Security Standards & Terms of Service
HaHu School is engineered by Afro Digital Innovation Labs with bank-grade cryptography, strict institutional data sovereignty, and clear regulatory compliance across both international accreditation bodies and national ministries of education.
AES-256 Encryption
All student demographic data, mark books, and financial transactions are encrypted at rest with AES-256 and in transit via TLS 1.3.
100% Data Sovereignty
Your institution retains full legal ownership of every record. We never sell, monetize, or train public AI models on your school's data.
Multi-Standard Compliance
SOC 2 Type II aligned, GDPR privacy compliant, ISO 27001 certified, and fully compliant with Ethiopian MoE and INSA directives.
1. Institutional Data Ownership
When a school, academy, or regional woreda registers with HaHu School, the institution retains exclusive legal ownership over all student directories, grades, attendance logs, and financial transaction histories. HaHu School acts strictly as a secure data processor under contract.
Institutions may export their entire relational database at any time in standardized JSON, CSV, or MoE EMIS-compliant XML formats without artificial lock-in or retention penalties.
2. Offline-First Data Resilience & Cryptography
HaHu School mobile applications for Android and iOS maintain an encrypted local SQLite database using SQLCipher. When teachers take roll call or enter exam scores without cellular reception, records are signed cryptographically with a local SHA-256 hash. Upon reconnecting, data synchronizes to the cloud with automatic idempotency protection and conflict resolution.
3. Financial Gateway Security (Telebirr, CBE & Stripe)
HaHu School processes tuition collections through direct API integrations with authorized payment service providers including Telebirr, Commercial Bank of Ethiopia (CBE Birr), and Stripe. HaHu School never stores bank account PINs, credit card CVVs, or mobile money credentials. All payment confirmations are verified via HMAC digital signatures.
4. Service Level Agreement (SLA) & Uptime
HaHu School commits to a 99.9% uptime service level agreement for our multi-cloud infrastructure. Because the application is architected offline-first, schools can continue local operations (taking attendance, running timetables, and recording assessment marks) even during regional internet outages.
5. Acceptable Use Policy
Authorized school staff, teachers, and guardians agree to use HaHu School strictly for legitimate academic, pastoral, and administrative purposes. Unauthorized attempts to bypass access permissions, scrape student directories, or reverse engineer proprietary timetabling heuristics are strictly prohibited.
6. Governing Law & Inquiries
These terms are governed by applicable international data protection standards and the laws of the Federal Democratic Republic of Ethiopia. For formal inquiries regarding data processing agreements (DPA) or security audits, contact our security office:
Afro Digital Innovation Labs — Legal & Security Directorate
Direct: +251 983 355 598 · +251 966 074 050 · +251 912 207 180 · Email: hello@afrodigital.dev · Website: afrodigital.dev