Legal Document
Skolu Privacy Policy
This policy explains how Skolu (PT. Foremost Learning Centre) collects, uses, shares, and protects data processed through our website, web dashboards, and mobile apps for institutions, staff, students, parents, and guardians.
Version: 2026-07-20 · Effective: July 20, 2026 · Last updated: July 20, 2026
Data We Collect
- Account data such as name, email, phone number, role, user ID, and institution or branch identifiers associated with the account.
- Operational institution data including classes, students, guardians, staff, attendance, reports, lesson and activity records, notifications, and billing or transaction records where those features are enabled.
- User-submitted content such as photos, videos, activity notes, attendance photos, attachments, and other files uploaded to the platform.
- Device and location data such as push tokens, device metadata, and precise location for staff attendance verification where that workflow is enabled by the institution.
- Technical data such as product interaction analytics, crash data, diagnostic telemetry, security logs, and service access records.
How We Use Data
- To authenticate users, enforce access controls, and provide service features based on account role and institutional service terms.
- To run staff, parent, academic, communication, notification, billing, and attendance verification workflows based on the features an institution has enabled.
- To provide technical support, monitor service reliability, analyze feature usage, and improve platform security, stability, and performance.
Processing Roles and Legal Bases
- For operational data entered and managed by an institution, the institution generally determines why the data is used and Skolu processes it to provide the service under the institution agreement and instructions.
- For account administration, security, Skolu support and billing, and management of the service itself, PT. Foremost Learning Centre determines the processing needed to operate the platform and meet legal obligations.
- Processing relies on service or contract performance, legal obligations, legitimate interests such as security and service improvement, and specific consent where required by law. The required login acknowledgement is not universal consent for all processing.
Product Analytics and Service Improvement
- Skolu may use analytics tools on the public website, web dashboards, and mobile apps to understand service usage and improve product quality.
- On the public website, analytics remain anonymous and may include page path, referrer or campaign, device and browser type, approximate region, and button or link interaction categories. Name, school, WhatsApp number, demo-form message, URL query string, and URL fragment are not sent as analytics payloads.
- In authenticated products, analytics profile attributes may include user full name, institution name, account type, role, and institution identifiers associated with platform activity.
- Email, authentication tokens, and full request bodies are not used as default payloads for product analytics.
Third-Party Services and Data Sharing
- Skolu uses providers for hosting and databases, file storage, email and push notifications, WAHA or WhatsApp institution communications and OTP, product analytics, and crash, log, or diagnostics monitoring.
- We share data only to the extent needed for those providers to perform services on Skolu's behalf or to comply with applicable legal obligations.
- Skolu does not sell personal data and does not use customer data for cross-app or cross-site advertising tracking.
- Providers may process data in other locations according to their infrastructure. Skolu applies reasonable contractual and technical safeguards for those transfers under applicable law.
Security and Retention
- Skolu applies role-based access controls, institution-level data isolation, security logging, and internal access restrictions based on operational need.
- Data is retained during active service, for legitimate operational needs, and for any retention periods required by law or contract.
- When retention periods end or data is no longer needed, it is deleted, anonymized, or archived in line with internal policy and applicable obligations.
Institution Controls and Data Requests
- Institution owners or admins can request data correction, export, restriction, or deletion through Skolu's official support channels.
- In some cases, requests from staff, parents, or guardians may first be routed to the institution that manages the operational relationship for that data.
- We may require additional verification before processing requests to protect account and institution security.
- Data subjects may request access, correction, deletion, restriction, or export where available by law, withdraw consent where processing depends on consent, and raise complaints through info@skolu.id or the competent authority.
Children and Education Context
- Skolu is used by educational institutions to manage student and guardian data in support of school and learning operations.
- Student data is handled on behalf of the institution or based on authorization from a parent or lawful guardian, depending on the service flow involved.
- We encourage institutions to upload only data relevant to educational operations and to ensure they provide any notices or permissions required for parents or guardians.
Changes, Versions, and Contact
- Material changes are published as a new version with a new effective date and, where needed, an in-product notice or renewed acceptance. Non-substantive formatting, typographical, or translation corrections may retain the same version.
- This policy operates with the Skolu Terms of Service. The Indonesian version controls if interpretation differs from this English translation.
- Questions, rights requests, or written complaints may be sent to info@skolu.id. Login support and sales enquiries are available through Skolu WhatsApp at +62 813-1417-645.