1. Information We Collect
1.1 Personal Information
We collect the following types of personal information:
- For Students: Full name, email address, phone number, age, grade level, curriculum, subjects of interest, learning goals, and parent/guardian contact information
- For Tutors: Full name, email address, phone number, educational qualifications, teaching experience, current institution, TSC number (where applicable), CV, profile photo, and bank account details for payments
- For All Users: Account credentials, profile pictures, and communication preferences
1.2 Automatically Collected Information
- IP address and device information
- Browser type and version
- Usage data and session information
- Cookies and similar tracking technologies
1.3 Third-Party Information
- Google account information (if you sign in with Google)
- Google Calendar access (for tutors who enable calendar integration)
- Payment information processed through Pesapal
2. How We Use Your Information
We use your personal information for the following purposes:
- To create and manage your account
- To facilitate tutoring sessions and bookings
- To process payments and maintain financial records
- To communicate with you about your bookings, sessions, and account
- To verify tutor credentials and maintain platform quality
- To generate Google Meet links and calendar events for sessions
- To track student progress and provide personalized learning experiences
- To send service updates, promotional materials, and educational content (with your consent)
- To improve our services and develop new features
- To ensure platform security and prevent fraud
- To comply with legal obligations and resolve disputes
3. Legal Basis for Processing
Under the Kenya Data Protection Act, we process your personal data based on:
- Consent: You have given clear consent for us to process your personal data for specific purposes
- Contract: Processing is necessary for a contract we have with you (tutoring services)
- Legal Obligation: Processing is necessary to comply with the law
- Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party
4. Data Sharing and Disclosure
4.1 Service Providers
We share your information with trusted third-party service providers:
- Supabase: Database and authentication services (hosting in secure cloud infrastructure)
- Google: Calendar integration and video conferencing (Google Meet)
- Pesapal: Payment processing services
- Email Service Providers: For sending booking confirmations and notifications
4.2 Within the Platform
- Student information is shared with tutors for booked sessions
- Tutor profiles are visible to students and parents browsing the platform
- Reviews and ratings are displayed publicly on tutor profiles
4.3 Legal Requirements
We may disclose your information if required by law, court order, or government regulation, or if we believe such action is necessary to comply with legal obligations, protect our rights, or ensure user safety.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
- Encryption of data in transit and at rest
- Secure authentication and access controls
- Regular security assessments and updates
- Restricted access to personal data on a need-to-know basis
- Secure backup and disaster recovery procedures
However, no method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
6. Your Rights Under Kenyan Law
Under the Kenya Data Protection Act, 2019, you have the following rights:
- Right to Access: Request a copy of your personal data we hold
- Right to Rectification: Correct inaccurate or incomplete personal data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Restriction: Limit how we use your personal data
- Right to Data Portability: Receive your data in a structured, commonly used format
- Right to Object: Object to processing of your personal data
- Right to Withdraw Consent: Withdraw consent at any time for consent-based processing
To exercise these rights, please contact us at privacy@lanatutors.africa
7. Data Retention
We retain your personal information for as long as necessary to:
- Provide our services to you
- Comply with legal obligations (e.g., tax records for 7 years)
- Resolve disputes and enforce agreements
When your data is no longer needed, we will securely delete or anonymize it.
8. Cookies and Tracking
We use cookies and similar technologies to:
- Keep you signed in
- Remember your preferences
- Understand how you use our platform
- Improve user experience
You can control cookies through your browser settings, but disabling cookies may affect platform functionality.
9. Children's Privacy
Many of our students are minors. We require parent or guardian consent for users under 18 years of age. We take special care to protect children's information and comply with child protection laws. Parents have the right to review, modify, or delete their child's personal information by contacting us.
10. International Data Transfers
Your data may be transferred to and processed in countries outside Kenya where our service providers operate. We ensure that such transfers comply with the Kenya Data Protection Act and implement appropriate safeguards, including standard contractual clauses and ensuring adequate levels of data protection.
11. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by email or through a notice on our platform. The "Last updated" date at the top indicates when the policy was last revised.
13. Office of the Data Protection Commissioner
If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Office of the Data Protection Commissioner of Kenya:
Office of the Data Protection Commissioner
Kalamu House, 5th Floor, Grevillea Grove
Off Parklands Road, Westlands
P.O. Box 3362-00100
Nairobi, Kenya
Email: info@odpc.go.ke
Website: www.odpc.go.ke