Privacy Policy

How we collect, use, and protect school data under Kenya's Data Protection Act, 2019.

Last Updated: December 26, 2024

Data We Collect

Account and contact details (names, phone numbers, email, school information).
Usage data to improve performance, reliability, and support.
Payment references for fees (e.g., M-Pesa transaction IDs, bank receipts) when payments are enabled.
Student, parent, and staff records that you upload or enter into the system.

How We Use Data

We use data to deliver the service, enable communication, issue reports, reconcile payments, provide support, maintain security, and meet legal obligations. Marketing messages are sent only with consent or as otherwise permitted by law, and you can opt out at any time.

Lawful Basis

We process data on the basis of contract (to provide the service), legitimate interests (e.g., security and product improvement), and consent where required (e.g., marketing communications).

Security

We apply role-based access, encryption in transit, backups, and monitoring to protect data. You are responsible for safeguarding user credentials and device-level security.

Retention

Data is retained as needed to provide the service, comply with legal requirements, or resolve disputes. During the trial, you may request deletion; we may retain minimal records for compliance or fraud prevention.

Your Rights

Data subjects may request access, correction, deletion, or restriction, and may object to certain processing. Send requests to legal@mzizi.co.ke; we will respond per the Data Protection Act, 2019.

Cookies & Tracking

We may use cookies and analytics to understand usage and improve the service. You can manage cookies in your browser; some features may be affected.

Updates

We may update this Policy to reflect changes in law or our services. Material changes will be communicated through the platform or email.

Contact

For privacy questions, reach us at legal@mzizi.co.ke.