Privacy Policy & Data Protection
JuJuHub & JuJuEdu are committed to protecting student, parent, and educator privacy. This document outlines how data is collected, stored, encrypted, and protected.
1. Information We Collect
When using JuJuEdu or JuJuHub services, we collect specific categories of data necessary for app functionality:
- Account Identification: Full Name, Email Address, User IDs (AWS Cognito Sub), and Phone Number.
- Academic Documents & Files: Exam Question Papers (PDF) and Student Answer Sheet Submissions uploaded directly to secure AWS S3 buckets.
- Photos & Profile Images: User-selected avatar photos uploaded to private S3 storage.
- Academic Records: Marks, percentage calculations, attendance history logs, and school fee payment status records.
2. How We Use Your Information
Collected user data is strictly utilized for educational management and authentication purposes:
- Authenticating student and school administrator logins via AWS Cognito.
- Rendering student dashboards, exam papers, fee balances, and attendance status.
- Allowing administrators to review and grade uploaded answer sheet submissions.
- Delivering academy notifications and exam alerts inside the mobile app.
3. Data Security & Encryption Standards
We employ industry-standard encryption protocols to protect your information:
- Encryption in Transit: All communications between the mobile app and AWS API Gateway / S3 occur exclusively over HTTPS using TLS 1.3 / TLS 1.2 encryption.
- Encryption at Rest: Database records in AWS DynamoDB and media files in AWS S3 are encrypted at rest using AWS KMS (Key Management Service).
- Ephemeral Pre-signed S3 URLs: Media files and exam PDFs are served via short-lived pre-signed S3 URLs (expiring in 10 minutes) to prevent unauthorized hotlinking.
4. Children's Privacy & Student Protection
JuJuEdu serves educational institutions that include student users:
- We comply with international children's digital privacy and student privacy standards.
- Student accounts are provisioned exclusively through authorized school administrators or institution contracts.
- We do NOT display ads, perform targeted behavioral marketing, or sell user data to third parties.
5. Data Retention Policy
Personal data and uploaded documents are retained for the duration of the school enrollment contract. Upon school contract completion, associated database records and media files are managed according to institution retention policies.
6. Privacy Officer & Contact Information
If you have any questions regarding this Privacy Policy or data protection, contact our Data Protection Officer: