Privacy Policy

1. About Us and Governing Law

The Platform is operated in compliance with the laws of the Republic of Kenya, primarily governed by the Kenyan Data Protection Act, 2019. Because our community spans the globe, we also implement safeguards to meet the requirements of the General Data Protection Regulation (GDPR) for users in the European Economic Area (EEA) and the California Consumer Privacy Act (CCPA) for users in the United States.

2. Information We Collect

We collect information to provide a personalized, high-quality language learning experience. This falls into two categories:

3. How We Use Your Information

We process your data for the following operational and legal purposes:

• To Provide the Service: Managing your account, saving progress stats, and serving targeted language lessons.
• To Improve the Platform: Tracking usage patterns to optimize user flows, fix responsive design issues, and upgrade audio features.
• To Communicate With You: System updates, security alerts, and voluntary educational newsletters.
• Security & Compliance: Mitigating automated spam attacks, defending intellectual property rights, and conforming with compliance standards under Kenyan jurisdiction.

4. Legal Basis for Processing (GDPR & Kenyan DPA)

If you reside in a jurisdiction requiring a strict legal basis for processing (such as Kenya or the EEA), we run on:

• Consent: Your direct approval (e.g., subscribing to notifications or enabling mic permissions for pronunciation checks).
• Contractual Necessity: Performing functions required to render the service (e.g., maintaining active access profiles).
• Legal Obligation: Statutory obligations under the Kenyan Data Protection Act, 2019.
• Legitimate Interests: Securing platform network nodes against threat actors and iterating our curriculum quality.

5. Global Data Transfers & Sharing

Since our user base is international, data transfers are inevitable.

• Data Hosting: All user database items reside in certified, high-grade cloud facilities.
• Cross-Border Safeguards: Any transfer originating in Kenya or Europe utilizes Standard Contractual Clauses (SCCs) to guarantee high data protection baselines internationally.
• Privacy Rule: We do not sell, barter, or distribute your personal identity data to third-party ad brokers.

6. Your Rights & Choices

Depending on your physical location (Kenya, EU, UK, or USA), you hold specific rights relative to your information:

7. Data Security & Retention

We prioritize safeguarding your information:

• Security: All connection routes employ active HTTPS encryption to shield transfers from eavesdropping. Databases use salted password hashes and compartmentalized administration access.
• Retention: Personal metrics persist only as long as your account remains active. Deleted profiles undergo automated sanitization or permanent file purging cycles, unless auditing standards compel temporary holding.

8. Children's Privacy

Our platform is geared toward a general educational audience. We do not knowingly compile raw metrics from children under 13 years of age (or under 18 inside Kenya without explicit guardian verification). If you recognize an unauthorized profile creation of this type, alert us immediately to initiate deletion steps.

9. Updates to This Policy

We refine this Privacy Policy periodically to maintain compliance with emerging regulatory rulings. Updates will be broadcast directly on this page with an adjusted "Last Updated" value displayed dynamically above.