Icademee Privacy Policy
How Icademee handles personal information when you visit, contact, or use the platform.
Effective date: September 2026
This notice is an operational draft pending final legal-entity, contact, regulatory, vendor, transfer and retention review. It is not legal advice.
1. Who is responsible for the data?
For Icademee account, security, support, billing, abuse-prevention and compliance information that Icademee determines the purpose and means of processing, Icademee may act as controller. When a school uses Icademee to manage students, parents, applicants, staff, attendance, fees or results, the school generally determines the purposes of that school data and Icademee generally acts as processor on the school's documented instructions. The school remains responsible for its controller-level notices and lawful basis for school records.
2. Information we process
Depending on the service, information may include names, contact details, school and organisation information, account and authentication information, student and applicant records, academic results, attendance, fees, communications, uploaded documents or images, support requests, security events, IP addresses, request metadata, device/browser information and other information needed for the stated purpose. We seek to minimise collection and do not ask users to submit unnecessary sensitive information.
3. Why we process it
Purposes can include providing and securing the platform, authenticating users, administering school services, responding to support requests, preventing abuse, maintaining audit records, processing transactions, complying with legal obligations, and performing services requested by a school. Each material purpose should have an appropriate lawful basis under applicable Nigerian data-protection law; no single lawful basis is intended to cover every processing activity.
4. Children and student data
Icademee is designed for education and therefore may process information about children. Student data is not sold and is not used for advertising. We do not make children responsible for accepting optional platform processing. Where a school enables an optional feature involving children's data, the school and Icademee must assess the applicable legal basis, transparency, necessity, safeguards and contractual requirements. Where consent is the applicable basis, appropriate parental/guardian and age-verification requirements must be followed.
5. AI and OCR
Mark-sheet OCR is an optional higher-risk feature. Identifiable mark-sheet images may contain student names, identifiers and academic information. External AI processing is disabled by default and must not be enabled until the applicable school authorisation, processor terms, transfer assessment, privacy review and deployment controls are completed. OCR output is intended to support human review and must not be treated as an autonomous final academic decision. See the Subprocessors notice for provider disclosure.
6. Sharing and service providers
We may disclose information to infrastructure, authentication, communications, security, hosting and other service providers where necessary to provide the service. Providers should receive only the access necessary for their role and should be bound by appropriate confidentiality, security and processing obligations. We do not sell personal information or share identifiable student records for unrelated advertising.
7. International processing
Some service providers may process information outside Nigeria. Before production use of a provider handling personal data, Icademee should document the applicable transfer basis, contractual protections, destination and relevant safeguards. School-controlled international transfers should be addressed in the school/Icademee processing agreement and applicable privacy notices.
8. Security
Icademee uses controls intended to protect information against unauthorised access, alteration, loss and disclosure, including tenant isolation, authentication, role-based authorisation, database controls, security telemetry, secret redaction and least-privilege service access. Security measures are reviewed as the platform evolves. No online service can guarantee absolute security.
9. Retention and deletion
Information is retained only for as long as reasonably necessary for the applicable purpose, contractual obligations, security, legal requirements or dispute resolution. School data is subject to the school's retention instructions and applicable legal requirements. OCR source images should not be retained by default after the workflow no longer requires them. Backups may persist according to the documented backup lifecycle before secure expiry.
10. Your rights
Applicable law may provide rights including access, correction, deletion, objection, restriction and other rights. For school-controlled records, requests normally begin with the school. For Icademee-controlled information, use our Privacy Requests process. We may verify identity and authority before disclosing or changing information.
11. Cookies and tracking
Core Icademee functionality may use strictly necessary cookies or similar browser mechanisms for authentication, security, tenant routing and session continuity. We do not intend to use advertising or cross-site behavioural tracking as part of the core platform. Optional analytics or non-essential tracking, if introduced, must be separately documented and handled with appropriate preference/consent controls where required. See Cookies & tracking.
12. Complaints and contact
For privacy questions or requests, use the Contact page. You may also have a right to complain to the Nigeria Data Protection Commission or another competent authority. The final legal entity name, privacy contact and regulatory contact details must be inserted before this notice is treated as the final legal notice.
13. Changes
We may update this notice when processing, providers, technology or legal requirements materially change. Material changes should be reflected in the application and relevant customer communications where appropriate.