Privacy policy

EDUPam (“we”, “our”) is a school management platform used by schools, their staff, students and parents. This policy explains what data we collect, why, and how we protect it.

By using EDUPam, you accept the practices described below.

The school that registers on EDUPam is responsible for its students', parents' and staff's data. EDUPam acts as a processor: we process this data on the school's behalf, following its instructions.

Identity data: last names, first names, gender, date and place of birth, photo, contact details (phone, email, address).

School data: class, track, attendance, grades, report cards, fees, payments and other schooling-related information.

Account data: credentials, role (administration, teacher, student, parent) and login logs.

Technical data: device, browser, a technical identifier specific to each device authorized on an account (used only to secure sign-in) and data needed for the app to work properly.

We use data solely to provide the service: manage enrollment, attendance, grades, communication, payments and the features chosen by the school.

We never use students' data for advertising and we do not sell it to any third party.

Data is only accessible to authorized members of the school, according to their role, to school authorities within the limits described in the next section, and to technical providers strictly necessary for the service to function (hosting, payment).

We may disclose data if required by law or to protect users' rights and safety.

The Ministry of National Education and Vocational Training (MENFP), together with its offices — the Departmental Directorates and the School District Offices (BDS) — has a legal right to consult each school's data through EDUPam, as part of its mission to supervise the education system.

This right covers: grades, report cards, class rankings, school booklets, decision lists, class formation lists, the student's personal information and academic record, and the programme of each class.

These authorities have no access whatsoever to information on the school's income, to payments, or to any other school activity not listed above.

Data is encrypted at rest and in transit, backed up regularly and isolated school by school. Access is controlled by role.

Despite our measures, no system is infallible; we continuously work to strengthen security.

Device-protected sign-in: when an account is used for the first time on a device, or after an extended period without signing in, an additional identity check is required before the session opens. After several unsuccessful attempts, sign-in is temporarily suspended. Every user can review the devices authorized on their account and remove one at any time; the school's administration can do the same for the accounts of its school.

Data is retained as long as the school uses EDUPam, then for the time needed to meet our legal obligations. Some data (e.g. messages) may be deleted automatically after a defined period.

Users can request access to, correction of, or deletion of their data. Students' and parents' requests should be addressed to their school; the school can ask us to carry them out.

EDUPam processes minor students' data only on behalf of their school, in an educational context, and with appropriate protections. No targeted advertising is shown to students.

We may update this policy. Significant changes will be communicated via the app or by email.

For any question about privacy, contact us via the Contact page or the support chat.