Privacy Policy

SlimCyberTech (“we”, “us”) operates SchoolManage, a school management platform for Ugandan secondary schools. This Privacy Policy explains how we collect, use, store, and protect personal information when you visit our website or use the service on behalf of a school.

By using SchoolManage, you acknowledge that personal data will be handled as described here and in any service agreement between your school and SlimCyberTech.

Depending on how your school uses the platform, we may process the following categories of information:

• Staff account details — name, email, role, and sign-in activity
• Student records — name, class, assessment results, attendance, and photos where uploaded by the school
• Fee and payment information recorded by authorised school staff
• Enquiries submitted through our website contact form
• Technical logs — IP address, browser type, and security-related activity

We do not sell personal data. Schools control what information they enter and which staff accounts they create.

We aim to comply with the Uganda Data Protection and Privacy Act, 2019 and applicable regulations. Schools using SchoolManage generally act as data controllers for their learners and staff. SlimCyberTech typically acts as a data processor when hosting and operating the service on the school's behalf. Controller and processor responsibilities are set out in your service agreement with us.

Personal data is used only for legitimate purposes connected to the service, including to:

• Provide, maintain, and improve the school management platform
• Authenticate users and enforce role-based access controls
• Generate academic and financial reports requested by authorised staff
• Respond to enquiries and provide customer support
• Monitor and protect the security and integrity of the platform

School data is kept logically separate per school. We do not share learner or staff records with other schools or unrelated third parties except where required to deliver the service (for example hosting or email providers), where the school instructs us to do so, or where the law requires disclosure.

Data is stored on secure infrastructure. Production traffic is served over encrypted connections. Access to production systems is limited to personnel who need it to operate and support the service.

Data is retained for as long as the school's account remains active and as required by applicable law or contractual obligations. When a school ends its subscription, we follow agreed export and deletion procedures. We apply technical and organisational measures including access controls, separation of school data, encrypted transport, and regular review of access permissions.

Under the Uganda Data Protection and Privacy Act, 2019, data subjects may have rights to access, rectify, erase, or restrict processing of personal data, subject to lawful exceptions. Learners and parents should direct requests to their school in the first instance. SlimCyberTech will assist schools, as processor, where applicable and as set out in the service agreement.

For privacy enquiries, contact SlimCyberTech at info@slimcybertech.com or through our contact page.