Privacy policy

This policy explains what personal data SmartStudy collects, why, and what you can do about it. SmartStudy is operated by Last Mile Ventures Ltd, Nairobi, Kenya.

Who this covers

SmartStudy is used by parents and guardians who create an account, and by the learners they add to it. An account holder is responsible for the learner profiles on their account.

What we collect

• Account details — your email address, and a display name if you give one.
• Learner profiles — the name you enter for each learner and the course they are studying. We do not ask for a learner's date of birth, school, photograph or contact details.
• Study activity — which notes are opened, answers submitted to quizzes and papers, and scores, so progress can be shown.
• Payment records — the phone number used for an M-Pesa payment, the amount, the plan, and the transaction reference. We never see or store your M-Pesa PIN.
• Referral details — your referral code, who joined using it, and the M-Pesa number you give for receiving commission.

What we do not collect

We do not collect precise location, contacts, photos, or device identifiers for advertising. SmartStudy does not show advertisements and does not sell personal data.

Children's data

Accounts are created by adults. Learner profiles hold the minimum needed to deliver lessons at the right level: a name and a course. Study activity is linked to a learner profile so that a parent can see progress.

If you believe a child's data has been entered without a parent's involvement, contact us at pwangila@gmail.com and we will remove it.

Why we use it

• To give access to the notes, quizzes and papers you have chosen.
• To show a learner's progress to their parent or guardian.
• To take payment and record what a subscription covers.
• To pay referral commission where it is owed.
• To keep the service secure and to fix faults.

Who we share it with

We use service providers to run SmartStudy, and share only what each needs: Supabase for database and authentication, Safaricom's M-Pesa Daraja service for payments, and Google for sign-in where you choose to use it.

We disclose personal data to anyone else only where the law requires it.

Where data is held

SmartStudy's database is hosted in the European Union. Transfers outside Kenya are made on the basis of appropriate safeguards under the Data Protection Act 2019.

How long we keep it

Account and learner data is kept while your account is open. Payment records are kept for as long as tax and accounting rules require. When you delete your account, your learners and their progress are deleted with it.

Your rights

Under the Data Protection Act 2019 you may ask to see the personal data we hold about you, have it corrected, have it deleted, object to how it is used, or receive a copy of it. Write to pwangila@gmail.com and we will respond.

You can delete your account and all its data yourself from the Profile screen in the SmartStudy app.

You may also complain to the Office of the Data Protection Commissioner.

Security

Access to your data is restricted by database policies so that one account cannot read another's. Payments are handled by Safaricom; card and PIN details never reach us.

Changes

If this policy changes we will update the date at the top of this page.

Contact

Last Mile Ventures Ltd, Nairobi, Kenya. Email pwangila@gmail.com.