SRA

Privacy policy

Your privacy is our responsibility

Plain and clear: this explains what information SRA collects about schools, staff and students, how it's used, and how it's kept safe.

Effective: 1 January 2026Applies to all SRA users

We never sell your data

Your school's student data is never sold, rented or traded to anyone. Ever.

Encrypted and secure

Your data is encrypted while stored and while being sent, so outsiders can't read it.

You control your data

Export it or ask us to delete it at any time, it belongs to your school.

Kept for Tanzanian schools

Student data is stored on secure servers and handled under Tanzanian data law.

Overview

SRA ("Student Results Analyzer") is an academic results management platform built exclusively for Tanzanian secondary schools. This Privacy Policy explains how we collect, use, and protect information about schools, educators, and - most importantly - students using our platform.

By accessing or using SRA, you agree to the terms described in this policy. If you represent a school, your agreement covers your entire institution including teachers, administrators, and all student records managed through SRA.

Plain language summary: We collect only what we need to operate the platform. We don't sell your data. You keep full ownership of your school's academic records.

Data We Collect

We collect the minimum data necessary to provide SRA's services:

Account Data

  • Full name
  • Email address
  • School name & NECTA number
  • Role (Admin / Teacher / Officer)

Student Records

  • Student name (first + last)
  • Class & registration number
  • Exam marks per subject
  • NECTA division and grade

Usage Data

  • Login timestamps & IP address
  • Pages visited within SRA
  • Actions performed (marks entered, reports generated)
  • Browser type & OS

Communications Data

  • Parent phone numbers (for SMS)
  • Parent email addresses
  • Message delivery logs
  • WhatsApp opt-in status

We do not collect biometric data, financial information, or any data beyond what is required to manage academic results and communications.

How We Use Your Data

Your data is used exclusively to operate and improve SRA. Specifically:

  • Authenticate users and manage role-based access control
  • Store, process, and display student exam results and grade calculations
  • Generate NECTA-compliant PDF reports on request
  • Deliver SMS, Email, and WhatsApp notifications to parents (only when initiated by school staff)
  • Power analytics dashboards with aggregated and individual performance data
  • Detect and prevent unauthorized access, fraud, or data manipulation
  • Improve platform features using anonymized usage patterns

We do NOT use student data for advertising, profiling for commercial purposes, or any purpose outside of direct educational operations.

Storage & Security

SRA employs a multi-layered security architecture to protect all data:

Encryption

Your data is encrypted while stored and while being sent.

Backups

Kept on secure servers with automatic daily backups.

Access controls

Only the right staff can see data, and every change is logged.

Data is retained for the duration of your school's active subscription. Upon account termination, data is retained for 90 days then permanently deleted, unless export was requested.

Sharing & Disclosure

We share student or school data only in the following limited circumstances:

  • Within your school: Data is accessible only to users with the appropriate role at your institution.
  • Service providers: SMS gateway operators and email delivery services process communication data only to deliver messages you initiate.
  • Legal compliance: We may disclose data if required by Tanzanian law or a valid court order. We will notify your school unless legally prohibited.
  • Business transfers: In the event of an acquisition, user data may transfer to the new entity under equivalent privacy protections.

We never sell or license student data, academic records, or personal information to marketers, researchers, or other third parties.

Your Rights

School administrators and individual users have the following rights:

Access

Request a copy of all data we hold about your school or account.

Correction

Correct inaccurate personal or student data directly in SRA or via support.

Deletion

Request deletion of your data. Student records are deleted within 30 days of a verified request.

Portability

Export all student records and reports in standard formats (CSV, PDF).

To exercise any of these rights, contact us at privacy@sra.co.tz. We respond within 30 days.

Cookies

SRA uses a minimal set of cookies required to operate the platform:

CookiePurposeDuration
sra_sessionKeeps you logged inSession
sra_themeRemembers your light/dark mode preference1 year
sra_csrfPrevents cross-site request forgery attacksSession

We do not use advertising cookies, analytics beacons, or third-party tracking scripts.

Student Data & Minors

Special Protection for Student Records

SRA serves secondary school students, many of whom are minors. Student academic records are handled with the strictest protections. Only authorized school staff may access individual student results. Students do not have direct platform access - data is shared only through school-controlled channels.

Parents or guardians who wish to access, correct, or delete their child's data should contact their school administrator, who will process the request through SRA's data management tools.

Policy Changes

We may update this Privacy Policy periodically. When changes are material, we will notify all registered school administrators via email at least 14 days before the changes take effect. The updated policy will be posted at this URL with a new effective date.

Continued use of SRA after the effective date constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, data requests, or to report a concern:

privacy@sra.co.tz- Privacy team

support@sra.co.tz- General support