Privacy Policy

Who We Are

iSkool is a cloud-based Learning Management System (LMS) developed and operated by K2023260831 (South Africa) (Pty) Ltd (Registration No. 2023/260831/07). iSkool is a product of K2023260831 (South Africa) (Pty) Ltd, a company registered in the Republic of South Africa, with its registered address at 2047 Mandisa Street, Tokoza, 1426.

iSkool is purpose-built for South African high schools and serves learners, teachers, school administrators, and principals. For the purposes of this Privacy Policy, "iSkool", "we", "us", and "our" refer to K2023260831 (South Africa) (Pty) Ltd.

Our platform is accessible at iskool.online and through any school-specific access point provided to your institution.

Our Commitment to Your Privacy

We take privacy seriously — especially because many of our users are minors. iSkool is fully committed to complying with the Protection of Personal Information Act, 2013 (POPIA), South Africa's primary data protection law.

This Privacy Policy explains what personal information we collect, why we collect it, how we use it, and what rights you have over your data.

What Personal Information We Collect

We collect only the information necessary to provide the iSkool platform. This includes:

From Schools and Administrators:

School name, contact details, administrator names and email addresses. We do not require a school's physical address to create an account.

From Teachers:

Full name, staff email address, subject and grade assignments, and profile information entered during onboarding.

From Learners:

Full name, grade, class group, and learner number if provided by the school. We also record academic activity on the platform including quiz attempts, assignment submissions, scores, and any content submitted through the platform.

From Parents (where applicable):

Name, email address, and relationship to the learner, for the purpose of accessing learner progress reports only.

Automatically Collected Platform Data:

As part of normal platform operation, iSkool's backend systems record standard activity data including login events, feature usage, and system performance metrics. This data is stored on iSkool's own servers, is used solely to maintain and improve the platform, and is never shared with third parties.

AI Invigilator Data (during live quiz sessions only):

When a learner sits a quiz with the AI Invigilator enabled, the following events are recorded in real time:

• Tab switch events — recorded when a learner switches to another browser tab during an active quiz, including which question they were on at the time.
• Quiz exit events — recorded when a learner navigates away from or closes the quiz, including which question they were on at the time.
• Rapid navigation events — recorded when a learner moves through questions at an unusually fast pace.

Each event is time-stamped and linked to the learner's email address and quiz ID. This data is visible only to the teacher who administered the quiz. The AI Invigilator does not take screenshots, access the learner's camera or microphone, record keystrokes, or monitor what the learner was doing outside of the iSkool platform.

How We Use Your Information

We use the personal information we collect strictly for the following purposes:

• To create and manage user accounts for learners, teachers, and administrators.
• To deliver platform features including quizzes, assignments, gradebooks, analytics, announcements, discussions, and syllabus tracking.
• To generate academic reports and performance analytics for teachers and school administrators.
• To operate the AI Invigilator feature, which monitors quiz session integrity in real time.
• To communicate important platform updates, scheduled maintenance, or changes to these policies.
• To provide customer support and respond to queries from schools.
• To maintain and improve the iSkool platform using internal platform activity data collected by our own backend systems. This data is anonymised and aggregated and is never shared with third parties.

How We Store and Protect Your Data

iSkool data is hosted by Namecheap, Inc., our hosting provider, on servers located in the United States of America. We have selected Namecheap based on their security standards and data protection commitments. By using iSkool, you acknowledge that your data is processed and stored outside of South Africa.

This cross-border transfer is carried out in accordance with POPIA Section 72. Namecheap is contractually bound by their own privacy policy and terms of service, which govern the security and handling of data on their infrastructure.

• All data transmitted between your device and the iSkool platform is encrypted using industry-standard TLS/HTTPS protocols.
• Access to personal data is restricted to authorised iSkool personnel on a strict need-to-know basis.
• iSkool takes reasonable measures to ensure data integrity and availability, including maintaining backup and recovery processes through our hosting provider.
• We retain school and user data for the duration of the school's active subscription or pilot period, plus a 12-month grace period after termination. After this period, all data is permanently and irreversibly deleted.

Sharing of Personal Information

iSkool does not sell, rent, or trade personal information. We only share data in the following limited circumstances:

• With the school itself — teachers can see learner data for their own classes only, and administrators can see school-wide data for their institution only.
• With Namecheap, Inc., our hosting provider, solely for the purpose of storing and serving the platform. Namecheap does not have access to your data for any commercial purpose and is bound by their own data protection commitments.
• Where required by South African law, a valid court order, or a lawful request from a recognised regulatory authority.

Children's Privacy

Many iSkool users are learners under the age of 18. We treat all learner data with the highest level of care. Learner accounts are created by the school or by teachers — learners do not self-register.

We do not collect any unnecessary personal information from minors and do not expose learner data to any commercial or marketing activity.

Your Rights Under POPIA

As a data subject under POPIA, you have the following rights:

• The right to know what personal information we hold about you.
• The right to request access to your personal information.
• The right to request correction of inaccurate or outdated information.
• The right to request deletion of your personal information where legally permissible.
• The right to object to the processing of your personal information in certain circumstances.
• The right to lodge a complaint with the Information Regulator of South Africa if you believe your rights have been violated.

To exercise any of these rights, contact us at policy@iskool.online.

Cookies and Tracking

iSkool uses session cookies strictly to maintain your logged-in state while using the platform. We do not use advertising cookies, third-party tracking cookies, or any form of cross-site tracking.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the platform, legal requirements, or our practices. When we do, the updated policy will be posted on the platform with a revised effective date.

Schools will be notified of material changes through a notice displayed on the platform. Where possible, we will also notify schools directly. Continued use of iSkool after an updated policy takes effect constitutes acceptance of the revised terms.

We encourage schools and users to review this policy periodically. The current version will always be available at iskool.online.

Contact Us

For any privacy-related queries, requests, or complaints, please contact our Information Officer: