Privacy
What we do with your school’s data.
You are handing us records about children. This page says, in plain English, what we hold, who can see it, what we will never do with it, and how you take it all back out.
Last updated 24 August 2026
Legal review required. This wording describes how Takadar works today and has not yet been settled with a Nigerian data-protection adviser. Where a fact could not be checked in the software itself, the sentence is not on this page at all - we would rather leave a gap than publish a reassurance nobody has verified. If your school needs a signed data processing agreement before you upload anything, write to hello@takadar.com and we will deal with it properly instead of pointing you at this page.
Who is who
Your school owns the records. We only hold them.
Under Nigerian data protection law your school is the data controller. You decide which children are enrolled, which staff get accounts, what a report card says, and who may open any of it. Takadar is your data processor: we hold those records and act on your instructions so the software you pay for works. We have no separate purpose of our own for your students’ data.
Practically, that means you never have to ask our permission to change, correct or remove a record. You do it yourself in the software. If a parent asks your school what you hold about their child, you can answer that yourself too - you do not have to raise it with us first.
What we hold
Everything you put in, and nothing you did not.
Takadar only holds what your school enters or uploads. There is no outside source we buy records from and nothing arrives in your school’s account that your staff did not put there.
- Students
- Names, admission numbers, dates of birth, class and arm, guardian links, and a photograph where your school uploads one.
- Guardians
- Names, phone numbers, email addresses, and which child each guardian is responsible for.
- Staff
- Names, contact details, the role you assign, and what that role is allowed to open.
- Fees
- Fee plans, invoices, part-payments, the cash and bank transfers your bursar records against a student, numbered receipts, and refunds.
- Attendance
- The daily register, lateness and absence, and diary entries written against a class.
- Results
- Continuous assessment and exam scores, report cards, and transcripts.
- Messages
- The notices your school sends to parents and staff, and which class, arm or role each one was addressed to.
- Your school account
- The people who sign in, when they last signed in, your subscription and billing history, and technical logs kept to keep the software running and to investigate abuse.
What we never do
Four things we will not do with your school’s records.
- We never sell your school’s data, and we never hand it to advertisers or data brokers.
- We never market to your parents. The only messages a parent receives through Takadar are the ones your school chooses to send.
- We never use your students’ records to build or improve a product for anybody else.
- We never open your records to browse them. Somebody here opens a school’s data only to answer a request that school has made.
These are not preferences we could quietly change. If we ever needed to use your school’s data for anything beyond running Takadar for you, we would have to ask you first and you would be free to say no and keep using the software exactly as before.
Who can see it
Only the people you invite - and no other school, ever.
Inside your school
You create every account and choose what each one may open. A form teacher works with her own class. Your bursar sees fees and payments. A parent sees only her own child. Nobody sees a part of the school you have not given them.
Other schools on Takadar
Another school can never see your students, your fees or your results. Every request for data carries the school it came from, and the database itself refuses to return anything belonging to a different school - it is not a filter a developer could forget to apply.
Takadar’s own staff
When you report a problem, somebody here may need to look at what you are looking at in order to fix it. That access exists and we would rather say so than pretend otherwise.
What the software does not do yet is show it to you: the audit trail in your account covers what your own staff did, not what we did. Treating that as a gap rather than a feature is the honest description. If your school needs a written undertaking about support access before you upload anything, ask us for one.
How it is protected
What actually protects your records.
Every line below can be checked in the software itself. A short list that is true is worth more to your school’s adviser than a long one that reads well.
- In transit
- Takadar is served over HTTPS, and the sign-in cookies the software sets are marked secure, so a browser will not send them back over a plain HTTP connection.
- Passwords
- Passwords are stored as bcrypt hashes, never as readable text. Nobody at Takadar can look up what your password is; a forgotten one is reset, not retrieved.
- What each account may open
- Screens and reports check the permissions attached to the role you gave an account before they return anything. A form teacher who opens a fees address directly is refused, not shown the page.
- Who touched what
- Every record carries the account that created it and the account that last changed it, with timestamps, and actions are written to an audit trail holding the before and after values. A disputed fee record or an altered score can be traced back to a person, and you can export that trail yourself.
There is more a careful adviser will want to know - where the database physically sits, how backups are taken and how long each one is kept. We have not written those answers on this page, and we are not going to invent one to fill the space. Ask us before you upload anything and you will get a specific reply from the person who set it up.
Your data is yours
You can take your records out whenever you want.
Your records are yours. Export your students, fees and payment history whenever you want them, on any plan.
What comes out
Your student list, your financial report and your attendance register each download as a CSV file from inside Takadar. They open in Excel. No request, no waiting, no fee, and nobody here has to approve it first.
And the trail behind it
The log of who changed what exports the same way, which is what you need if a fee record or a score is ever disputed. If an export you need is not in the software yet, email us and we will run it and send it to you at no charge. We will not hold your own records back to sell you an upgrade.
If you leave
Closing your account does not erase your school.
When you cancel, your school’s account is closed to new activity. Closing it changes the account’s status - it does not delete a single student, receipt or result - so your records are still there to export while you settle outstanding receipts and finish the term’s paperwork.
To have your data deleted, write to hello@takadar.com from an email address that belongs to an account on your school, tell us what you want removed, and we will confirm in writing when it is done. A person does that by hand. Nothing erases your records on a timer behind the scenes, and we would rather you knew that than assume something does.
The NDPA
What we have built, not a badge we bought.
Nigeria’s Data Protection Act puts obligations on your school as the controller, and on us as your processor. Here is what exists in the software today that helps you meet yours.
- Your school’s records are separated from every other school at the database level, not by a setting somebody could switch off.
- You decide what each role may open, so staff see only the part of the school their job needs.
- Changes are stamped with who made them and when, which is what an enquiry into a disputed record actually needs.
- Connections are encrypted and passwords are stored hashed, so a stolen database file does not hand anyone your staff’s passwords.
- You can export your records at any time and ask us in writing to delete them, which is how you answer a parent exercising their rights.
We do not describe Takadar as “NDPA compliant” or “NDPC certified”, because neither phrase means anything unless somebody can show you the filing behind it. Treat any school software that claims either without evidence with suspicion.
If your school is making its own NDPC filing and needs to name the processors it uses, or if you need a data processing agreement signed before you upload a single student, write to hello@takadar.com and we will give you what we have.
Ask us anything on this page.
If something here is unclear, or your school’s adviser needs an answer we have not given, write to us. There is no form to fill in and no reference number to quote. Takadar is built and supported by a small team in Nigeria. Write to hello@takadar.com and you reach the people who build it.