Privacy Policy
How Obidax handles your data.
Effective August 2026. This Policy explains what personal data Obidax collects, how it is used, who it is shared with, and the rights available to every student, parent, and staff member whose data is processed on the platform.
1. Introduction
Obidax ("Obidax," "we," "us," or "our") is a school management platform operated by Fexify, built to serve secondary and high schools, beginning in Cameroon. This Privacy Policy explains what personal data we collect on behalf of the schools that use Obidax, how that data is used, who it is shared with, and the rights available to students, parents, staff, and school administrators whose data is processed on the platform.
This Policy applies to every school, staff member, student, and parent using Obidax, and is written to comply with Cameroon's Law No. 2024/017 of 23 December 2024 on the Protection of Personal Data, as well as the data protection expectations of schools operating internationally.
2. Who Controls Your Data
Each school using Obidax is the data controller for the information it enters about its own staff, students, and parents. Fexify, as the operator of Obidax, acts as a data processor, handling that information solely to provide the platform under a service agreement with the school. Fexify does not own, sell, or repurpose a school's data for any purpose outside of operating the service for that school.
3. Information We Collect
We collect the following categories of personal data, entered directly by schools and their staff, students, and parents in the ordinary course of using the platform:
- From schools: school name, logo, physical and contact information, and academic structure (branches, levels, class sections, terms, and sequences).
- From staff (Principals, Vice Principals, Class Masters, Subject Teachers, Bursars): full name, email address, assigned role, and login credentials.
- From students: full name, school-assigned student ID, class and branch enrollment, academic marks, conduct log entries, career goal selections and AI-generated career guidance, and fee payment status.
- From parents: full name, email address, login credentials, and the identity of the student(s) linked to their account.
We do not collect financial account details, payment card numbers, or government identification numbers. Fees are tracked as balances and payment records within the platform; Obidax does not process payments itself.
4. How We Use This Information
We use the information described above solely to operate the Obidax platform for the school that submitted it: authenticating accounts, displaying academic and conduct records to the people authorized to see them, generating report cards and transcripts, tracking fee balances, and producing AI-assisted career guidance where a student has set a career goal.
We do not use personal data for advertising, and we do not build advertising profiles of students, parents, or staff. We do not sell personal data to any third party, under any circumstances.
5. AI-Assisted Career Guidance
Where a student has set a career goal, Obidax may send that student's academic performance data and career goal — not their name or contact information — to Anthropic, our AI provider, solely to generate personalized career guidance text. Anthropic does not use this data to train its models. This processing only occurs for students who have an active career goal set.
6. Special Protection for Students' Data
The majority of individuals whose information is processed on Obidax are minors. We take that responsibility seriously, and the platform is designed around it:
- Student accounts are created by the school, never through open self-registration, so no child creates an Obidax account on their own or without the school's knowledge.
- Access to a student's academic, conduct, and career information is restricted by role: a student's data is visible only to their own school's authorized staff, and to their own linked parent — never to other students, unrelated parents, or the public.
- Student data is never used for advertising, marketing, or any purpose unrelated to the student's own education.
- A parent linked to a student can view that student's academic, conduct, and fee information at any time, consistent with their role in the student's education.
7. Third Parties We Work With
Obidax relies on the following service providers to operate the platform. Each is engaged solely to provide the specific service described, under obligations of confidentiality and data protection appropriate to the sensitivity of the information involved:
- Railway — application and database hosting.
- Netlify — hosting of the Obidax web application.
- Cloudinary — storage of school logo images.
- Resend — delivery of transactional email, including account verification and password reset messages.
- Anthropic — generation of AI-assisted career guidance text, as described above.
None of these providers are permitted to use Obidax data for their own purposes, and none receive more data than is necessary to perform their function.
8. Cross-Border Data Transfer
Some of our service providers process data outside Cameroon. Where personal data is transferred internationally, we take steps consistent with Cameroon's Law No. 2024/017 to ensure the receiving party provides an adequate level of protection, including contractual safeguards with each provider listed above.
9. Data Security
Passwords are never stored in plain text — only as securely hashed values that cannot be reversed, even by us. Access to student, staff, and parent data is enforced by role at the application level, so each person sees only the information their role permits. Every school's data is kept logically separate from every other school's, with no shared visibility between schools.
10. Data Retention
We retain personal data for as long as the school's account remains active, and for a reasonable period afterward to allow the school to export or request deletion of its records. When a school closes its account, we delete or return its data in accordance with the school's instructions and applicable law.
11. Your Rights
Under Cameroon's Law No. 2024/017, individuals whose data is processed on Obidax have the right to:
- Access the personal data held about them.
- Request correction (rectification) of inaccurate or incomplete data.
- Request erasure of their data, subject to the school's own record-keeping obligations.
- Request a portable copy of their data in a structured, commonly used format.
- Object to certain processing of their data.
Requests should be directed to the school first, as the data controller, since the school maintains the authoritative record. Fexify supports every school in fulfilling these requests promptly. Requests may also be sent directly to us at info@obidax.com, and we will coordinate with the relevant school to respond.
12. Our Data Protection Contact
Fexify has designated an internal contact responsible for data protection matters relating to Obidax. All privacy inquiries, requests, and concerns can be directed to info@obidax.com.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in the platform or in applicable law. The effective date at the top of this page reflects the most recent version. Continued use of Obidax after an update constitutes acceptance of the revised policy.
15. Contact Us
Questions about this Privacy Policy or how your data is handled can be sent to info@obidax.com. See also our Terms of Service.