Privacy Policy
Your privacy is fundamental to our mission. This comprehensive policy outlines how Kibu AI Learning Platform collects, processes, protects, and manages your personal information in accordance with the highest international standards and Kenyan data protection laws.
Privacy-First Approach
We implement privacy by design principles, ensuring your data is protected at every stage of our AI learning platform.
Introduction
Welcome to Kibu AI Learning Platform (“Kibu,” “we,” “our,” or “us”). We are committed to protecting and respecting your privacy in accordance with the highest international standards and local regulations. This Privacy Policy represents our unwavering commitment to transparency and data protection, explaining in comprehensive detail how we collect, use, process, store, and protect your personal information when you interact with our revolutionary AI-powered learning platform.
As an innovative educational technology company based in Kenya, we recognize that privacy is not merely a legal obligation but a fundamental human right that forms the cornerstone of digital trust. Our approach to privacy is built upon the principles of transparency, accountability, purpose limitation, data minimization, and user empowerment. We have designed our systems and processes to ensure that your personal data is handled with the utmost care and in full compliance with the Data Protection Act, 2019 of Kenya, the General Data Protection Regulation (GDPR), and other applicable international data protection frameworks.
This Privacy Policy applies to all interactions you have with our platform, including but not limited to our website, mobile applications, AI learning tools, voice recognition systems, personalized learning algorithms, community features, and any other services or features we may offer. By using our services, you are entrusting us with your personal information, and we take this responsibility seriously. We believe that understanding how your data is used should not require a law degree, which is why we have crafted this policy to be comprehensive yet accessible, ensuring that you have complete visibility into our data practices.
Our commitment extends beyond mere compliance with legal requirements. We actively implement privacy-by-design principles, ensuring that data protection is embedded into every aspect of our technology development and business operations. This means that from the initial design phase of any new feature or service, we consider privacy implications and build in appropriate safeguards to protect your information. We regularly review and update our privacy practices to ensure they remain current with evolving technology, changing regulations, and best practices in data protection.
Information We Collect
We collect various types of information to provide you with a personalized, effective, and secure learning experience. Our data collection practices are guided by the principles of necessity, proportionality, and transparency. We only collect information that is essential for delivering our services, improving your learning outcomes, and ensuring the security and functionality of our platform. The information we collect falls into several categories, each serving specific purposes in enhancing your educational journey.
Personal Identification Information
When you create an account with Kibu, we collect basic personal identifiers necessary for account creation and management. This includes your full name, email address, phone number, date of birth, and preferred language settings. We also collect your chosen username and securely store your encrypted password. For users who choose to complete their profiles, we may collect additional information such as your educational background, learning goals, preferred learning style, and professional interests. This information enables us to personalize your learning experience and provide relevant content recommendations.
For institutional users, such as schools or corporate clients, we may collect additional information including institutional affiliation, role or position, and organizational identifiers. This information helps us provide appropriate access levels and generate relevant reports for institutional administrators while maintaining individual privacy rights.
Learning and Usage Data
To provide personalized learning experiences and improve our AI algorithms, we collect comprehensive data about your learning activities and platform usage. This includes detailed information about your learning sessions, such as time spent on different topics, questions asked, responses provided, learning materials accessed, and performance metrics. We track your progress through courses, completion rates, quiz scores, and areas where you may need additional support.
Our AI systems analyze your learning patterns to identify optimal learning paths, suggest relevant content, and adapt the difficulty level of materials to match your progress. We collect data about your interactions with our AI tutors, including the types of questions you ask, the explanations you find most helpful, and your preferences for different learning modalities. This data is crucial for our machine learning algorithms to continuously improve and provide increasingly accurate and helpful responses.
We also collect metadata about your learning environment, such as the time of day you typically study, session duration, device preferences, and study patterns. This information helps us optimize our platform performance and provide personalized recommendations for study schedules and learning strategies.
Voice and Multimedia Data
When you use our voice-based learning features, we collect and process voice recordings to provide speech recognition, pronunciation feedback, and conversational AI interactions. These recordings are processed using advanced speech recognition technology to transcribe your spoken words, analyze pronunciation accuracy, and provide real-time feedback. We implement state-of-the-art voice processing techniques that focus on educational content while maintaining privacy and security.
For features that involve image recognition or visual learning tools, we may collect and process images or videos you upload for educational purposes. This might include handwritten notes for digitization, whiteboard content for analysis, or visual projects for assessment. All multimedia content is processed using privacy-preserving techniques, and we implement automatic deletion policies for temporary processing files.
We want to emphasize that voice and multimedia data are treated with the highest level of security and are never used for purposes beyond educational functionality. We do not create voice prints or permanent biometric identifiers, and all processing is done in accordance with strict privacy guidelines.
Technical and Device Information
To ensure optimal platform performance and security, we collect technical information about your device and internet connection. This includes your IP address, browser type and version, operating system, device specifications, screen resolution, and network information. We also collect information about how you navigate our platform, including pages visited, features used, links clicked, and time spent on different sections.
For mobile app users, we may collect device identifiers, app version information, push notification tokens, and mobile-specific usage patterns. This information helps us optimize our mobile experience and ensure compatibility across different devices and operating systems.
We implement advanced analytics to understand user behavior patterns, identify potential technical issues, and improve our platform's performance. This includes monitoring load times, error rates, and user interaction patterns to ensure a smooth and efficient learning experience for all users.
How We Use Your Information
The information we collect serves multiple purposes, all centered around providing you with an exceptional learning experience while maintaining the highest standards of privacy and security. Our use of your data is always purposeful, transparent, and aligned with your expectations and our legitimate business interests. We process your information based on various legal grounds, including your consent, the necessity for contract performance, compliance with legal obligations, and our legitimate interests in providing and improving our services.
Service Delivery & Personalization
We use your information to deliver personalized learning experiences, adapt content to your learning style, track your progress, and provide AI-powered tutoring that evolves with your needs.
Platform Improvement
Your usage data helps us continuously improve our AI algorithms, develop new features, optimize platform performance, and create more effective learning tools.
Security & Fraud Prevention
We process your data to maintain platform security, prevent unauthorized access, detect fraudulent activities, and protect both your information and our services.
Communication & Support
Your contact information enables us to provide customer support, send important updates, deliver relevant educational content, and communicate about new features or services.
Our AI-powered personalization engine uses your learning data to create dynamic, adaptive learning paths that respond to your progress, preferences, and performance in real-time. This includes adjusting the difficulty level of content, recommending relevant learning materials, identifying knowledge gaps, and suggesting optimal study schedules. The personalization process involves complex algorithms that analyze your learning patterns, compare them with anonymized data from other learners, and apply educational best practices to optimize your learning outcomes.
We also use your information for research and development purposes, always in an anonymized and aggregated manner that cannot be traced back to individual users. This research helps us understand broader learning trends, develop new educational methodologies, and contribute to the advancement of AI-powered education. Any insights derived from this research are used to benefit all learners on our platform and may be shared with the broader educational community in the form of anonymized studies or whitepapers.
For institutional clients, we use aggregated data to generate insights and reports that help educational institutions understand learning patterns, identify areas for improvement, and make data-driven decisions about their educational programs. These reports never contain individual student information and are designed to protect privacy while providing valuable institutional insights.
Data Sharing and Disclosure
We maintain strict control over your personal information and follow the principle of data minimization when it comes to sharing. We do not sell, rent, or trade your personal information to third parties for their marketing purposes. Any sharing of your data is done only when necessary for service delivery, legal compliance, or with your explicit consent, and always under strict contractual obligations that ensure the same level of privacy protection you receive from us.
Trusted Service Providers
We work with carefully selected third-party service providers to deliver certain aspects of our services, including cloud hosting, data analytics, customer support, payment processing, and technical infrastructure. These providers are bound by strict contractual obligations that require them to protect your data with the same level of security and privacy that we maintain. They are only permitted to process your data for the specific purposes we have outlined and are prohibited from using your information for their own purposes.
We conduct thorough due diligence on all service providers, including regular security audits, compliance assessments, and privacy impact evaluations. We maintain direct oversight of how your data is handled and require immediate notification of any security incidents or privacy breaches. Our service provider agreements include provisions for data deletion, audit rights, and termination procedures that ensure your data remains protected even if our business relationships change.
Legal and Regulatory Compliance
We may disclose your information when required by law, legal process, or governmental authorities. This includes compliance with court orders, subpoenas, regulatory investigations, and other legal requirements. In such cases, we will only disclose the minimum amount of information necessary to comply with the legal obligation and will challenge any requests that we believe are overly broad or inappropriate.
We also reserve the right to disclose information when we believe it is necessary to protect our rights, property, or safety, or the rights, property, or safety of our users or others. This includes situations involving potential fraud, security threats, or violations of our terms of service. However, we will always balance these interests against your privacy rights and will only disclose information when we have a good faith belief that such disclosure is necessary and appropriate.
Business Transfers and Corporate Changes
In the event of a merger, acquisition, sale of assets, or other corporate transaction, your information may be transferred to the acquiring entity. However, we will ensure that any such transfer is subject to appropriate confidentiality and privacy protections. We will notify you of any such transaction and provide you with choices regarding your data, including the option to delete your account and associated information if you do not wish your data to be transferred.
Any entity that acquires your information through such a transaction will be required to honor the commitments made in this Privacy Policy and will be subject to the same privacy obligations that govern our handling of your data. We will also ensure that you are informed of any changes to privacy practices that may result from such transactions.
Data Security
Security is paramount in everything we do. We have implemented comprehensive, multi-layered security measures that protect your data from unauthorized access, alteration, disclosure, or destruction. Our security framework encompasses physical, technical, and administrative safeguards that are continuously monitored, updated, and improved to address emerging threats and vulnerabilities.
Your Privacy Rights
You have fundamental rights regarding your personal data, and we are committed to facilitating the exercise of these rights in a transparent and user-friendly manner. Under Kenyan data protection law and international privacy frameworks, you have several important rights that we respect and support through both automated tools and dedicated support processes.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Our retention practices are designed to balance your privacy rights with our legitimate business needs and legal requirements. We have established comprehensive data retention schedules that specify how long different types of information are kept and when they are securely deleted.
Retention Periods by Data Type
Account Information
Retained for the duration of your account plus 3 years after closure for legal compliance and dispute resolution.
Learning Data
Retained for 7 years to support long-term learning analytics and AI model improvement, then anonymized.
Voice Recordings
Processed immediately and deleted within 30 days unless explicitly saved by user for learning purposes.
Technical Logs
Retained for 12 months for security monitoring and platform optimization, then automatically purged.
When data reaches the end of its retention period, we securely delete or anonymize it using industry-standard methods. Our deletion processes are designed to be irreversible and comprehensive, ensuring that personal information cannot be recovered or reconstructed. For anonymized data used in research and development, we implement strict anonymization techniques that make re-identification impossible while preserving the educational value of the data.
International Data Transfers
As a global educational platform, we may transfer your personal information to countries outside Kenya to provide our services, support our operations, and enable collaboration with international partners. We understand that international data transfers raise important privacy considerations, and we have implemented robust safeguards to ensure your information receives the same level of protection regardless of where it is processed.
Transfer Safeguards
All international transfers are protected by appropriate safeguards, including Standard Contractual Clauses approved by data protection authorities, adequacy decisions, or other legally recognized transfer mechanisms. We conduct thorough assessments of the privacy laws and practices in destination countries to ensure adequate protection for your data.
Our cloud infrastructure partners maintain certifications such as ISO 27001, SOC 2, and comply with international privacy frameworks. We also implement additional technical measures such as encryption in transit and at rest, access controls, and monitoring systems to provide enhanced protection for transferred data.
Children's Privacy
We are committed to protecting the privacy of children who use our platform. We recognize that children require special privacy protections and have implemented additional safeguards to ensure their information is handled with extra care. Our children's privacy practices comply with applicable laws, including the Children's Online Privacy Protection Act (COPPA) and similar international regulations.
Special Protections for Minors
For users under 18, we implement enhanced privacy protections including parental consent mechanisms, limited data collection, restricted sharing practices, and special retention policies. We also provide parents and guardians with tools to monitor and control their children's privacy settings and data usage.
We do not knowingly collect personal information from children under 13 without verifiable parental consent. If we discover that we have inadvertently collected information from a child under 13, we will delete it immediately. Parents can request access to, modification of, or deletion of their child's information at any time.
Privacy Policy Updates
We regularly review and update this Privacy Policy to reflect changes in our practices, technology, legal requirements, and industry standards. We believe in transparency and will always notify you of significant changes to our privacy practices. Our commitment to your privacy remains constant, even as our policies evolve to address new challenges and opportunities.
How We Handle Updates
When we make material changes to this Privacy Policy, we will provide notice through multiple channels including email notifications, platform announcements, and prominent website notices. We will also maintain a version history of our Privacy Policy so you can review previous versions and understand how our practices have evolved.
For significant changes that affect how we collect, use, or share your personal information, we will provide advance notice and, where required by law, obtain your consent. Minor changes, such as updates to contact information or clarifications to existing practices, will be effective immediately upon posting.
Contact Information
We believe in open communication and transparency. If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, we encourage you to contact us. Our dedicated privacy team is available to assist you and will respond to your inquiries promptly and comprehensively.
Privacy Officer
privacy@kibu.ai
Phone
+254 700 123 456
Headquarters
Address
Kibu AI Learning Platform
Email: brianmutugidev@gmail.com
Address: Nairobi, Kenya
Phone: +254 768 999 816
For urgent privacy matters or data breach notifications, please contact our 24/7 security hotline at +254 700 987 654 or email security@kibu.ai. We are committed to responding to all privacy inquiries within 72 hours and resolving concerns within 30 days.
Questions About Your Privacy?
Our privacy team is here to help. Contact us anytime for clarification about our data practices or to exercise your privacy rights.