Privacy policy
Provisional version, under legal review. It will be replaced by the final version before any contractual commitment.
1. Who is responsible for what
For student, family and staff data entered into Kalasi by a school, the school decides how it is used: it is the data controller, and the publisher (BIKUS SERVICES SARL) acts on its behalf, solely to provide the service. For the school account's own data (owner, contact details, subscription and payments), the publisher is the data controller.
2. Data processed
Users: name, email or phone, role, language, sign-in dates. Students: name, registration number, gender, date and place of birth, class, grades, attendance, tuition payment status. Families: name, relationship to the student, phone. School: name, contact details, plan, due dates. Log: grade corrections, payment cancellations, publications. Trainees of a training centre: name, contact details, attendance, final score, payments, certificate. An issued certificate can be verified online by anyone who holds its code: the page then shows the trainee's name, the training, its dates and the issuing school, and nothing else. Technical: IP address, used only to limit serial account creation and the rate of certificate checks.
3. Why this data
To provide the requested service (managing students, grades, payments, attendance, communication with families), manage the subscription, ensure security and prevent abuse, and provide support. It is neither sold nor used for advertising.
4. Who has access
Only authorised school staff, according to their role. A parent only sees their children, a student only their own file, a teacher only their subjects. One school's data is never visible to another. The publisher only accesses it for support or maintenance. The technical host acts as the publisher's processor.
5. Hosting
Data is hosted with a cloud service provider. Its servers may be located outside Cameroon.
6. Retention
Data is kept for the duration of the subscription, then for the period communicated at the end of the contract to allow export, before deletion or anonymisation. Subscription accounting data is kept for as long as the law requires.
7. Security
Encrypted connection, passwords stored in hashed form, account lockout after several attempts, strict separation between schools, role-based permissions, log of corrections and cancellations.
8. Your rights
You may ask for access to your data, its correction or deletion, or object to its processing. For a student's or parent's data, contact the school first, as it is responsible for it. For a school account's data, write to the publisher at the contact details on the Legal notice page.
9. Cookies
Kalasi uses a single cookie, the sign-in session cookie, needed for operation. There are no advertising trackers and no audience measurement.
10. Minor students
Data of minor students is processed under the school's responsibility, which makes sure to inform parents or guardians.
11. Changes
This policy may change; the version in force is the one on this page.