Privacy Policy

Effective date: 5 July 2026 · AariNAT Company Limited (RC-1732521)

This policy explains how AariNAT Company Limited ("AariNAT", "we", "us"), operator of the Educational Bloom platform (agent.edubloom.com.ng, school.edubloom.com.ng and portal.edubloom.com.ng), collects, uses, stores and protects personal data, in line with the Nigeria Data Protection Act, 2023 ("NDPA") and the regulations of the Nigeria Data Protection Commission ("NDPC").

1. Who We Are

AariNAT Company Limited is the Data Controller for personal data processed through Educational Bloom. Schools using the School Portal act as Data Controllers for the student and staff data they input, and AariNAT acts as their Data Processor for that data.

Registered office: Abeokuta, Ogun State, Nigeria.
Contact: aarinat.company.limited@gmail.com · WhatsApp/Phone: +234 814 507 3941

2. What We Collect

Category	Examples	Collected from
School staff data	Name, phone, email, role, password (hashed where possible)	School admin at signup
Student data	Name, class, phone (parent/guardian), attendance, scores, fee balance	School staff, register scans
Agent data	Name, phone number, commission rate	AariNAT onboarding
Payment-related data	Fee amounts, payment references (via BloomCollect / Kora)	School bursar, payment gateway
Technical data	Device type, browser, approximate usage logs	Automatically, via the app

3. Children's Data

Educational Bloom processes personal data belonging to students under 18, entered by their school. Under the NDPA, processing a child's data requires a lawful basis and, where relying on consent, verifiable consent from a parent or guardian. Because schools — not AariNAT — collect this data directly from parents/guardians as part of enrolment, the school is responsible for obtaining that consent or establishing another lawful basis (e.g. performance of the school's educational contract with the parent) before entering a child's data into the platform. AariNAT processes that data only on the school's instructions and does not use student data for advertising or profiling.

4. Why We Process This Data (Lawful Basis)

Contract — to provide the school management service the school has subscribed to.
Legitimate interest — to run agent commissions, prevent fraud, and improve the platform.
Consent — for optional features such as WhatsApp fee reminders to parents.
Legal obligation — where required by NDPC or other Nigerian regulators.

5. How We Store and Protect Data

Data is stored on Google Firebase (Firestore), a cloud database provider. Data may be processed on servers outside Nigeria; Google maintains internationally recognised security certifications, and we require it to handle data under contractual data-protection terms consistent with NDPA cross-border transfer requirements.
Access to admin data (agents, deals, ledger) is restricted to AariNAT staff who need it.
School staff access is role-based — a Class Teacher, for example, cannot see fee data.
We do not sell personal data to third parties.

6. Retention

We retain personal data for as long as a school's subscription is active, and for 24 months after a subscription ends, to allow for account recovery, dispute resolution, and legal/regulatory record-keeping. After this period, data is deleted or anonymised on request.

7. Sharing of Data

We share data only with:

The school itself (for its own students/staff);
Payment processors (e.g. Kora/Korapay) strictly to process fee payments;
Cloud infrastructure providers (Google Firebase) as our data processor;
Regulators or law enforcement, where legally required.

8. Your Rights Under the NDPA

Data subjects (parents, guardians, staff, agents) have the right to:

Request access to personal data held about them or their child;
Request correction of inaccurate data;
Request deletion of data, subject to lawful retention needs;
Object to certain processing (e.g. marketing messages);
Lodge a complaint with the Nigeria Data Protection Commission (ndpc.gov.ng).

To exercise any of these rights, contact your school directly (for student/staff data) or AariNAT at the email above.

9. Changes to This Policy

We may update this policy as the platform grows. Material changes will be communicated to schools via WhatsApp or in-app notice.

10. Contact

AariNAT Company Limited — Data Protection queries
Email: aarinat.company.limited@gmail.com
Phone/WhatsApp: +234 814 507 3941