Last updated 16 October 2026
Draft: this document has not yet been reviewed by a lawyer. It will be confirmed before it is relied on.
1. Who this applies to
PakLeap is school software. A school (the "School") signs up, and its administrators, teachers, students and parents or guardians use it. The School decides what information goes in and who may use it; PakLeap stores and processes that information on the School's behalf.
2. What we collect
Account details: name, email address or admission number, phone number, role and the school they belong to. Passwords are stored only as one-way hashes.
School records entered by the School or generated by use: class and section, attendance, homework and marks, exam results, timetable, fee invoices and payments, leave requests, library issues, transport routes, discipline notes, notices and messages.
Learning activity: lessons opened, playback position, completed lessons, quiz attempts and scores, practice sessions, notes a student writes and likes or dislikes on lessons.
Technical data: device tokens for push notifications, IP address and browser or app type in security and audit logs.
3. How we use it
To run the features the School has switched on, to keep accounts secure, to send notices and reminders the School chooses to send, and to show the School reports about its own data. We do not sell personal information and do not use students' information for advertising.
4. Who can see it
Each School's data is kept separate from every other School's. Within a School, access follows role: a student sees their own records, a parent sees their linked children, a teacher sees the classes and subjects they teach, and administrators see what their permissions allow.
We use service providers to deliver email and push notifications and to host the service. They receive only what is needed to do that job.
Actions that change data are recorded in an audit log that the School's administrators can review.
5. Children
Student accounts are created and managed by the School, which is responsible for obtaining any parent or guardian consent required for its students. Parents or guardians can ask the School to show, correct or remove their child's information.
6. Keeping and deleting data
Data is kept while the School uses PakLeap and for the academic years the School keeps. When a School closes its account, its data is deleted or returned to it on request, subject to anything we are required by law to keep.
7. Security
We use access control by role, per-school data separation, hashed passwords, encrypted connections and audit logging. No system is perfectly secure; if we learn of a breach affecting you we will tell the School without undue delay.
8. Your choices and contact
Ask your School first about access, corrections or deletion. You can also write to us at support@pakleap.com and we will route the request to the right School. We may update this policy; the date at the top shows the latest version.