Who we are. 360 DEVZ LTD, registered with the Rwanda Development Board in May 2026, of Imena, Kiyovu, Nyarugenge, Kigali, Rwanda. We hold a Data Protection Officer certificate and operate under Rwanda's data protection law.
The short version
EduCloud holds information about children. We treat that as the most serious responsibility in the company. In practice that means four commitments:
- We collect the least we need to do the job, and no more.
- A school's data is that school's data. It is never mixed with another school's, and we do not sell it or share it for advertising.
- Nothing about a child reaches a parent unless a teacher has confirmed it.
- We never hold or move parents' money.
What we collect
- Students: name, class and stream, dormitory where applicable, attendance, marks, teacher notes, and fee balance.
- Guardians: name, relationship to the student, phone number, and preferred language.
- Teachers and school staff: name, role, and the records they create.
- Voice and images captured by teachers: short recordings and photographs of registers used to create daily records.
- Payment references: the amount, timestamp and reference of a fee payment, so it can be matched to the right student. We do not receive or store card or bank credentials.
Why we hold it
We process this information to run the school's daily records, to keep guardians informed about their own child, and to match fee payments to the correct student. We act on behalf of the school, under a written agreement with that school. We do not use student or guardian information for advertising, and we do not sell it to anyone.
Voice recordings and photographs
Teachers may record a short voice note or photograph a register they have already filled in, so the day's records can be created without retyping them. Once the teacher has confirmed the resulting record, the original recording or photograph is deleted. We keep a recording beyond that point only where we have asked for and received explicit permission, and only to improve accuracy in Kinyarwanda.
Automated processing, and its limits
EduCloud uses automated language processing to turn what a teacher said or wrote into structured records. Two limits apply and are built into the product:
- The teacher is the author. Automated processing structures what a teacher recorded. It does not assess, grade, rank, score or form opinions about a child.
- Nothing publishes unconfirmed. No record about a student reaches a guardian until a teacher has reviewed and confirmed it.
Where automated matching is used to link a fee payment to a student, low-confidence matches are placed in a queue for a member of school staff to decide, rather than applied automatically.
Where information is processed
EduCloud is hosted on cloud infrastructure. Some automated language processing is carried out by third-party service providers whose systems may be located outside Rwanda. Where that is the case, we transfer only the minimum information the task requires, under contractual terms that restrict what the provider may do with it, and we record what is transferred. Schools are told, in their agreement with us, which processors are involved.
How long we keep it
We keep a school's records for as long as that school uses EduCloud, and for a limited period afterwards so records can be returned or restored if needed. When a school leaves, we return its data and delete our copies on request. Retention periods are set out in each school's agreement.
How we protect it
- Each school's data is isolated from every other school's.
- Access is role-based and least-privilege — staff see only what their role requires.
- Access to sensitive records is logged and reviewed.
- Data is encrypted in transit and at rest, and backed up regularly.
- Administrator accounts require additional authentication.
Your rights
Guardians, students, teachers and staff may ask to see the information we hold about them, ask for it to be corrected, or raise a concern about how it is handled. Because we act on behalf of the school, the quickest route is usually through the school. You may also contact us directly and we will work with the school to respond.
Reporting a problem
If you believe information has been exposed, lost or mishandled, please tell us immediately at hello@360devz.com. We would far rather hear about a suspected problem that turns out to be nothing than learn about a real one late.
Contact
360 DEVZ LTD
Imena, Kiyovu, Nyarugenge, Kigali, Rwanda
hello@360devz.com · +250 784 704 153
Last updated: July 2026. We will update this page as EduCloud develops, and will tell partner schools when something material changes.