Privacy Policy

Classfun ("we", "our", "us") operates the Classfun mobile and web application — a platform that connects schools, activity centres, and parents with real-time communication, attendance tracking, and safe pickup coordination.

Data controller: Classfun Ltd. Contact: privacy@classfun.app

We collect the following categories of information:

Account information:

• Name, email address, and phone number
• School or centre affiliation
• Profile photo (optional)
• Role: parent, school administrator, or staff member

Child data (collected by schools, shared with parents):

• Child's first name and year/class group
• Attendance records
• Pickup authorisation lists
• Progress reports and grades (if enabled by the school)
• Photos shared by teachers (with school consent)

Usage data:

• Device type, operating system, and app version
• IP address and approximate location (for pickup tracking features only)
• In-app actions and feature usage
• Push notification delivery status

We use collected data to:

• Provide safe pickup coordination and attendance tracking
• Send real-time notifications to parents and staff
• Process subscription payments via Paystack
• Improve and debug the Classfun platform
• Comply with legal obligations
• Respond to support requests

We do not sell your data to third parties. We do not use child data for advertising purposes.

Classfun is designed for use by schools and parents — not directly by children. We take special precautions with all child-related data:

• Children do not create accounts on Classfun
• Child data is entered by verified school administrators
• Parents must be invited by the school to access their child's profile
• We collect only the minimum data necessary to provide the service
• Child data is never shared with advertisers or third-party analytics platforms
• All child records are deleted within 30 days of a school ending their subscription

We share data only with:

• Paystack — payment processing (your card data is never stored by Classfun)
• Firebase / Google Cloud — secure hosting and push notifications
• WhatsApp Business API — optional notification delivery if enabled
• Our team — for support and maintenance, under strict confidentiality

We may disclose data if required by law, court order, or to protect the safety of children using our platform.

• Active accounts: data retained while the subscription is active
• Expired subscriptions: data retained for 90 days then deleted
• Deleted accounts: all personal data erased within 30 days of deletion request
• Payment records: retained for 7 years per financial regulations

Depending on your location, you may have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your account and all associated data
• Object to or restrict certain processing
• Data portability — receive your data in a machine-readable format
• Withdraw consent at any time

To exercise any of these rights, email privacy@classfun.app or use our account deletion request form.

We protect your data using industry-standard measures including:

• TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls — staff only see what they need
• Regular security audits and penetration testing
• Secure, time-limited pickup codes (7-digit, 2-hour expiry)

The Classfun web app uses essential cookies only — for session management and authentication. We do not use tracking or advertising cookies. You can disable cookies in your browser settings, but some features may not function correctly.

We may update this Privacy Policy from time to time. We will notify all users of material changes via in-app notification and email at least 14 days before changes take effect.

Questions about privacy? We're here to help:

• Email: privacy@classfun.app
• General: hello@classfun.app