Privacy Policy

1. Who We Are

Mwalimu Doreen ("we," "us," "our") is an online Swahili language course platform. This policy explains what information we collect through this website and how it is used.

Contact: richard@rwilliamsdev.com

2. Information We Collect

• Account information — name, email address, and password (via Supabase Auth)
• Course activity — progress, quiz and flashcard results, module completion
• Booking data — date, time, and any notes you provide when scheduling a live lesson
• Messages you exchange with Mwalimu Doreen through the platform's messaging feature
• Subscription and billing information, processed by Stripe

We do not directly collect or store your payment card details — Stripe handles all payment processing.

3. How We Use Information

• Providing access to courses, flashcards, and quizzes
• Scheduling and managing live lessons with Mwalimu Doreen
• Processing and managing your subscription
• Enabling messaging between you and Mwalimu Doreen
• Improving course content and the platform experience

We do not sell or rent your personal information to third parties.

4. Data Storage & Security

Account and course data is stored in Supabase (PostgreSQL) with Row Level Security enabled, so your data is only accessible to you and, where necessary, Mwalimu Doreen. All traffic is encrypted via HTTPS.

5. Third-Party Services

• Supabase — account authentication and data storage
• Stripe — subscription billing and payment processing
• A third-party video conferencing tool for live lessons, selected by Mwalimu Doreen

These providers have their own privacy policies governing data they process on our behalf.

6. Your Rights

You may access, correct, or request deletion of your personal data, or cancel your subscription at any time from your account. For any of these requests, contact richard@rwilliamsdev.com.

7. Data Retention

We retain your account and course data for as long as your account is active. If you delete your account, we remove your personal data within a reasonable period, except where retention is required by law or by our payment processor.

8. Children's Privacy

This platform is intended for users aged 13 and older. We do not knowingly collect personal information from children under 13. If a learner under 13 wishes to use the platform, a parent or guardian should create and manage the account on their behalf.

9. Changes to This Policy

We may update this policy periodically. The "Last updated" date reflects the most recent revision.

10. Governing Jurisdiction

This policy is governed by the laws of California, USA, and additionally by the Kenya Data Protection Act (2019) where applicable to learners and services connected to Kenya.