Privacy notice

Draft for legal review – version 2026-10

What we hold about learners

Only what is needed to run practice tests: first name and last initial, school, class and grade, a username and PIN, the answers given in tests and the marks. We do not collect dates of birth, NEMIS or UPI numbers, learners' phone numbers or photos.

Who can see it

The platform operator manages schools and test content but does not browse individual learners' results.

Schools and consent

Each school is the data controller for its learners and we process data on its behalf under a data-processing agreement. Schools obtain consent from parents or guardians; parents also confirm consent when they link to their child.

Where it is kept and for how long

Data is stored on servers in Kenya, encrypted in transit and backed up daily. A learner's records are deleted or anonymised one year after they leave the school, or earlier at the school's request.

Your rights

Parents may ask to see, correct or delete their child's data through the school or by contacting us. Complaints may be made to the Office of the Data Protection Commissioner.