Children's data, handled with care.
Pinktower is built around the Nigeria Data Protection Act 2023, the NDPA General Application and Implementation Directive 2025 and the Child's Rights Act 2003.
Children's privacy matters
PinkTower supports schools and childcare providers. Children do not create their own PinkTower accounts. Access is limited to authorised staff and verified parents or legal guardians.
Privacy policy
Effective and last updated: 7 September 2026
The summary below is the short version of how PinkTower handles personal data. It does not replace the full policy — please read that for the complete detail.
The short version
- Your school owns its records. PinkTower processes them as the school's data processor, under the school's instructions.
- Children never create accounts. Only authorised staff and verified parents or legal guardians can see a child's record.
- We collect what the Service needs: pupil, guardian and staff details, attendance, academic, medical, message and payment records.
- We never sell personal data, never advertise to your families, and never use identifiable school content to train general-purpose AI models.
- Data is encrypted in transit and at rest, access is least-privilege, and every view or change to a child's record is logged.
- You can request access, correction, deletion, restriction or a copy of your data at any time.
- Payments are processed by Paystack; we do not store card details.
- Breaches are contained and notified within 72 hours, in line with the Nigeria Data Protection Act 2023.
- If your school leaves, we return or delete its data within 60 days of the transition period ending.
Questions about this policy? Email our Data Protection Officer at legal@pinktowerafrica.com.
Service agreement
The short version of the terms every Pinktower school accepts. The full agreement governs.
- Fees are quoted in Naira, based on your enrolment band and chosen modules. Pay monthly, per term or per year; the subscription renews automatically unless cancelled 30 days before renewal.
- Payments run through Paystack, with a branded receipt issued automatically. School Shop: 0% commission on school-owned sales, 7% on third-party sales.
- Your school owns its data. We process it on your instructions, never sell it, and return or delete it within 60 days of the transition period ending.
- 99.5% uptime target, support Monday to Friday 8am – 6pm WAT, onboarding and staff training included.
- Accounts are for authorised staff and verified guardians only; we may suspend access to protect a child or comply with a lawful order.
- Either party may end the agreement at the close of a billing cycle with 30 days' notice; export access continues throughout the transition.
Read the full agreement here — link coming soon
Security & safety
Encrypted end to end
Data is encrypted in transit and at rest, with keys managed separately from the application.
Least-privilege access
Every role sees only what it needs. Medical permissions are configured separately from admin ones.
Full audit trail
Every view and change to a child's record is logged with the user and timestamp.
Verified guardians only
Parents are verified against the school's own roster before they can see a child.
Codes in-app only
Gate and pickup codes are delivered in the app — never by SMS, where they can be forwarded.
Incident response
Breaches are investigated, contained and notified within the periods the NDPA requires.
Contact us
PinkTower Technologies Limited (RC 9812239)
11B Mayaki Usman Street, Lekki Phase 1, Lagos, Nigeria
Data Protection Officer: Imhoertha Ojior
legal@pinktowerafrica.com
If your question concerns a school's use of a pupil record, please also contact that school using the details it gave you.