Privacy Policy

Your privacy is our responsibility

We believe in radical transparency about how student and school data is collected, used, and protected within the SRA platform.

Effective: 1 January 2026
Version 2.1
Applies to all SRA users

No Data Selling

We never sell, rent, or trade your school's student data to third parties. Ever.

AES-256 Encryption

All data is encrypted at rest and in transit using industry-standard encryption.

You Control Your Data

Schools can export or request deletion of all data at any time by contacting us.

Tanzania-Region Storage

Student data is stored in regional data centers and subject to Tanzanian data law.

Overview

SRA ("Student Results Analyzer") is an academic results management platform built exclusively for Tanzanian secondary schools. This Privacy Policy explains how we collect, use, and protect information about schools, educators, and — most importantly — students using our platform.

By accessing or using SRA, you agree to the terms described in this policy. If you represent a school, your agreement covers your entire institution including teachers, administrators, and all student records managed through SRA.

Plain language summary: We collect only what we need to operate the platform. We don't sell your data. You keep full ownership of your school's academic records.

Data We Collect

We collect the minimum data necessary to provide SRA's services:

Account Data

  • Full name
  • Email address
  • School name & NECTA number
  • Role (Admin / Teacher / Officer)

Student Records

  • Student name (first + last)
  • Class & registration number
  • Exam marks per subject
  • NECTA division and grade

Usage Data

  • Login timestamps & IP address
  • Pages visited within SRA
  • Actions performed (marks entered, reports generated)
  • Browser type & OS

Communications Data

  • Parent phone numbers (for SMS)
  • Parent email addresses
  • Message delivery logs
  • WhatsApp opt-in status

We do not collect biometric data, financial information, or any data beyond what is required to manage academic results and communications.

How We Use Your Data

Your data is used exclusively to operate and improve SRA. Specifically:

  • Authenticate users and manage role-based access control
  • Store, process, and display student exam results and grade calculations
  • Generate NECTA-compliant PDF reports on request
  • Deliver SMS, Email, and WhatsApp notifications to parents (only when initiated by school staff)
  • Power analytics dashboards with aggregated and individual performance data
  • Detect and prevent unauthorized access, fraud, or data manipulation
  • Improve platform features using anonymized usage patterns

We do NOT use student data for advertising, profiling for commercial purposes, or any purpose outside of direct educational operations.

Storage & Security

SRA employs a multi-layered security architecture to protect all data:

Encryption

AES-256 at rest · TLS 1.3 in transit

Infrastructure

Regional East Africa data centers · Automated daily backups · 99.9% uptime SLA

Access Controls

Role-based permissions · Session management · Audit logging for all data changes

Data is retained for the duration of your school's active subscription. Upon account termination, data is retained for 90 days then permanently deleted, unless export was requested.

Sharing & Disclosure

We share student or school data only in the following limited circumstances:

  • Within your school: Data is accessible only to users with the appropriate role at your institution.
  • Service providers: SMS gateway operators and email delivery services process communication data only to deliver messages you initiate.
  • Legal compliance: We may disclose data if required by Tanzanian law or a valid court order. We will notify your school unless legally prohibited.
  • Business transfers: In the event of an acquisition, user data may transfer to the new entity under equivalent privacy protections.

We never sell or license student data, academic records, or personal information to marketers, researchers, or other third parties.

Your Rights

School administrators and individual users have the following rights:

Access

Request a copy of all data we hold about your school or account.

Correction

Correct inaccurate personal or student data directly in SRA or via support.

Deletion

Request deletion of your data. Student records are deleted within 30 days of a verified request.

Portability

Export all student records and reports in standard formats (CSV, PDF).

To exercise any of these rights, contact us at privacy@sra.co.tz. We respond within 30 days.

Cookies

SRA uses a minimal set of cookies required to operate the platform:

CookiePurposeDuration
sra_sessionKeeps you logged inSession
sra_themeRemembers your light/dark mode preference1 year
sra_csrfPrevents cross-site request forgery attacksSession

We do not use advertising cookies, analytics beacons, or third-party tracking scripts.

Student Data & Minors

Special Protection for Student Records

SRA serves secondary school students, many of whom are minors. Student academic records are handled with the strictest protections. Only authorized school staff may access individual student results. Students do not have direct platform access — data is shared only through school-controlled channels.

Parents or guardians who wish to access, correct, or delete their child's data should contact their school administrator, who will process the request through SRA's data management tools.

Policy Changes

We may update this Privacy Policy periodically. When changes are material, we will notify all registered school administrators via email at least 14 days before the changes take effect. The updated policy will be posted at this URL with a new effective date.

Continued use of SRA after the effective date constitutes acceptance of the updated policy.

Contact Us

For privacy-related questions, data requests, or to report a concern:

privacy@sra.co.tz— Privacy team

support@sra.co.tz— General support