Trust & privacy
How we look after your family's information
This page is maintained by the SafeRoots Learning team to answer common questions about security, privacy, and the third parties we rely on. It is editable project content — not an independent certification — and we keep it in sync with how the app actually works today.
Last reviewed: June 2026
Who can sign in
Parents do not need an account to enrol. Enrolment goes through a public form and is stored against your contact details.
Staff sign in with email and password to access the admin dashboard. Admin permissions are stored separately from accounts and can only be granted by an existing admin.
The information we collect
From the enrolment form: parent name, email, phone number, the child's first name, age, year group, and any notes you share with us. From staff sign-in: email address and an authentication session.
We collect this so we can enrol your child, deliver lessons, and contact you about the programme. We do not sell this information.
Where the data lives
Enrolment records, lesson content, and delivery logs are stored in our managed backend (Lovable Cloud, built on Supabase). Access is restricted by row-level security so that only signed-in admins can read family records, and only admins can change role assignments.
Data in transit is protected by HTTPS. Passwords are handled by our authentication provider and are never stored in our application database.
Partners we share data with
We use a small number of partners to run the service. We share only what each partner needs to do its job.
- Lovable Cloud / Supabase — database, authentication, and hosting for the application.
- Paystack — processes school fee payments. We do not see or store your card details.
- WhatsApp (via WATI) — delivers daily lessons and the welcome message to the phone number you provide at enrolment.
Keeping and deleting data
Active enrolment records are kept while your child is enrolled and for a reasonable period afterwards for record-keeping. You can ask us to delete your family's data at any time by emailing us.
Your choices
You can ask for a copy of your data, ask us to correct something, or ask us to delete your records. Email hello@saferoots.ng and we will respond.
Reporting a security concern
If you believe you have found a security issue, please email hello@saferoots.ng with details. Please do not test against real family accounts.
Shared responsibility
SafeRoots is responsible for how this application is built, configured, and operated. Our hosting partner is responsible for the underlying infrastructure. You as a parent are responsible for keeping your sign-in details (where applicable) and the device that receives WhatsApp lessons reasonably secure.
This page describes current practices and is not a regulatory certification or legal contract. For questions, contact us at the address above.