Privacy Policy

1. Information We Collect

We collect only the information needed to run the Site and deliver materials you request:

• Phone number — collected when you request a premium material or use the Check My Status page, so we can send an M-Pesa payment prompt and match confirmed payments to your access request.
• Payment confirmation details — such as the amount paid and a payment reference, received from our payment processor, Paystack, once your M-Pesa payment is confirmed. We do not see or store your M-Pesa PIN.
• Contact details you provide — such as your email address or WhatsApp number, if you choose to contact us directly for support.
• Basic technical data — standard web server and hosting logs (such as approximate location, browser type and pages visited) used to keep the Site secure and functioning correctly.

We do not require you to create an account to use the Site, and we do not knowingly collect more information than is necessary for the purposes described here.

2. How We Use Your Information

• To verify M-Pesa payments and grant access to premium materials.
• To let you check the status of your access request by phone number.
• To respond to questions or support requests you send us.
• To maintain the security, performance and reliability of the Site.
• To detect and prevent fraud, such as duplicate or invalid transaction codes.

We do not sell your personal information, and we do not use it for advertising or marketing purposes without your consent.

3. How We Store and Protect Your Data

Access requests and related data are stored securely using Supabase, our database and authentication provider, with access restricted to authorised administrators of the Site. We take reasonable technical and organisational measures to protect your information, but no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

4. Sharing of Information

We do not sell or rent your personal information. We may share limited information:

• With Paystack, our payment processor, to initiate and confirm M-Pesa payments — they receive your phone number and the payment amount, and are subject to their own privacy policy.
• With service providers who help us operate the Site (such as our hosting and database providers), solely to provide their services to us.
• When required to comply with a legal obligation, protect our rights, or investigate suspected fraud or abuse.
• With your consent, or at your direction.

5. WhatsApp Community Group

If you choose to join the KJSEA WhatsApp Group, your interactions there are governed by WhatsApp's own privacy policy and terms, as well as the group's community guidelines. Any phone number or messages you share in the group are visible to other group members, and we recommend only sharing information you are comfortable making visible in that context.

6. Cookies and Similar Technologies

The Site may use strictly necessary cookies or similar local storage required for core functionality (such as keeping the admin dashboard signed in). We do not currently use third-party advertising cookies.

7. Data Retention

We retain access-request records (phone number and M-Pesa transaction code) for as long as necessary to verify payments, provide support, and maintain accurate financial and fraud records, after which they may be archived or deleted.

8. Your Rights

You may ask us to access, correct or delete the personal information we hold about you by contacting us using the details on our Contact page. We will respond to reasonable requests within a reasonable timeframe, subject to any legal or legitimate business requirements to retain certain records.

9. Children's Privacy

Our materials are designed for Grade 9 candidates, many of whom are minors. We encourage parents and guardians to be involved when candidates make payments or submit information on the Site, and we only collect the minimal information described above to deliver the service.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes to our practices or for other operational, legal or regulatory reasons. We will update the "Last updated" date at the top of this page when we do.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your information, please get in touch via our Contact page.