Terms of service
This document must be drafted with legal counsel before going live. It will need to describe precisely what data is processed (students, paying guardians, phone numbers), the lawful basis, retention periods, sub-processors (payment aggregator, messaging providers, hosting) and how export and erasure are handled.
Deliberately not drafted. Generic boilerplate would be inaccurate and legally risky.