Schools remain responsible for the educational records they place in FobsSMS. FOBS processes those records to provide the service and separately controls information it collects for accounts, support, security and commercial contact.
Who this policy covers
This policy applies to visitors, school owners and staff, teachers, parents or guardians, and other people who interact with FobsSMS. “FOBS”, “FobsSMS”, “we” and “us” refer to the operator of the service in Yaoundé, Cameroon.
Information we process
The information depends on how you use the service. It may include:
- Identity and account details such as name, email address, telephone number, role, password hash and verification status.
- School records supplied by an authorized school, including student, guardian, teacher, class, attendance, examination, result, fee and payment information.
- Professional social-network content submitted by teachers, including posts, messages, profile information and uploaded media.
- Device, log, session, security and diagnostic information needed to operate and protect the service.
- Demo, support and commercial communications that you choose to send us.
Why information is used
We process information to deliver contracted services, authenticate users, connect authorized school participants, produce requested school records, provide support, secure the platform, prevent abuse, meet legal obligations and improve reliability. Optional promotional communications and non-essential tracking rely on consent where consent is required.
Schools, families and student data
A school determines why its educational records are used and who may access them. The school must have an appropriate basis and authority to provide those records, maintain accurate permissions and inform students, families and staff. FOBS processes this information on the school’s instructions, except where processing is independently required for security, legal compliance or account administration.
Sharing and service providers
Information is shared only as needed with authorized users, the school responsible for the record, vetted infrastructure or communication providers, professional advisers, or public authorities where lawfully required. We do not sell student records or personal information. Providers must handle information for defined purposes and under appropriate confidentiality and security obligations.
Retention and deletion
Account, school and support information is retained only as long as needed for the service, contractual records, security, dispute handling and legal obligations. Schools control ordinary retention of their active educational records. Backups and audit records may remain for a limited period after deletion before secure expiry.
Your choices and rights
Depending on the applicable law and our role, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent. Requests about school-controlled educational records should normally be sent first to the school; you may also contact us and we will help route or fulfil the request. Identity verification may be required.
Security, international processing and changes
We use access controls, role-based permissions, encryption in transit, monitoring, backups and other proportionate safeguards. No system is completely risk-free. If infrastructure or providers process data outside your country, we use appropriate contractual and operational safeguards. Material policy changes will be dated and communicated through an appropriate channel.