How NyoGrade collects, uses and protects personal information, including the information schools hold about their students. NyoGrade is owned and operated by Nyotacore Solutions & Services Ltd.
Last updated: 10 August 2026NyoGrade is a cloud based school management and result processing platform used by schools to keep student records, process results and issue report cards.
NyoGrade is owned and operated by Nyotacore Solutions & Services Ltd, a company registered in Nigeria. Nyotacore Solutions & Services Ltd is responsible for the platform and is the company that carries the obligations set out in this policy.
| Registered company | Nyotacore Solutions & Services Ltd |
|---|---|
| RC number | 9315534 |
| Registered office | House 19, Ore-Ofe Estate, Asore, Atan, Ogun State, Nigeria |
| Website | nyograde.com |
| Data protection contact | gdpr@nyograde.com · +234 814 089 1605 |
In this policy, "we", "us" and "our" mean Nyotacore Solutions & Services Ltd. "The platform" means the NyoGrade software and website. "Your school" means the school that holds your records.
This distinction matters, because it determines who you should contact about your records.
Your school is the data controller for the records it keeps about its students, parents and staff. The school decides what to record, who may see it and how long to keep it.
Nyotacore Solutions & Services Ltd is the data processor for those records. We hold and process them on the school's instructions in order to provide the platform. We do not decide what a school records about a student, and we do not use school records for our own purposes.
Nyotacore Solutions & Services Ltd is the data controller for the account and billing information of the schools and school owners who subscribe to us, and for information collected through our public website.
This means that if a parent asks us to delete their child's records, we cannot act on that request alone. We will refer the request to the school and support the school in carrying it out.
| Category | What it includes |
|---|---|
| Student identity | Name, admission number, gender, date of birth, photograph, class and session history |
| Parent or guardian | Name, relationship to the student, phone number, email address |
| Academic records | Scores, subject registration, grades, averages, positions, teacher remarks, generated report cards |
| Attendance and conduct | Attendance records and behaviour trait ratings |
| Other student details | Height, weight, club membership and similar details, where a school chooses to record them |
| Staff records | Name, username, email address, phone number, photograph, role and subject assignments |
We do not run analytics on the platform or on our website. We do not use advertising or tracking scripts, we do not build profiles of visitors, and we do not sell personal information to anyone.
Our pages load typefaces from Google Fonts. When a page loads, your browser requests those font files from Google, and Google therefore receives your IP address. We do not control what Google does with that request, and we receive nothing from it.
The platform exists to hold school records, so most of the information in it relates to children.
We do not collect information directly from children. All student information is entered by the school, on the school's authority and under the school's control. Students who are given a login can view only their own results.
We do not use student information for marketing, profiling, advertising or any purpose beyond providing the platform to the school.
Under the Nigeria Data Protection Act 2023 we and your school rely on the following bases:
We do not sell personal information. We share it only in these circumstances:
| Who | Why |
|---|---|
| Your school | Records belong to the school and are available to the staff it authorises |
| Parents and guardians | A result is released to whoever holds the scratch card PIN, or through a link the school issues |
| Paystack | Processes card payments. Payment details are handled by Paystack and are not stored by us |
| Our hosting providers | Operate the data centres in which the platform runs, in Nigeria, the United Kingdom, Germany and the United States |
| Google Fonts | Serves the typefaces used on our pages, and receives your IP address when a page loads |
| Our email provider | Delivers service messages such as password resets and renewal reminders |
| Authorities | Where we are required to disclose information by law |
We follow the 3-2-1 rule for backups. Three copies of your data are kept, on two different types of storage, with one copy held off site. This protects your records against hardware failure, accidental deletion and loss of a single site.
No system can be guaranteed completely secure. If a breach occurs that is likely to affect your rights, we will notify the affected schools without undue delay, and we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the Nigeria Data Protection Act requires.
Student and academic records are kept for as long as your school holds an active subscription, because a school needs prior years to produce cumulative results and to answer questions about past terms.
Before your licence expires we send you reminders to renew. If you do not renew, your records are not deleted straight away.
You can export your student records to Excel or PDF at any time while your subscription is active. We would encourage you to do that before a licence lapses rather than waiting for the notice period.
Payment and invoice records are kept for as long as tax and company law require. In addition to being held in the platform, these records are exported to spreadsheets each quarter and stored separately.
Under the Nigeria Data Protection Act 2023 you have the right to:
If you are a parent, student or member of school staff, contact your school first. The school controls those records and is the right place to start. If you contact us instead, we will refer you to the school and help the school to respond.
If you are a school or school owner asking about your own account, contact us using the details below.
We use only the cookies the platform needs in order to work.
| Cookie | Purpose | Lifetime |
|---|---|---|
| Authentication | Keeps you signed in as you move between pages | Expires after 60 minutes of inactivity |
| Session | Holds temporary information needed while you are using the platform | Expires after 60 minutes of inactivity |
| Anti forgery | Protects forms against cross site request forgery | Ends when you close your browser |
These cookies are essential. The platform cannot work without them, and there is no advertising or tracking cookie to opt out of.
We operate from data centres in Nigeria, the United Kingdom, Germany and the United States. This means your information may be stored or processed outside Nigeria.
Where information is held outside Nigeria, we take steps to ensure it is protected to a standard consistent with the Nigeria Data Protection Act 2023, including contractual commitments with the providers who operate those facilities.
Some of the providers described in section 7, including our payment processor and Google Fonts, may also process information outside Nigeria.
We may update this policy as the platform changes or as the law requires. The date at the top shows when it was last revised. Where a change materially affects how we handle personal information, we will notify subscribing schools directly rather than relying on this page alone.
For questions about this policy, or to exercise your rights over information we hold as a controller:
| gdpr@nyograde.com | |
| Phone | +234 814 089 1605 |
| Post | House 19, Ore-Ofe Estate, Asore, Atan, Ogun State, Nigeria |
We aim to respond to any request about personal information within 30 days.
You also have the right to complain to the Nigeria Data Protection Commission at ndpc.gov.ng.