FundoPortal

Legal & Trust

FundoPortal Privacy Policy

Your privacy and the security of educational and financial records are our utmost priority. This policy describes how FundoPortal (developed and operated by Openchains Technologies) collects, uses, stores, and safeguards information across our web platform (fundoportal.co.zw), Android mobile app, and Windows desktop application.

Effective Date: October 15, 2026 • Version: 2.0

Summary for School Administrators & Parents

  • Schools own their data: Institutions retain full ownership of student rosters, grades, attendance, and bursary records.
  • No selling of personal data: We never sell, monetize, or rent student or guardian data to advertisers or third parties.
  • Zero commercial profiling: Student records are never used for targeted advertising or behavioural tracking.
  • Strict data protection: Strong encryption in transit (TLS 1.3) and at rest, with role-based access control.

1. Scope & Role of Educational Institutions

FundoPortal operates primarily as an enterprise school management platform. In relation to student, guardian, and academic records entered into the system:

  • The Educational Institution (School) is the Data Controller: The school decides what student and parent information is collected, sets fee structures, records attendance, marks grades, and manages user accounts.
  • FundoPortal (Openchains Technologies) is the Data Processor: We process data strictly on behalf of and in accordance with the instructions of the school administration, subject to strict confidentiality and security commitments.

2. Information We Collect

We collect and process the following categories of information to provide school administration services:

A. School Institutional Information

School name, registration identifier, center number, official email, phone numbers, physical address, currency preferences, academic terms, and institution logos.

B. Student & Enrollment Records

Student full names, date of birth, gender, national ID / birth certificate number, class/level placement, enrollment status, passport/profile photos, medical/dietary notes, and hostel boarding allocations (provided by authorized school staff or public enrollment forms).

C. Parent & Guardian Contacts

Guardian names, relationship to student, mobile phone numbers, email addresses, residential address, and emergency contact details for fee statements, academic report delivery, and urgent notifications.

D. Finance, Bursary & Payment Records

Fee structures, invoices, payment receipts, payment references, student fine logs, and scholarship discounts. Note: Payment card numbers, CVVs, and mobile money PINs are processed directly by certified payment gateways (e.g., Paynow Zimbabwe) and are never stored on FundoPortal servers.

E. Academic, Grading & Library Records

Teacher remarks, subject marks, exam scores, attendance registers, timetable allocations, and library book loan/return history.

F. Technical, Device & Diagnostic Data

IP address, client platform (Windows Desktop, Android OS version, Chrome browser), authentication tokens, diagnostic error logs, and offline database synchronization metadata.

3. Device Permissions & Hardware Access

The FundoPortal mobile (Android) and desktop (Windows) applications may request specific system permissions strictly to enable operational hardware features:

  • Bluetooth & Nearby Devices (Android): Used solely to discover, pair with, and print receipts to portable 58mm/80mm ESC/POS thermal receipt printers. We do not use Bluetooth for location tracking.
  • USB / OTG (Android & Windows): Used to communicate directly with USB receipt printers and barcode scanners.
  • Local Network / Sockets (Windows & Android): Used to transmit raw print jobs to network thermal receipt printers over TCP port 9100 on the school's local area network.
  • Camera & Photo Storage (Optional): Used only when an administrator or teacher uploads a school logo, captures a student profile photo, or attaches payment receipt proof.
  • Notifications: Used to alert parents and staff about new fee receipts, attendance alerts, and critical announcements.

4. How We Use Information

We use the collected information exclusively for educational administration, including:

  1. Generating fee invoices, bursary ledgers, and official printed receipts (thermal POS and A4).
  2. Compiling academic report cards, continuous assessment marks, and class rankings.
  3. Tracking daily attendance for day scholars and hostel boarding check-ins.
  4. Enabling secure sign-in and role-based permissions (Admin, Bursar, Teacher, Student, Guardian).
  5. Providing contextual in-app guidance through the FundoAI assistant (such as printer setup and timetable guides).
  6. Syncing offline changes when internet connectivity is interrupted on mobile or desktop devices.

5. FundoAI Assistant & Data Boundaries

FundoPortal features an integrated assistant (FundoAI) to help school staff configure modules, troubleshoot hardware, and navigate the platform:

  • FundoAI responses are generated within strict institutional boundaries and operational knowledge bases.
  • Student personal identifiable information (PII) is never used to train public machine learning models.
  • FundoAI queries and assistance responses cached in the local desktop/mobile database remain strictly on the user's device.

6. Data Sharing & Third Parties

We do not sell, trade, or rent personal data. We disclose information only to vetted third-party service providers who assist in delivering our services under binding data protection agreements:

  • Payment Gateways: Paynow Zimbabwe for processing online school fee payments via EcoCash, OneMoney, Visa, and Mastercard.
  • Cloud Infrastructure: Secure cloud server facilities utilizing industry-grade physical and digital security controls.
  • Legal & Regulatory Compliance: Only when required by applicable law, court order, or governmental authority.

7. Data Security & Storage

We apply robust administrative, technical, and physical safeguards:

  • All network traffic between browsers/apps and our servers is encrypted using Transport Layer Security (TLS 1.3/HTTPS).
  • User passwords are protected with strong, salted cryptographic hashing (Argon2 / bcrypt) and cannot be viewed in plain text.
  • Session tokens use concurrency-hardened rotation to prevent token hijacking and race conditions.
  • Databases are hosted in isolated virtual networks with restricted administrative access.

8. Data Retention & Deletion

We retain student and school records for as long as the institution maintains an active subscription or as required by national educational record-keeping regulations.

Data Export & Portability: School administrators can export their data at any time in standard formats (e.g., Excel/CSV rosters, PDF transcripts, and financial reports).

Account Deletion: Upon formal written request from an authorized school representative to [email protected], all institution records, student profiles, and associated data will be permanently removed or anonymized within 30 days, subject to statutory retention obligations.

9. Children's Privacy

Protecting the privacy of children and minors is essential. Student accounts in FundoPortal are provisioned strictly through their school or verified guardians. We do not knowingly permit minors to create independent accounts without school or parental authorization.

10. Updates to this Policy

We may update this Privacy Policy from time to time to reflect system enhancements, new platform releases, or legal requirements. When updates are made, we will revise the "Effective Date" at the top of this page. Substantial changes will be communicated via in-app notification or email to registered school administrators.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your school's data is handled, please contact our Data Protection Team:

Openchains Technologies — FundoPortal Privacy Team
Email: [email protected]
Website: https://fundoportal.co.zw
Help & Support: fundoportal.co.zw/help