Effective Date: August 2, 2026 Last Updated: August 2, 2026

Dream Technologies PLC, operating the eSchool platform under the trade name "eSchool" / "eSchool.et" ("DreamTech," "eSchool," "Company," "we," "us," or "our"), with its registered office at Around Abuna Petros, Sebera Babur, Abat Commercial, 6th Floor, Room 608, Addis Ababa, Ethiopia, respects the privacy of Schools, administrators, teachers, staff, parents, guardians, and students who use the eSchool web application, admin dashboard, Student App, Parent App, Teacher App, and related services (collectively, the "Service").

This Privacy Policy explains what information we collect, how it is used, who controls it, how it is protected, and the rights available to individuals. This Privacy Policy should be read together with our Terms and Conditions.

IF YOU DO NOT AGREE WITH THIS PRIVACY POLICY, PLEASE DO NOT USE THE SERVICE.

11. Roles: Data Controller and Data Processor

1.1 Schools act as the primary data controller for student, parent, and staff Personal Data entered into the Platform. Each School determines what information is collected, how long it is retained (subject to DreamTech's technical retention practices described below), and for what purposes it is used within the School's operations (e.g., admissions, grading, discipline, fee collection, communication with parents).

1.2 DreamTech acts primarily as a data processor / technology service provider, processing Personal Data on behalf of and under the instructions of the School, in order to operate, secure, and support the Platform. DreamTech also acts as a data controller with respect to limited categories of information it collects for its own legitimate business purposes, such as Subscription account information, billing records, platform security logs, and aggregated/anonymized analytics.

1.3 Schools are responsible for ensuring they have a lawful basis (including, where required, parental or guardian consent) for the collection and processing of student and staff Personal Data through the Platform, and for complying with applicable Ethiopian data protection, education, and consumer protection laws.

22. Information We Collect

2.1 Account and Registration Information

Full name, email address, phone number, username, and encrypted password
Role designation (Super Admin, Admin, Teacher, Receptionist, Accountant, Librarian, Student, Parent, etc.)
School affiliation and job title/position (for staff)

2.2 Student Information (provided by the School, parent, or guardian)

Student ID, name, date of birth, gender, photograph
Class, section, and enrollment status
Attendance records
Academic records: grades, exam results, report cards, transcripts
Guardian/parent contact and relationship information
Health, medical, or special needs information, where voluntarily submitted by a School or parent for administrative purposes (e.g., allergies, emergency contacts)
Transport and hostel information, where applicable
Library borrowing records, where applicable

2.3 Staff Information (provided by the School)

Employment records, role, department, and schedule
Attendance and performance-tracking data
Salary and payroll-related information processed through the Platform, where the School enables such modules

2.4 Payment Information

Payment references, transaction identifiers, amounts, and status
We do not collect, store, or have access to full banking credentials, card numbers, CVV codes, or Payment Provider passwords. Such data is handled exclusively within the secure systems of the relevant Payment Provider (e.g., Telebirr, CBE Birr, Bank of Abyssinia, Zemen Bank, Awash Birr, Stripe, PayPal).

2.5 Communications

Messages, announcements, and notifications sent through the Platform's messaging, SMS, and push notification features
Support requests and correspondence with DreamTech

2.6 Device and Usage Information

IP address, browser type, operating system, device identifiers, and mobile app version
Log data, including access times, pages viewed, and features used
Crash logs and diagnostic/security event data
Cookies and similar tracking technologies (see Section 10)

2.7 Location Information

Approximate location derived from IP address, and precise location only if a User grants explicit permission through a device or mobile app feature (e.g., transport tracking, if enabled by the School)

33. How We Use Information

We use the categories of information above to:

provide, operate, and maintain the Platform and its features (attendance, fees, exams, communication, transport, library, hostel, payroll, etc.);
authenticate Users and enforce role-based access controls configured by the School;
process and reconcile payments in coordination with Payment Providers;
deliver notifications, announcements, and receipts;
detect, investigate, and prevent fraud, abuse, and security incidents;
maintain audit logs and system diagnostics;
provide customer support and respond to inquiries;
improve, troubleshoot, and develop the Platform, including through aggregated and anonymized analytics;
comply with applicable legal, regulatory, tax, and law enforcement obligations;
enforce our Terms and Conditions and protect the rights, property, and safety of DreamTech, Schools, and Users.

We do not use student, parent, or staff Personal Data to serve third-party advertising, and we do not sell Personal Data.

44. Legal Basis for Processing

Where applicable Ethiopian law requires a legal basis for processing, DreamTech and Schools rely on one or more of the following: performance of the Subscription agreement with the School; the School's legitimate educational administration interests; compliance with a legal obligation; and, where required (particularly for sensitive categories of data such as health information), consent obtained by the School from the relevant parent, guardian, or staff member. Obtaining any required consent from parents, guardians, or staff is the responsibility of the School, not DreamTech, given the School's direct relationship with those individuals.

55. How We Share Information

5.1 We do not sell Personal Data to third parties. We may share information in the following circumstances:

With the relevant School: all Personal Data entered into the Platform is visible to the School's authorized administrators and staff according to role-based permissions configured by the School.
With Payment Providers: transaction data necessary to process payments (e.g., Telebirr, CBE Birr, Bank of Abyssinia, Zemen Bank, Awash Birr, Stripe, PayPal).
With SMS and communication providers: to deliver notifications, alerts, and messages.
With cloud infrastructure and hosting providers: to store and process data securely.
With professional advisors: such as auditors, lawyers, and consultants, under confidentiality obligations.
With government or regulatory authorities: where required by applicable Ethiopian law, court order, or valid legal process.
In connection with a corporate transaction: such as a merger, acquisition, financing, or sale of assets, subject to confidentiality protections.
With your consent: for any other purpose disclosed to and agreed by you at the time of collection.

5.2 Any third-party service provider engaged by DreamTech to process Personal Data on our behalf is contractually obligated to maintain confidentiality and implement appropriate security safeguards, and may only process such data for the purposes we specify.

66. Data Security

6.1 We implement reasonable administrative, technical, and organizational safeguards designed to protect Personal Data, including:

encryption of data in transit via HTTPS/TLS;
encrypted storage of passwords;
role-based access controls and authentication protections;
regular data backups;
system monitoring, audit logging, and intrusion detection measures;
restricted internal access to Personal Data on a need-to-know basis.

6.2 No method of transmission or electronic storage is completely secure. While we strive to protect Personal Data, DreamTech cannot guarantee absolute security, and Users acknowledge and accept the inherent risks of transmitting information over the internet.

6.3 In the event of a data breach affecting Personal Data, DreamTech will take reasonable steps to investigate, contain, and notify affected Schools without undue delay, and will cooperate with Schools to satisfy any legal notification obligations they may have toward parents, students, or staff. Schools remain responsible for notifying affected individuals where required by applicable law, unless otherwise agreed in writing.

77. Data Retention

7.1 Schools control the retention period for their School Data (student, parent, and staff records) for as long as their Subscription remains active, subject to the technical limitations of the Platform.

7.2 Upon termination or expiry of a School's Subscription, DreamTech will make School Data available for export for a period of thirty (30) days, after which DreamTech may delete or anonymize such data, unless a longer retention period is required by applicable law, necessary to resolve disputes, or agreed separately in writing.

7.3 DreamTech may retain certain technical logs, security records, backup copies, and billing records for a reasonable period beyond account termination for legal, audit, fraud-prevention, and disaster-recovery purposes, even after corresponding School Data has been deleted from active systems.

88. Children's Privacy

8.1 The Platform is used by Schools to manage records of minors (students) under the direct authority and supervision of the School and, where applicable, the student's parent or legal guardian.

8.2 DreamTech does not independently collect Personal Data directly from children outside the context of a School's use of the Platform. Schools are solely responsible for obtaining any parental or legal guardian consent required by applicable law prior to submitting a minor's Personal Data to the Platform.

8.3 Parents and guardians who believe their child's Personal Data has been submitted to the Platform without appropriate authorization should contact the relevant School directly; DreamTech will cooperate with the School to address such concerns in accordance with the School's instructions and applicable law.

99. Your Rights

9.1 Subject to applicable law and the role of the School as data controller for School Data, individuals may request to:

access the Personal Data held about them;
correct inaccurate or incomplete Personal Data;
request deletion of Personal Data, where legally permissible;
update account and contact details;
object to or restrict certain processing, where applicable;
receive reasonable assistance regarding their account.

9.2 Requests relating to student academic records, attendance, fees, or disciplinary information should be directed to the relevant School, as the School controls this data and is best positioned to action such requests. DreamTech will support Schools in fulfilling verified requests where technically feasible.

9.3 Requests relating to DreamTech's own controller-role data (e.g., Subscription billing account information) may be directed to DreamTech using the contact details in Section 13.

9.4 DreamTech reserves the right to verify the identity of the requester and the requester's authority before actioning any request, and may decline requests that are unfounded, excessive, or that would infringe the rights of other individuals or the School's own recordkeeping obligations.

1010. Cookies and Similar Technologies

10.1 We use cookies, local storage, and similar technologies to:

maintain login sessions and authentication state;
remember User preferences and settings;
improve Platform performance and reliability;
enhance security and detect fraudulent activity;
understand aggregate Platform usage patterns.

10.2 Users may disable cookies through their browser or device settings; however, disabling cookies may impair or disable certain Platform features, including login functionality.

10.3 We do not use cookies to serve third-party behavioral advertising to Users of the Platform.

1111. International and Cross-Border Data Processing

11.1 Personal Data submitted to the Platform may be processed and stored on cloud infrastructure located within Ethiopia or in other jurisdictions where DreamTech's hosting or service providers operate.

11.2 Where Personal Data is transferred outside Ethiopia, DreamTech will take reasonable steps to ensure such transfers are subject to appropriate contractual, technical, and organizational safeguards consistent with applicable Ethiopian law.

1212. Third-Party Links and Integrations

The Platform may contain integrations or links to third-party services (including Payment Providers, Google, Apple, and SMS gateways). This Privacy Policy does not apply to, and DreamTech is not responsible for, the privacy practices of such third parties. Users should review the privacy policies of any third-party service they interact with.

1313. Changes to This Privacy Policy

DreamTech may update this Privacy Policy from time to time to reflect changes in our practices, the Service, or applicable law. Material changes will be communicated via the Platform, email, or other reasonable means before taking effect, where practicable. The latest version will always be available on the eSchool platform. Continued use of the Service after changes take effect constitutes acceptance of the revised Privacy Policy.

1414. Limitation of Liability Relating to Data

To the maximum extent permitted by applicable Ethiopian law, DreamTech's liability for any claim relating to the processing of Personal Data under this Privacy Policy is subject to the limitations of liability set out in Section 16 of the eSchool Terms and Conditions.

1515. Contact Us

For questions, requests, or concerns regarding this Privacy Policy or the processing of Personal Data, please contact:

Dream Technologies PLC (eSchool.et) Around Abuna Petros, Sebera Babur, Abat Commercial, 6th Floor, Room 608 Addis Ababa, Ethiopia Email: info@eschool.et Phone: +251 966 778 811 Business Hours: Monday–Friday, 8:00 AM – 5:00 PM (East Africa Time, UTC+3)

For matters concerning a specific student's, parent's, or staff member's records, please contact the relevant School directly, as the School controls that data.

By using the eSchool platform, you acknowledge that you have read and understood this Privacy Policy.

Privacy Policy