SchoolPey
Privacy Policy
Effective date: September 15, 2026
This policy explains how SchoolPey handles information when schools, staff, parents, guardians, and other authorized users interact with the public website, school dashboard, parent mobile application, support channels, payment workflows, and related services.
Information you provide
SchoolPey may process account and contact information such as names, email addresses, phone numbers, organization and school information, and staff access details. Schools and authorized users may also provide student, guardian, admission, enrollment, academic billing context, and other records needed to administer school fees.
Google OAuth authentication and device information
SchoolPey supports Google OAuth authentication. When you sign in with Google, SchoolPey may process the Google account identifier, email address, profile name, and related authentication information made available for the sign-in flow. SchoolPey may also process verified phone identities and phone-verification challenges where used to link a signed-in user to guardian records. The parent mobile application may store SchoolPey access and refresh tokens securely on the device so a signed-in session can be maintained.
Guardian and phone linking
A parent or guardian account may be connected to school-managed guardian records through verified phone identity and authorized guardian-linking workflows. A guardian relationship may determine which student fee records the signed-in parent or guardian is allowed to view or pay. Ending or deleting a SchoolPey login account does not by itself remove the school's underlying student or guardian administrative record.
School fee and financial information
SchoolPey may store fee categories and structures, student adjustments, invoices and invoice lines, balances, payments, payment allocations, student credit entries, receipts, reconciliation records, settlement information, transaction references, and related notes. These records are used to preserve a reliable and auditable school-fee history.
M-Pesa and payment-provider information
When an eligible payment is initiated or reconciled, SchoolPey may process information required by the integrated payment provider, including payer phone number, amount, currency, provider and transaction references, payment status, M-Pesa receipt identifiers, callback evidence, invoice allocation, and settlement routing information. SchoolPey does not receive or store the payer's M-Pesa PIN.
How we use information
We use information to authenticate users, provide the school financial workspace and parent experience, issue and display invoices, initiate eligible payment requests, reconcile confirmed payments, calculate balances and student credit, generate receipts, maintain financial history, provide support, prevent duplicate or abusive transactions, troubleshoot the service, and improve reliability.
Student and children's information
SchoolPey is designed to administer school-fee records, so student records may relate to children and other minors. This information is provided and managed by schools, authorized staff, parents, or guardians for legitimate school-fee administration. SchoolPey is not designed for children to create independent financial accounts or submit payment credentials directly.
Service providers
We may use infrastructure, database, authentication, payment, communications, monitoring, and customer-support providers to operate SchoolPey. These providers may process information only as needed for the services they provide and are subject to their own security, privacy, and contractual obligations.
Sharing and sale of personal information
We do not sell personal information. We may disclose information to service providers needed to operate SchoolPey and complete requested payment workflows, when required by law, to investigate fraud or abuse, or when reasonably necessary to protect users, schools, or the service.
Data retention
We retain information while accounts and school relationships are active and for as long as reasonably necessary to provide the service, maintain financial and audit records, resolve disputes, prevent fraud, enforce agreements, and meet legal or regulatory obligations. Retention periods may differ by record type and applicable law. Student, invoice, payment, receipt, reconciliation, and other school financial or administrative records may need to remain with the relevant school's institutional record even after a parent or guardian login account is deleted.
Security
We use reasonable administrative, technical, and organizational safeguards designed to protect information. Financially significant actions and payment records are designed to remain traceable and auditable. No online service can guarantee absolute security.
Your choices and requests
Depending on your relationship with a school and applicable law, you may request access to, correction of, or deletion of eligible personal information. Schools may also maintain or correct school-managed student and guardian records. Some financial, transaction, reconciliation, security, audit, or administrative records may need to be retained where required for fraud prevention, dispute handling, accounting, record-keeping, or legal obligations.
Policy updates
We may update this policy as SchoolPey changes or legal requirements develop. When material changes are published, the effective date on this page will be revised.
Account deletion requests
Parents and guardians can submit an account deletion request in the SchoolPey mobile app or through our public account deletion page. Requests are reviewed before deletion and additional identity verification may be required. Submitting a request does not immediately sign you out, revoke your access, or erase school financial and administrative records.
Contact
Privacy questions or requests can be sent to mbakajoe26@gmail.com.