Last updated: February 10, 2026
1. Introduction
Pliantedu Limited ("Pliantedu," "we," "us," or "our") provides the Femlify school management platform that helps Nigerian K-12 schools manage admissions, fee collection, staff and user records, assessments and report cards, communication, document generation, AI-assisted tools, a Learning Management System (LMS), website building, and financial insights.
This Privacy Policy describes how we collect, use, disclose, and safeguard personal data when a school (the "Customer" or "School") and its authorized users — including proprietors, bursars, academic coordinators, ICT staff, teachers, parents/guardians, and students — use Femlify's website, dashboard, mobile applications, and related services (together, the "Services").
We know that school data is sensitive. Much of what flows through Femlify relates to children — their grades, attendance, health notes, and family contact details — so we built this Notice to be as clear and specific as possible about how that data is handled. If any part of this Notice is unclear, please contact us using the details in Section 12.
"Trust is the real currency of school administration software. Parents trust schools with their children's information, and schools trust Femlify to handle it responsibly — we don't take that lightly."
2. Scope of this Privacy Policy
This Notice applies to personal data processed through:
- The Femlify website (femlify.com and subdomains)
- The Femlify dashboard and admin portal
- The Femlify mobile applications (where available)
- The Femlify Computer-Based Test (CBT) and LMS modules
- Customer-facing tools such as the parent portal and communication tools (SMS, email, push notifications)
- Any other product or service that links to this Notice
Who this Notice covers:
| User type | Examples of data involved |
|---|---|
| School Customer (data controller) | Proprietors, school administrators, academic coordinators, ICT staff |
| School staff | Teachers, bursars, non-teaching staff |
| Parents/Guardians | Contact details, payment information, communication preferences |
| Students | Academic records, attendance, assessment results, admission data |
| Website visitors | Prospective customers browsing femlify.com |
In most cases, the School is the data controller for student, parent, and staff data entered into Femlify, and Pliantedu Limited acts as a data processor acting on the School's instructions, in line with the Nigeria Data Protection Act (NDPA) 2023 and applicable regulations issued by the Nigeria Data Protection Commission (NDPC). Where Pliantedu Limited determines the purpose and means of processing — for example, website analytics or billing data for the School's Femlify subscription — Pliantedu Limited acts as a data controller in its own right.
If you are a parent, guardian, student, or staff member with questions about data a School has entered into Femlify, we encourage you to contact that School directly, as they control that data. We are happy to support that conversation where needed.
"For schools using Femlify, this means your relationship with parents and staff over their data stays intact — we process it on your behalf, under your instructions, not the other way around."
3. Personal data we collect
We collect personal data in three main ways: data Schools and users provide to us, data generated automatically through use of the Services, and data from limited third-party sources.
3.1 Data provided directly
| Category | Examples |
|---|---|
| Account & identity data | Full name, email address, phone number, role (proprietor, bursar, teacher, etc.), school name, login credentials |
| Student records | Name, date of birth, gender, class/arm (e.g., JSS1–SSS3), admission number, passport photograph, guardian contacts, health or special needs notes (where provided by the School) |
| Academic data | Assessment scores, report cards, attendance records, CBT/exam responses, term and session history |
| Financial data | Fee schedules, payment history, bank transfer references, payment card tokens (processed via licensed payment partners — Femlify does not store full card numbers) |
| Communication data | SMS, email, and in-app messages sent through Femlify's communication tools; support tickets and chat transcripts |
| Document data | Documents generated or uploaded through the platform (admission letters, certificates, ID cards, transcripts) |
| Website builder content | Content schools input when using Femlify's website builder tool, including images and text about the school |
3.2 Data collected automatically
- Usage data: pages visited, features used, time spent, click patterns, session duration
- Device and log data: IP address, browser type, device type, operating system, unique device identifiers, crash logs
- Cookies and similar technologies: see our Cookie Policy for full details
3.3 Data from third parties
- Payment confirmation data from payment processors (e.g., transaction status, not full card details)
- SMS/email delivery status from messaging providers
- Publicly available information used to verify a School's legitimacy during onboarding
We do not knowingly collect more student data than a School chooses to input, and we do not sell personal data to data brokers or advertisers.
4. How we use your personal data
We use personal data for the following purposes, each tied to a lawful basis under the NDPA:
| Purpose | Examples | Lawful basis |
|---|---|---|
| Providing the Services | Running the dashboard, processing admissions, generating report cards, hosting the CBT module | Performance of contract with the School |
| Account & security management | Authentication, role-based access control (RBAC), fraud prevention | Legitimate interest / contract |
| Payments & billing | Processing school fee payments, Femlify subscription billing | Performance of contract |
| Communication | Sending admission notices, fee reminders, exam results to parents via the School's instance | Performance of contract (on School's instruction) |
| Customer support | Resolving technical issues, answering questions | Legitimate interest / contract |
| Product improvement | Understanding feature usage, fixing bugs, building new modules | Legitimate interest |
| AI tools | Powering AI-assisted features (e.g., report comment generation, content suggestions) | Performance of contract / consent where required |
| Legal compliance | Responding to lawful requests, tax and accounting obligations | Legal obligation |
| Marketing (website visitors only) | Newsletters, product updates for prospective customers who opt in | Consent |
We do not use student data to build advertising profiles, and we do not use AI tools to make automated decisions about a student's admission, grading, or disciplinary status without human review by the School.
"Every feature we build starts with one question: does this help a proprietor run their school better, or does it just collect data for data's sake? If it's the latter, we don't build it."
5. How we share your personal data
We share personal data only as necessary and with appropriate safeguards:
- Within the School: Data is visible to authorized users at the School based on their role (e.g., a teacher sees their class list; a bursar sees fee records) through our RBAC system.
- Service providers ("subprocessors"): Cloud hosting providers, SMS/email delivery providers, payment processors, and customer support tooling — all bound by data processing agreements.
- Payment partners: Licensed Nigerian payment gateways to process fee and subscription payments.
- Legal and safety reasons: Where required by law, court order, or to protect the rights, property, or safety of Pliantedu Limited, our customers, or others.
- Business transfers: If Pliantedu Limited is involved in a merger, acquisition, or asset sale, personal data may be transferred, subject to this Notice continuing to apply.
We do not sell personal data, and we do not share student data with advertisers or data brokers under any circumstance.
5.1 Subprocessors
A current list of subprocessors that may access personal data on our behalf is available on request from support@pliantedu.com.
6. Your choices
Depending on your role, you have the following choices:
- Schools (data controllers): Can access, export, correct, or delete student, staff, and parent data within the dashboard, or by contacting support. Schools control parent/student communication preferences within their instance.
- Individual users (staff, parents, students): Can request access to or correction of your data by contacting your School directly, or contacting us and we will route the request appropriately.
- Marketing communications: Website visitors who subscribe to updates can unsubscribe at any time via the link in any email.
- Cookies: You can manage cookie preferences through your browser or our cookie banner — see our Cookie Policy for details.
- Account deletion: Schools may request deletion of their account and associated data at contract termination, subject to legal retention requirements described in Section 8.
7. Other sites and services
The Services may contain links to third-party websites (e.g., payment provider pages, WAEC/NECO portals referenced in school workflows). This Privacy Policy does not apply to those third-party sites, and we encourage you to review their privacy policies separately. Pliantedu Limited is not responsible for the privacy practices of third-party sites we do not control.
8. Security and Retention
8.1 Security
We apply industry-standard technical and organizational measures to protect personal data, including:
- Encryption of data in transit (TLS) and at rest
- Role-Based Access Control (RBAC) limiting data visibility by user role
- Regular security reviews and access audits
- Secure, access-controlled cloud infrastructure
- Staff confidentiality obligations and limited internal access on a need-to-know basis
No system is completely secure, and we cannot guarantee absolute security. If we become aware of a data breach affecting personal data, we will notify affected Schools and, where required, the NDPC, in line with applicable law.
8.2 Retention
We retain personal data for as long as a School maintains an active Femlify account, and for a reasonable period after termination to comply with legal, accounting, or regulatory obligations (typically as set out in our Customer agreement). Academic records may be retained longer at a School's request to support alumni record requests (e.g., transcript reissuance). Schools may request earlier deletion, subject to legal retention requirements.
9. International data transfers
Pliantedu Limited primarily stores and processes data within Nigeria or in regions selected to comply with Nigerian data residency expectations. Where data is transferred outside Nigeria (for example, to a cloud infrastructure provider's regional data center), we ensure appropriate safeguards are in place, consistent with the NDPA's cross-border transfer requirements, such as contractual protections with the receiving party or reliance on an adequacy framework recognized by the NDPC.
10. Children
Femlify is designed to be used by schools, on behalf of students, not directly marketed to or signed up by children. Student accounts (where applicable, e.g., for CBT/LMS access) are created and managed by the School, not self-registered by minors. We rely on the School, as data controller, to obtain any necessary parental consent for processing student data, consistent with the NDPA's protections for children's data. If you believe a child has provided personal data to us directly outside of a School-managed account, please contact us so we can take appropriate action.
11. Changes to this Privacy Policy
We may update this Notice from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. We will post the updated Notice with a revised "Last updated" date, and for material changes, we will provide additional notice to School Customers (such as an email or in-dashboard notification).
12. How to contact us
If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:
Pliantedu Privacy Team Email: support@pliantedu.com or visit our Contact Page for more details. Address: Pliantedu registered office address — to be added
For Schools with a designated Data Protection Officer or compliance contact, please route requests through your account administrator where possible, so we can verify and action them efficiently.
This Privacy Policy should be read alongside our Cookie Policy and Terms of Service.
