Privacy Notice

SSD SchoolLink ("we", "us") operates the SSD SchoolLink student and school portal. We are the data controller for the personal data described in this notice — meaning we decide why and how it is processed.

• Account data — name, email address, login credentials. Used to create and secure your account. Legal basis: performance of our contract with you.
• School and academic data — school, class or level, student ID, courses, results and GPA. Used to provide the Service. Legal basis: performance of our contract.
• Contact data — student and parent phone numbers. Used for account communication and mobile-money fee payments. Legal basis: performance of our contract.
• Support messages — when you contact us. Used to respond and improve the Service. Legal basis: legitimate interests.
• Usage and device data — log data, device identifiers and IP address. Used for security, fraud prevention and product improvement. Legal basis: legitimate interests and legal obligation.

Payment card and billing details are collected directly by our Merchant of Record, Paddle, when you buy a subscription — we do not see or store your card details.

• Service providers and subprocessors (hosting, analytics and support tooling);
• Paddle, our Merchant of Record, for the sale of subscriptions, payment processing, subscription management, tax compliance and invoicing;
• Professional advisers (legal and accounting) where needed;
• Authorities where required by law.

We keep personal data only for as long as needed for the purposes above — generally while your account is active and for a limited period afterwards to meet legal and accounting obligations. Data that is no longer needed is deleted or anonymised.

Depending on the law that applies to you, you may have the right to access, correct or delete your personal data, to restrict or object to processing, to data portability, and to withdraw consent where processing is based on consent. You may also complain to your data-protection authority. To exercise any right, contact us through the support channels shown in the app; we respond within one month.

We apply appropriate technical and organisational measures, including encryption in transit, row-level access controls so each account can only read its own records, and restricted administrative access.

Our hosting and payment providers may process data outside South Sudan. Where data leaves your country, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We use essential cookies only — for example, to keep you signed in. We do not use analytics or marketing cookies at this time. You can clear cookies in your browser settings, but signing in will no longer work without the essential ones.