Security & Privacy
3 min read
Updated April 3, 2025
Compliance and data privacy
How SRA complies with Tanzanian data protection requirements and handles personally identifiable student data.
SRA is designed to comply with Tanzania's Personal Data Protection Act (PDPA) and international best practices for handling student data.
Data we collect
- Student names, admission numbers, and class assignments
- Academic marks and grades
- Parent contact details (phone and email)
- Staff login activity and IP addresses
Data we do not sell or share
Student data is never shared with third parties except for SMS/WhatsApp gateway delivery. Gateway providers receive only the phone number and message content — no student academic data.
Data deletion requests
Schools can request full data deletion upon contract termination. All school data is permanently deleted within 30 days of a valid deletion request.