Last Updated: 21st June 2026
1. Introduction
Welcome to KenyaVault ("we," "our," "us"). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website kenyavault.co.ke (the "Site") and use our educational resource platform.
We are committed to protecting your privacy and handling your personal information with transparency and care. This policy applies to all users of our Site, including students, teachers, parents, and school administrators.
📌 Key Principle: We collect only the information necessary to provide you with our educational resources and services. We do not sell your personal data to third parties.
2. Information We Collect
2.1 Information You Provide Directly
When you use KenyaVault, we may collect the following information that you voluntarily provide:
- Contact Information: Name, phone number, and email address when you make a purchase, contact us, or sign up for our services
- Payment Information: M-PESA transaction codes and payment details (we do not store your M-PESA PIN or full payment credentials)
- Communications: Messages, inquiries, and feedback you send to us via WhatsApp, email, or our contact forms
- Resource Preferences: Information about the subjects, levels, and resources you view or purchase
- Account Information: If you create an account, your username and password (securely encrypted)
2.2 Information Collected Automatically
When you visit our Site, we automatically collect certain information about your device and usage:
- Device Information: IP address, browser type, operating system, device type
- Usage Data: Pages visited, time spent on pages, resources viewed, search queries, and click patterns
- Referral Information: How you arrived at our Site (e.g., search engine, social media, direct link)
- Cookies: Small text files stored on your device to enhance your experience
🔒 We do not collect:
- Sensitive personal information (e.g., race, religion, health data)
- Financial account numbers or passwords
- Biometric data or location tracking
3. How We Use Your Information
We use the information we collect for the following purposes:
- Provide Services: To process your purchases, deliver digital resources, and send download links to your WhatsApp or email
- Customer Support: To respond to your inquiries, resolve issues, and provide technical assistance
- Improve Our Platform: To analyze usage patterns, optimize content, and enhance user experience
- Communication: To send order confirmations, payment receipts, and important updates about our services
- Legal Compliance: To comply with applicable laws, regulations, and legal processes
- Security: To detect and prevent fraud, unauthorized access, and other security issues
✅ Your Information, Your Control: We only use your information for the purposes explicitly stated in this policy. We do not use your data for marketing without your explicit consent.
4. Information Sharing & Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
- Service Providers: We share information with trusted third-party service providers who assist us in operating our Site and delivering services, including:
- Supabase (database and hosting services)
- Megapay (payment processing)
- WhatsApp (communication of download links)
- Legal Requirements: We may disclose information if required by law, regulation, or legal process, or to protect the rights, property, or safety of KenyaVault, our users, or others
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred to the new entity
- Aggregated Data: We may share anonymized, aggregated data for research or analytics purposes (this data does not identify you personally)
🔒 Our Commitment: All third-party service providers are contractually obligated to protect your data and use it only for the specific services they provide to KenyaVault.
5. Data Security
We take the security of your personal information seriously and implement industry-standard measures to protect it:
- Encryption: All data transmitted between your browser and our Site is encrypted using SSL/TLS technology
- Access Controls: Only authorized personnel with a legitimate need have access to personal information
- Secure Storage: Your information is stored on secure servers with restricted access
- Regular Monitoring: We regularly monitor our systems for potential vulnerabilities and security threats
- Data Minimization: We collect only the minimum amount of information necessary to provide our services
⚠️ Important: While we strive to protect your information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
6. Your Rights & Choices
Under Kenya's Data Protection Act (2019) and applicable data protection laws, you have the following rights regarding your personal information:
- Right to Access: You can request a copy of the personal information we hold about you
- Right to Rectification: You can correct inaccurate or incomplete information
- Right to Erasure: You can request that we delete your personal information (subject to legal obligations)
- Right to Restrict Processing: You can limit how we use your information
- Right to Data Portability: You can request your data in a structured, machine-readable format
- Right to Object: You can object to the processing of your data for certain purposes
- Right to Withdraw Consent: You can withdraw your consent at any time
📧 To exercise any of these rights: Contact us at
adminnexalearn@gmail.com with your request. We will respond within 30 days as required by law.
7. Cookies & Tracking
We use cookies and similar tracking technologies to enhance your experience on KenyaVault:
- Essential Cookies: Required for basic Site functionality, such as navigation and secure transactions
- Preference Cookies: Remember your preferences and settings
- Analytics Cookies: Help us understand how users interact with our Site (e.g., Google Analytics)
- Session Cookies: Temporary cookies that expire when you close your browser
You can control cookie preferences through your browser settings. However, disabling certain cookies may affect Site functionality.
8. Third-Party Links
Our Site may contain links to third-party websites, including:
We are not responsible for the privacy practices or content of these third-party sites. We encourage you to review their privacy policies before providing any personal information.
9. Children's Privacy
KenyaVault is intended for use by students, teachers, and parents. We do not knowingly collect personal information from children under the age of 18 without parental consent.
- If you are a parent or guardian and believe your child has provided personal information without your consent, please contact us
- We encourage parents to monitor their children's online activities and discuss the importance of privacy
- Resources on our platform are designed for educational purposes and are appropriate for school-age children
👨👩👧👦 Parental Guidance: We recommend that parents review resources before their children access them to ensure age-appropriateness.Though the documents are for educational.
10. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, including:
- Transaction Records: We retain purchase records for tax and accounting purposes as required by Kenyan law (typically 7 years)
- Customer Support: Communication records are retained for up to 2 years to provide ongoing support
- Account Information: If you create an account, we retain your information until you request deletion
- Analytics Data: Aggregated usage data may be retained indefinitely for analytics purposes
🗑️ Data Deletion: You may request deletion of your personal data at any time by contacting us. We will comply unless we have a legal obligation to retain the data.
11. International Data Transfers
KenyaVault is based in Kenya, and our services are primarily provided to users in Kenya. However, we may use service providers located in other countries (e.g., Supabase servers in the United States).
- We ensure that any international data transfers comply with applicable data protection laws
- We use standard contractual clauses and other legal mechanisms to protect your data
- By using our Site, you consent to the transfer of your data to these third-party providers
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.
- Notification: We will notify you of significant changes by posting the updated policy on this page and updating the "Last Updated" date
- Review: We encourage you to review this policy periodically to stay informed about how we protect your information
- Acceptance: Your continued use of KenyaVault after any changes constitutes your acceptance of the updated policy
📅 Version History:
- 21st June 2026: Initial version published
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal information, please contact us:
We are committed to addressing your privacy concerns promptly and transparently. If you are not satisfied with our response, you have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.