Privacy Policy

Overview

Little Ones ("we", "us", or "our") operates the Little Ones platform — a school management service for nurseries and primary schools. This Privacy Policy explains what data we collect, how we use it, who we share it with, and the rights you have over your data.

By using Little Ones, you agree to the collection and use of information as described in this policy. If you do not agree, please do not use the platform.

Data We Collect

We collect the following categories of data, depending on how you use the platform:

Account & identity data

• Names and email addresses of school administrators, teachers, and parents
• Phone numbers (for SMS notifications)
• School name and location

Children's data

• Student name, class, and date of birth
• Guardian contact details linked to each student
• Attendance records
• Photos and videos uploaded by teachers as part of daily activity updates
• Health records — allergies, vaccinations, and medical notes (collected only with explicit NDPA consent)

Payment data

• Fee payment records (amounts, dates, status)
• We do not collect, process, or store any payment card details, bank account numbers, or any other financial credentials whatsoever. All payment information is entered directly on Paystack's secure interface and never passes through Little Ones' systems

Usage data

• Device type, browser, and operating system
• Pages visited and features used, for platform improvement
• Log data including IP address and timestamps

Google Sign-In

Little Ones offers "Sign in with Google" as an authentication option. When you use this feature:

• We receive your name and email address from Google
• We do not receive or store your Google password
• We do not store your Google profile picture or any other Google account data beyond your name and email
• We use your name and email solely to create and identify your account on Little Ones
• We do not share your Google account data with any third party
• We do not use Google account data for advertising or marketing purposes

How We Use Your Data

• To provide the platform — managing students, classes, timetables, fees, attendance, and health records
• To send notifications to parents — SMS alerts, email digests, and push notifications about their child's activities and attendance
• To process fee payments through Paystack and maintain payment records
• To authenticate users and maintain account security
• To support schools and parents when they contact us
• To improve the platform based on how it is used
• To comply with legal obligations under Nigerian law, including the Nigeria Data Protection Act 2023 (NDPA)

We do not use your data for advertising, and we do not build advertising profiles.

Data Sharing

We share data only with the following parties and only as necessary to operate the platform:

We do not sell, rent, or trade your data. We do not share data with advertisers, data brokers, or any other third party not listed above.

Children's Data

Little Ones is a B2B platform: schools are our customers and act as the data controller for their students' information. We process children's data only at the direction of the school.

• We collect data about children only when a school administrator adds a student to the platform
• Health records (allergies, vaccinations, medical notes) are collected only after the school obtains explicit NDPA consent from the parent or guardian
• Photos and videos of children are shared only with parents or guardians linked to that child's account
• Parents can request access to, correction of, or deletion of their child's data at any time by contacting support@little-ones.africa

Data Security

• All data is encrypted at rest and in transit using industry-standard protocols
• Each school's data is fully isolated — no school can access another school's information
• Access to data is restricted to authorised users only, based on their role (admin, teacher, or parent)
• Our infrastructure is hosted on AWS, which maintains ISO 27001, SOC 2, and other security certifications
• We review and test our security practices regularly

No system is 100% secure. If you suspect a security incident, please contact us immediately at support@little-ones.africa.

Data Retention

We retain data for as long as a school account is active. When a school cancels its account:

• We will delete or anonymise all school and student data within 90 days of account closure
• Payment records may be retained for longer periods where required by Nigerian tax or financial regulations

Schools and parents may also request deletion of specific data at any time. See "Your Rights" below.

Your Rights

Under the Nigeria Data Protection Act 2023 (NDPA) and applicable law, you have the following rights:

• Access — request a copy of the personal data we hold about you or your child
• Correction — request correction of inaccurate or incomplete data
• Deletion — request deletion of your data, subject to legal retention requirements
• Portability — request your data in a structured, machine-readable format
• Objection — object to certain processing activities
• Withdrawal of consent — where processing is based on consent (e.g. health records), you may withdraw consent at any time

To exercise any of these rights, contact us at support@little-ones.africa. We will respond within 30 days.

Cookies

Little Ones uses only essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, but this may prevent you from logging in.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, for significant changes, notify users by email. Continued use of the platform after changes are posted constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact: