Your school's records, kept safe and kept yours.

The law we follow

We follow Nigeria's data protection law: the Nigeria Data Protection Act 2023 (NDPA) and the General Application and Implementation Directive 2025 (GAID). Our privacy policy and data processing agreement are written for them. Your school decides what records it keeps; Akadaa looks after them for you. This is the law we work to.

Every connection is encrypted

Akadaa only works over HTTPS, so what travels between a phone and Akadaa is encrypted. Browsers are told never to use a plain connection, and the sign-in cookie can't be read by other scripts or sent without encryption.

• Passwords are stored only as a one-way hash (bcrypt), never as the password itself
• Two-step sign-in secrets and school bank account numbers are encrypted in the database (AES-256-GCM)

Each person sees only their job

Every account has a role: proprietor, school administrator, teacher, staff, parent or student. Staff can be given duties such as bursar, registrar or exams officer. Akadaa checks the role on the server for every page and every action. A bursar handles fees but does not see students' results; a parent sees only their own children.

Two-step sign-in and trusted devices

• Two-step sign-in with an authenticator app, with 10 backup codes
• Trust a device for 30 days, so you aren't asked every time
• An email when someone signs in from a new device, with a "This wasn't me" link that signs the account out everywhere
• Sign out of other devices from Account, then Security
• A password set by someone else must be changed at the first sign-in
• Signed out after 30 minutes without use, and repeated wrong passwords are slowed down

An audit log of who did what

Sign-ins, changes, imports, exports, settings and every Login As are recorded with the time, the person and the device. Administrators can filter the audit log and export it. It is never trimmed.

Your data stays yours

Your records belong to your school. Today you can take them out yourself:

• Students, staff, payments and sponsors: export to Excel
• Report cards, transcripts and exam cards: download as PDF
• Attendance, payment and fee reports, and the audit log: export as CSV

A full copy of all your school's records is available on request: email support@akadaa.com. Our terms say that when an account closes, we return your records to you or delete them, as you choose.

Where your data is kept

Akadaa and its database run on Railway, in its EU region (Amsterdam, the Netherlands). A few services we use are elsewhere, such as email delivery and the AI features; the privacy policy lists each one, where it is, and what it receives. If a breach ever affects your school, we tell you without undue delay.

No ads, no tracking

Akadaa doesn't show ads, doesn't sell data, and sets no analytics or tracking cookies. The cookie notice lists every cookie we use.