Privacy notice
Last updated 7 November 2026.
Who is responsible
Each school decides what it records about its learners, guardians and staff and is the controller of those records under Zimbabwe's Cyber and Data Protection Act [Chapter 12:07]. Dataforge Technologies, which runs Ruzivo Educore, processes them on the school's behalf and only on its instructions. For the accounts of school owners and group heads, and for this website, Dataforge Technologies is the controller.
What we keep, and why
- School records (learners, guardians, staff, attendance, marks, fees): kept in that school's own database, only to provide the service to the school.
- Account details (name, email, phone, password hash): to sign you in and contact you about your school.
- Security logs (sign-ins and administrative actions, with a daily-changing hash of the network address): to protect accounts and investigate misuse. Kept for 12 months.
- Usage counts (how many pages were served, with no personal data): shown as live figures on our home page.
The AI helper
When you send a photo or a question to the helper, it is sent to our AI provider, NVIDIA, to be read, and the answer comes back to you. We do not store the photo, and we log only the time and duration of the call, not its contents. Rows read from a photo are shown to you to check and are saved only when you confirm. Do not send photos that the school is not allowed to share with a service provider.
Who else sees data
Our hosting provider runs the servers; NVIDIA processes helper requests as described above; email is sent through our own mail server. We do not sell data, show advertising, or share school records with anyone else unless the law requires it.
How long we keep it
School records stay for as long as the school uses Ruzivo Educore. When a school leaves, it can export its data; we delete its database and files 60 days after the subscription ends, and its backups age out within a further 30 days.
Your rights
Learners, guardians and staff should ask their school to see, correct or delete their records. Account holders can write to privacy@educore.co.zw. You may also complain to the Postal and Telecommunications Regulatory Authority of Zimbabwe (POTRAZ), the data protection authority.