Last updated · July 2026
1. What we hold
Learnexa stores the records schools enter to run themselves: student and guardian details, enrollment and class records, marks and report cards, attendance, fee and payment records, and staff/payroll records. For every user account we hold a name, email address, and hashed password — passwords are never stored in plain text.
2. Why we hold it
Solely to operate the platform for the school that entered it. Each school is a separate tenant and its data is isolated from every other school's. We do not sell personal data, and we do not use school records for advertising.
3. Cookies and sessions
The app uses HTTP-only cookies for authentication — keeping you signed in securely — not for tracking. Security-relevant events (sign-ins, administrative changes) are logged with the acting account and time.
4. Email
We send transactional email only: password resets, account invitations, and registration notices. Addresses that hard bounce or mark our mail as spam are automatically suppressed from future sending.
5. Third parties
We use a small set of processors to run the service — hosting, transactional email delivery, error monitoring, and (where a school enables it) the SchoolPay payment integration. Each receives only what it needs to perform its function.
6. Retention and your rights
Records are retained while the school's tenancy is active; school life requires history, so records are archived rather than silently deleted. Schools may request a full export or the deletion of their tenancy. Individuals should direct requests about their personal records to their school, which controls that data; we support the school in fulfilling them.
7. Contact
Privacy questions: support@learnexa.cloud.