1. Who is responsible for your data
EdgeTech Consults Ltd is the data controller for personal data processed through the Platform. For privacy questions, requests, or complaints, contact us at operations@edgetech.co.ke.
2. Who this Policy covers
- Teachers who register to create classes, teach live sessions, and receive payouts.
- Students who register to join classes, access materials, and use study tools.
- Parents and legal guardians who consent on behalf of a student who is a minor.
- Visitors to our public pages.
3. Data we collect
We collect the following categories of personal data:
- Account data: first and last name, email address, country, preferred language, and role (teacher or student).
- Authentication data: hashed password and email-verification status. We never store passwords in plain text.
- Teacher verification data: profile photo/portrait, teaching credentials and certificates, biography, and years of experience, submitted for identity and trust review.
- Student learning data: curriculum and subject preferences, level, exam goals, quiz results, progress, and (optionally) date of birth.
- Classroom data: audio, video, chat messages, shared whiteboard content, and materials exchanged during live sessions.
- AI study data: questions you ask the AI tutor and the responses generated for you, together with the lesson content used to answer them.
- Payment data: transaction references, amounts, payment status, and payout details processed via our payment providers. We do not store full card or mobile-money credentials.
- Technical data: device and browser information, IP address, and activity logs used for security and reliability.
4. Why we process your data (and our lawful bases)
- To provide the service — create and manage your account, run classes and live sessions, deliver materials and AI tutoring (performance of a contract).
- To verify teachers — confirm identity and credentials so students can trust who is teaching them (legitimate interest and safety).
- To process payments and teacher payouts (performance of a contract and legal obligation).
- To keep the Platform safe — detect abuse, fraud, and policy violations, and protect minors (legitimate interest and legal obligation).
- To improve the Platform — understand usage and fix problems (legitimate interest).
- To communicate with you — verification, security, and service notices (performance of a contract).
- To comply with the law and respond to lawful requests (legal obligation).
Where we rely on consent (for example, certain optional features or processing of a minor’s data), you may withdraw that consent at any time; this does not affect processing already carried out.
5. Children and students under 18
Protecting young learners is central to how we operate. In this region a child is anyone under 18 years of age.
- If a student is a minor, a parent or legal guardian must review this Policy and the Terms of Use and consent on the student's behalf at signup.
- We collect only the data necessary to deliver learning to the student and apply privacy-protective defaults to minors' accounts.
- We do not sell minors' data or use it for behavioural advertising.
- A parent or guardian may request access to, correction of, or deletion of their child's data, and may withdraw consent, by contacting us.
6. Teacher identity and credential documents
Documents submitted for teacher verification (portrait, certificates, credentials, liveness attestation) are sensitive. Access is restricted to authorised trust-and-safety reviewers, used only to verify identity and eligibility, and retained only as long as needed to establish and maintain verified status. Where a portrait and liveness check are used to confirm a real person, we treat this information with heightened care and process it on the basis of your consent for verification.
7. AI features
Our AI tutor helps explain concepts and answer study questions. When you use it, your prompt and the relevant lesson content are sent to our AI processing providers to generate a response. We do not permit your personal content or classroom material to be used to train third-party foundation models. AI responses are assistive and may contain errors; they are not a substitute for a qualified teacher.
8. How we share data
We do not sell your personal data. We share it only with service providers who help us run the Platform, under contracts that require them to protect it:
- Hosting and storage providers for our application and databases.
- Live video/audio infrastructure for real-time classrooms.
- Payment and payout providers (for example mobile-money and card processors).
- Email delivery providers for verification and service messages.
- AI processing providers for the AI tutor.
- Law enforcement or regulators where we are legally required to do so.
9. Cross-border transfers
Some of our providers may process data outside your country. Where we transfer personal data across borders, we take steps to ensure it remains protected to a standard consistent with this Policy and applicable East African data-protection law, including appropriate safeguards and, where required, storing a serving copy of certain data within the country of origin.
10. How long we keep data
- Account data: for as long as your account is active, then deleted or anonymised within a reasonable period after closure.
- Teacher verification documents: retained while you hold verified status and for a limited period afterwards, then deleted.
- Payment records: retained as required by tax and financial-record laws.
- Classroom recordings and logs: retained only for the period needed for the service and safety, then deleted.
11. How we protect data
- Encryption of data in transit.
- Access controls that limit who can view sensitive data.
- Upload validation and file-type/size restrictions.
- Hashed passwords and short-lived access tokens.
- Monitoring and logging to detect and respond to incidents.
12. Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Request deletion of your data.
- Restrict or object to certain processing.
- Withdraw consent where processing is based on consent.
- Request a copy of your data in a portable format.
- Lodge a complaint with your national data-protection authority.
To exercise any of these rights, email operations@edgetech.co.ke. We will respond within the timeframe required by law.
13. Cookies and analytics
We use essential cookies and similar technologies to keep you signed in and to keep the Platform secure and reliable. Where we use optional analytics, we do so in a privacy-protective way.
14. Data breaches
If a personal-data breach occurs that is likely to affect your rights, we will notify the relevant data-protection authority and affected users as required by applicable law.
15. Changes to this Policy
We may update this Policy from time to time. When we make material changes we will update the version and effective date and, where appropriate, ask you to review and accept the updated Policy.