Privacy Policy for Nuru Found Organization

Nuru Found Organization operates the website nurufoundations.com and its associated learning platform, including student, tutor, and admin dashboards (together, the "Platform"). This Privacy Policy explains what personal information we collect, why we collect it, and how it is used, shared, and protected.

We process personal data in line with Kenya's Data Protection Act, 2019, and the guidance of the Office of the Data Protection Commissioner (ODPC). If you have questions about this policy, contact us at info@nurufoundation.org.

1. Information We Collect

Account information. When you register, we collect your full name, email address, phone number, and password (stored as a secure hash, never in plain text). You may optionally add a short bio and profile photo.

Academic and course data. We keep records of the courses you enroll in, your lesson progress, assignment submissions (including code you submit for review), grades, and tutor feedback, so that tutors and admins can support your learning.

Payment information. Course fees may be paid termly or via monthly installments, and are processed through M-Pesa (and any other payment methods we make available on the Platform). We store the transaction status, due dates, and the M-Pesa receipt number confirming payment. We do not collect or store your M-Pesa PIN, bank card numbers, or other direct financial account credentials — these are handled directly by Safaricom/the relevant payment provider.

Communications and community activity. If you send messages to other users, post in the community forum, or comment on posts, that content is stored so it can be displayed and moderated. We also send account and course-related notifications.

Automatically collected information. Like most websites, our hosting provider logs standard technical data such as IP address, browser type, and access times, used for security and troubleshooting.

2. Cookies and Analytics

We use Google Tag Manager to load Google Analytics on our site, which uses cookies to help us understand how visitors use the Platform (e.g. which pages are viewed and for how long). You can disable cookies at any time through your browser settings; doing so may affect some site functionality.

We do not use advertising cookies, and we do not sell visitor data to ad networks.

3. How We Use Your Information

• To create and manage your account and course enrollments
• To track academic progress and enable tutors to grade and give feedback
• To process course payments and send billing reminders
• To respond to support requests and send important notifications
• To maintain the safety and integrity of the community forum
• To improve the Platform based on aggregate usage trends

4. How We Share Information

We do not sell personal information. We share it only where necessary:

• Tutors and admins can see the enrollment, progress, and submission data of students in their courses, for teaching and administrative purposes.
• Payment processors (such as Safaricom for M-Pesa) receive the information needed to process a transaction.
• Our hosting provider stores data on our behalf under standard hosting arrangements.
• Legal requirements — we may disclose information if required by Kenyan law or a valid legal request.

5. Children's Privacy

Nuru Found Organization knowingly serves students under the age of 18, often enrolled with the involvement of a parent, guardian, or school. Where a student is a minor, we rely on the consent of a parent, guardian, or enrolling institution to collect and process that student's information as described in this policy.

Parents and guardians may contact us at info@nurufoundation.org to review, correct, or request deletion of their child's information.

6. Data Retention

We retain account and academic records for as long as your account is active, and for a reasonable period afterward to meet record-keeping, financial, and legal obligations. You may request earlier deletion, as described below, subject to any legal or academic record-keeping requirements.

7. Data Security

We take reasonable technical and organizational measures to protect your information, including password hashing and restricted access to student data. However, no method of transmission or storage over the internet is completely secure, and we cannot guarantee absolute security.

8. Your Rights

Under Kenya's Data Protection Act, 2019, you (or, for a minor, their parent/guardian) have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information, subject to legal or academic retention needs
• Object to certain uses of your information

To exercise any of these rights, contact us at info@nurufoundation.org.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date at the top of this page.

10. Contact Us