This Privacy Policy explains how reenjar ("we", "us", or "our") collects, uses, and protects information when you use our platform — including the school web dashboard and the reenjar parent mobile app.
We are committed to protecting your privacy in accordance with the Nigeria Data Protection Regulation (NDPR) and applicable Nigerian law. By using reenjar, you agree to the practices described in this policy.
1. Who we are
Reenjar is a school fee management platform based in Nigeria. We operate the reenjar web dashboard for school administrators and the reenjar mobile app for parents. Our registered contact email is hello@reenjar.com.
2. Information we collect
2.1 From school administrators
- Account information: Name, email address, role, and password (stored as a secure hash).
- School information: School name, email address, phone number, address, and CAC registration number.
- Bank account details: Bank name, account number, and account name — used solely to process settlement payouts to your school.
- Student data: Student first names, last names, enrollment status, class assignments, and academic history that you input into the platform.
- Parent contact data: Parent/guardian names, email addresses, and phone numbers associated with each student record — provided by you during student enrollment.
- Payment records: Amounts, due dates, payment dates, statuses, and Flutterwave transaction references for all fee requests created through the platform.
- Usage data: Log data including IP address, browser type, pages accessed, and timestamps, collected for security and operational purposes.
2.2 From parents
- Google account information: When you sign in with Google, we receive your email address, first name, last name, and a unique Google identifier. We do not receive your Google password.
- Device token: A Firebase Cloud Messaging (FCM) token for your device, used to deliver push notifications. This is updated automatically when you reinstall the app or switch devices.
- Payment activity: Records of fee requests viewed, payment initiations, and payment confirmations. We do not store your bank account number or any banking credentials.
- Usage data: App version, device platform (Android/iOS), and in-app activity logs for support and debugging purposes.
We do not store your bank details. All payment processing is handled by Flutterwave. When you make a payment, you transfer to a virtual account number generated by Flutterwave — reenjar only receives confirmation that the transfer was completed.
3. How we use your information
We use the information we collect to:
- Provide, maintain, and improve the reenjar platform and mobile app.
- Create and manage school accounts, class structures, and student records.
- Send fee requests from schools to the correct parent email addresses.
- Process fee payments and confirm payment status via Flutterwave webhooks.
- Deliver push notifications to parents when new fee requests are created.
- Process settlement transfers from reenjar to school bank accounts.
- Send transactional emails to schools (payment confirmations, transfer notifications).
- Detect and prevent fraud, abuse, and security incidents.
- Respond to support requests and enquiries.
- Comply with legal obligations under Nigerian law.
We do not use your information for advertising, and we do not sell your data to any third party.
4. Third-party services
Reenjar integrates with the following third-party services. Each has its own privacy policy and data practices.
Flutterwave
We use Flutterwave to process payments and initiate settlement transfers. When a parent initiates a payment, their name and email are sent to Flutterwave to generate a virtual bank account. When a school initiates a transfer, the school's bank details are sent to Flutterwave. Flutterwave is a PCI-DSS compliant payment processor. See their privacy policy at flutterwave.com/ng/privacy-policy.
Google Sign-In
Parents sign in using their Google account. Google returns a verified ID token containing the user's email, name, and a unique identifier. We do not receive your Google password or access to any other Google services. See Google's privacy policy at policies.google.com/privacy.
Firebase Cloud Messaging (FCM)
We use Firebase, a Google service, to send push notifications to parents. Your device token is registered with Firebase when you sign in. Firebase receives the token and the notification content (fee description and amount) to deliver the notification to your device. See Firebase's privacy information at firebase.google.com/support/privacy.
Email delivery
We send transactional emails (payment confirmations, transfer notifications, welcome emails) via Gmail SMTP. These emails are sent to school-registered email addresses only.
5. Data sharing
We do not sell, rent, or trade your personal information. We share data only in the following circumstances:
- With third-party service providers listed above (Flutterwave, Google/Firebase), solely to operate the platform.
- Between a school and its parents — the school sees parent names, emails, and phone numbers for the students they enrolled. Parents see the school name and their children's names and classes.
- With law enforcement or regulators if required by applicable Nigerian law or court order.
- In the event of a business transfer — if reenjar is acquired or merges with another entity, user data may be transferred as part of that transaction. We will notify affected users in advance.
6. Data retention
We retain your data for as long as your account is active or as needed to provide our services. Specifically:
- School accounts: Retained while the school remains active on the platform and for 2 years after deactivation, to allow for legal and financial audit requirements.
- Student and payment records: Retained for 7 years to comply with financial record-keeping obligations under Nigerian law.
- Parent profiles and device tokens: Retained while the account is active. Device tokens are replaced automatically when you reinstall the app or change devices.
- Usage logs: Retained for 90 days for security and debugging purposes.
You may request deletion of your data at any time — see Section 7 for your rights.
7. Your rights
Under the Nigeria Data Protection Regulation (NDPR), you have the following rights regarding your personal data:
- Right of access: You may request a copy of the personal data we hold about you.
- Right to rectification: You may ask us to correct any inaccurate or incomplete data.
- Right to erasure: You may request deletion of your personal data, subject to our legal retention obligations.
- Right to object: You may object to our processing of your data in certain circumstances.
- Right to data portability: You may request your data in a structured, machine-readable format.
To exercise any of these rights, contact us at hello@reenjar.com. We will respond within 30 days.
Note for parents: Your contact information (name and email) in a school's student records was provided by the school when they enrolled your child. To update or remove it, please contact the school's administrator directly, as they control that record.
8. Security
We take the security of your data seriously and implement appropriate technical and organisational measures, including:
- All data transmitted between users and reenjar is encrypted using TLS (HTTPS).
- Passwords are stored as secure cryptographic hashes — we never store plain-text passwords.
- Parent authentication uses Google's OAuth 2.0 system — we never handle parent passwords.
- Access to production data is restricted to authorised reenjar personnel only.
- Payment processing is delegated entirely to Flutterwave, a PCI-DSS Level 1 certified processor.
No system is completely impervious to attack. If you discover a security vulnerability, please report it responsibly to hello@reenjar.com.
9. Children's data
Reenjar's platform involves student data, including data about minors. This data is provided by schools (who collect it from parents during enrollment) and is used solely to manage fee requests and payment tracking. We do not use student data for any other purpose, and we do not display student information to any party other than the school and the student's parent/guardian.
The reenjar parent mobile app is intended for adults (parents and guardians). It is not directed at children under 13.
10. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify affected users by email. Your continued use of reenjar after any changes constitutes your acceptance of the updated policy.
If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact our Data Protection Officer:
We are committed to resolving any privacy concerns promptly and in accordance with Nigerian law.