Privacy & student data

What we deliberately do not collect

We do not ask for, store or accept any of the following, and you should never enter them anywhere on this platform:

• Student, registration or admission numbers
• Grades, marks, transcripts, results slips or academic standing
• Class timetables, attendance records or disciplinary records
• National ID, passport, driving licence or social-security numbers
• Date of birth, home or residence-hall address, or next-of-kin details
• Photographs of you, biometric data, or scans of any school document
• Fee, bursary, loan or payment information

Nothing you publish is ever tied to a named student on a public page. If you include identifying detail about yourself in free text, we may remove or trim it to protect you.

What we hold, and why

• An email address — used only to verify that an account belongs to a real person, to keep one person from flooding a page with duplicate ratings, and to reach you about your own account.
• The country, institution and course you choose — used to place your rating on the right page.
• The scores and comments you write — the content itself, which you intend to be public.
• Basic technical logs — kept briefly for security and abuse prevention, never used to profile you or sold to anyone.

Public pages versus private records

Public pages show aggregate scores and your posts under either a fully anonymous label or an intelligently masked handle that cannot be traced back to you by readers. Your email address is never displayed, never sent to the institution or educator being rated, never sold, rented or shared for advertising, and never disclosed to anyone asking who wrote a particular review. Institutions with dashboard access see trends and aggregates only — they cannot see who submitted what.

Education records and data-protection law

EduVistaScore is not a school, college or university, is not an agent or official of any institution, and is not part of any student information system. We therefore hold no education records at all — no file that a school keeps about a student exists on this platform, so there is nothing of that kind for us to lose, leak or be compelled to hand over.

We handle only the limited information a user chooses to give us, and we handle it in line with applicable data-protection rules, including the Kenya Data Protection Act 2019, the EU and UK GDPR, Nigeria's NDPA, South Africa's POPIA, and comparable national laws elsewhere. Because we are not an educational institution and keep no education records, student-record regimes such as FERPA in the United States govern what your school may disclose, not what we hold. Where an institution or a law requires a different standard in your country, the stricter protection applies.

Younger students

Secondary and high-school pages exist on EduVistaScore, so we set a firm rule: you must meet the minimum age of digital consent in your own country to hold an account. We do not knowingly keep personal information about anyone below that age. If you believe a younger student has created an account, tell us and we will delete the account and its contents.

Your rights over your own data

• See what your account holds and correct anything inaccurate.
• Edit or permanently delete any rating or review you posted — this is built into the platform, on each educator and institution page.
• Delete your whole account, which removes the email address behind it.
• Withdraw consent and stop using the platform at any time.

To exercise any of these, write to privacy@eduvistascore.com.

Conduct reports and lawful requests

A confidential conduct report — harassment, coercion, demands for favours, safety concerns — is stored apart from public ratings, is never published alongside a score, and is visible only to the small safeguarding team that reviews it. You may file one anonymously.

We do not volunteer information about our users. We disclose the little we hold only where a valid and binding legal order in a relevant jurisdiction compels us, or where there is a genuine and immediate risk to someone's life or safety. Where we are lawfully able to notify the affected user first, we will.