Privacy Policy
How STONECODE collects, uses, protects and deletes personal information.
Status
This draft describes current platform practices and is not yet legally approved or effective as a final policy. It should be reviewed by Ghana-qualified counsel before publication.
Who is responsible
STONECODE TECHNOLOGIES operates STONECODE BECE Intelligence. For school-managed student records, the school determines the educational purpose and the platform processes records to provide the school service. For platform accounts, payments, security, support and private-candidate services, STONECODE uses information to operate those services. The parties’ precise controller and processor roles must be reflected in the school agreement and confirmed by counsel. This draft takes account of Ghana’s Data Protection Act, 2012 (Act 843), subject to counsel confirming its application and the operator’s registration duties.
Information we may process
The platform may process names, email addresses, school codes, account and membership details, class and student identifiers, mock and actual-result entries, grades and aggregates, school preferences, PIN and subscription records, payment references, support messages, and security and audit events. Payment card details are handled by the payment provider and are not stored by the platform. Users should not submit unrelated sensitive information, identity documents, home addresses or photographs through the service.
Why information is used
We use information to create and secure accounts; administer assessments; calculate and display mock analysis; provide school-selection simulations; manage subscriptions and PIN access; respond to support requests; prevent fraud and abuse; maintain service reliability; and meet legal obligations. If a user requests an AI explanation, only the assessment facts needed for that explanation may be sent to the configured AI provider. AI does not determine official grades or placement.
Children and school responsibility
School administrators must ensure that the school has authority and a lawful basis to provide student records, give students and parents or guardians the notices required by law, and obtain any required authorisation before using the platform. The platform is not designed for a child to create a school account without school involvement. Contact the school first about records it supplied.
Sharing and transfers
Information is disclosed only to authorised users and service providers needed to run the platform, including hosting and database infrastructure, payment processing, email or SMS delivery, and an AI provider when an AI feature is requested. We do not sell student information or use it for targeted advertising. Providers may process information in other countries; transfer safeguards and provider locations must be verified in the platform’s current vendor register. We may also disclose information where law requires it.
Rights and contact
Subject to applicable law, individuals may request access to or correction of their personal information, object to certain processing, or ask about deletion and other available rights. Send privacy requests to kwamestonecode@gmail.com. For school-managed records, contact the participating school as well. We may need to verify identity and coordinate with the school before responding. Complaints may also be directed to Ghana’s Data Protection Commission.