SMS Naija and the Nigeria Data Protection Act — How We Protect Your Data

Every school, parent, and student on SMS Naija is trusting us with sensitive information — academic records, contact details, payment history. We take that seriously, and we process data in line with the Nigeria Data Protection Act (NDPA) 2023. For a student's or parent's academic data, the institution is the data controller and SMS Naija acts as a processor — meaning the institution decides how that data is used, and we simply provide the platform that stores and processes it securely. Passwords are hashed, never stored in plain text. Superadmin accounts require two-factor authentication. We don't sell personal data to anyone. If every subscription on an Independent Student account lapses without renewal, that account and its data are automatically deleted — you're never left with a dormant profile you didn't ask to keep. Full details are in our Privacy Policy, and you can always reach out with questions about how your data is handled.