposes.

• All data is stored on servers physically located in Pakistan
• Data is encrypted at rest (AES-256) and in transit (TLS 1.3)
• Passwords are hashed using bcrypt — we cannot read your password
• CNIC and sensitive fields are stored encrypted
• Access to production data is restricted to authorised Skoo engineers under audit logging
• Regular automated backups with 30-day retention

We only share data in the following limited circumstances:

• SMS gateway providers (e.g., Telenor, Jazz, Ufone SMSC) — only the recipient phone number and message text are transmitted to deliver parent alerts
• Payment processors — only the school's account details for payment verification; we never share student data with payment providers
• Legal authorities — only when required by a valid court order or PDPA request
• Within your school — data is strictly scoped to your school's subdomain; no cross-school data access exists by design

• Active accounts: data retained for the lifetime of the subscription
• Cancelled accounts: data retained for 90 days after cancellation, then permanently deleted
• Backup copies purged within 30 days of the deletion date
• You may request earlier deletion — see Section 7

The marketing website (skoo.pk) uses only essential cookies for session management and basic analytics. No third-party advertising cookies are set. The school dashboard application uses session cookies required for authentication. You can disable cookies in your browser but the dashboard will not function without session cookies.

Under PDPA and our policy, School Admins have the right to:

• Access — request a full export of your school's data
• Correction — update inaccurate data via the dashboard or support
• Deletion — request permanent deletion of all school data
• Portability — export data in CSV/JSON format at any time from the dashboard
• Restrict processing — request that we limit how we use your data

To exercise any right, email us at [email protected] from the registered admin email. We respond within 7 business days.

Skoo processes student data including minors as a data processor on behalf of schools (the data controller). Schools are responsible for obtaining appropriate consent from parents/guardians as required by Pakistani law. Skoo does not process student data for any purpose beyond what is instructed by the School Admin.

We may update this policy as the platform evolves. When we make material changes, we will notify the School Admin via email at least 14 days before the change takes effect. Continued use after the effective date constitutes acceptance.

Skoo Technologies
CB 44/20 Near PMA, Abbottabad, KPK, Pakistan
Phone: +92-315-5905195
Email: [email protected]
WhatsApp: +92-315-5905195