Privacy Notice

Effective version: October 26, 2026

Who operates Academy

Academy is operated by Olamide Olatayo Bello Corporation. Institutions manage the educational and employment information they enter and determine authorized access. This notice describes the implemented platform; it does not claim that every planned feature is active.

Information processed

Depending on enabled features and institution use, Academy processes account email addresses and password hashes; institution and user records; learning content and submissions; grades and progress observations; attendance; staff salary records and payroll drafts; invoices; exam answers and timestamps; and security and audit records. Registration records the accepted policy version and acceptance time.

Location and cookies

Time clocking requests device location and accuracy at the moment of a clock-in or clock-out action. Campus geofencing uses these coordinates to evaluate the punch. Continuous location tracking is not enabled. The browser requests location permission. Academy uses an essential, HTTP-only session cookie for authentication; deployed HTTPS sessions use a Secure cookie.

Purposes and access

Information is used to provide institution workspaces, deliver education and examinations, administer records and staff attendance, generate reports and payroll drafts, and protect service access. Authorized users receive access according to their role. Institutions must obtain appropriate permissions before entering information about children or employees.

Sharing and integrations

Data may be processed by hosting and infrastructure providers necessary to operate the service, by integrations an institution enables, or when required by applicable law. Any future optional provider connection should be explained before activation. This release does not implement advertising tracking or a sale-of-data workflow.

Retention, requests and security

Operational records remain in the institution database and may also exist in deployment backups. Automatic retention/deletion schedules and self-service export/deletion requests are not implemented in this release. Contact your institution administrator to request access, correction, export or deletion, subject to applicable obligations. The institution can escalate operational requests to the operator. Access controls, password hashing and audit logs reduce risk; no system can guarantee absolute security.

Institution obligations and changes

Each institution should explain its collection practices, identify its privacy contact, set retention rules, and provide any required student, parent or employee notices before use. Changes to this notice will show an updated effective version.