Parent Privacy Notice

Who is responsible

Your child's personal information on the platform is collected and used by your child's school as the Responsible Party (POPIA) / Controller (GDPR). Acorn & Orbit (ECHO Technologies) is the Operator / Processor — we run the software on the school's behalf and only on the school's instructions.

What the school typically collects

• Identity: your child's name, date of birth, gender, identifying photo.
• Contact: your name, email, phone; emergency contacts.
• Educational: classroom assignment, attendance, daily reports, assessments, report cards.
• Health: any medical information you provide (allergies, conditions, medication).
• Photos / videos / artwork shared by teachers, where you have consented.
• Billing: invoices, payments.

Your rights

You can request access to, correction of, or deletion of your child's information, object to processing, withdraw consent, and lodge a complaint with the South African Information Regulator (or your local DPA). To exercise these rights, contact the school first — they are the Responsible Party. If the school does not respond, you may also contact us at privacy@investechotech.com and we will assist.

Your consents

See the Child Data Consent page for the four granular consents you give at signup and can change at any time in your profile.

Sharing

Personal information is shared only with the school, A&O's subprocessors (see Subprocessors), and where the law requires it. We do not sell personal information.

Retention

See the Data Retention Schedule.