Privacy Policy

1. Introduction

This Privacy Policy explains how Kuzana Accelerator Limited (“Kuzana”, “we”, “us”, “our”) collects, uses, shares, and protects personal data when you use Finance for Founders, our online course at class.kuzana.co (“the Platform”). We are committed to handling your data in accordance with the Data Protection Act, 2019 of Kenya.

By using the Platform, you consent to the practices described in this policy.

2. Who We Are (Data Controller)

Finance for Founders is operated by Kuzana Accelerator Limited, Spring Valley Rd, Nairobi, Kenya. For the purposes of the Data Protection Act, 2019, we are the data controller of the personal data described here.

Contact for data matters: info@kuzana.co

3. What Data We Collect

Information you provide:

• Your email address, used to sign in and to contact you about your account
• Your full name
• Your WhatsApp number
• If you sign in with Google: your Google account identifier, name, email address, and profile photo, as shared by Google
• Files you upload for class prerequisites, and your answers to quizzes
• If you request a tax invoice when paying: your KRA PIN and the name the invoice should be issued to (which may be your company)

Information created as you use the Platform:

• Your course enrollments, progress through classes and lessons, and quiz results
• Certificates issued to you on completing a course
• Payment records: the course, amount, currency, payment channel (M-Pesa or card), status, and the payment reference. Card and M-Pesa details are handled by our payment provider; we do not receive or store your card number or M-Pesa PIN
• Basic technical data necessary to operate the service, for example session and security information, when you signed in, and when you were last active

We do not intentionally collect sensitive personal data (such as health, religious, or political information). Please do not include such information in anything you upload.

4. How We Use Your Data

We use your personal data to:

• Create and manage your account, and sign you in by Google or by a link sent to your email;
• Deliver the course: show you the classes you can access, save your progress, grade your quizzes, and review your prerequisite submissions;
• Process your payment and unlock the paid classes of a course;
• Issue tax invoices where you ask for one, and keep records required by tax law;
• Issue your certificate when you complete a course;
• Contact you by email or WhatsApp about your account, your progress (for example, reminders to continue), and follow up from the Kuzana team;
• Understand how learners move through the course so we can improve it, mostly in aggregate across all learners;
• Operate, maintain, and secure the Platform, and prevent fraud and misuse;
• Comply with legal obligations.

5. Legal Basis for Processing

We process your personal data on the basis of:

• Your consent, which you give by creating an account and completing your profile;
• Performance of our contract with you, to deliver the course you signed up for or paid for;
• Our legitimate interests in operating, securing, and improving the Platform;
• Legal obligations, including tax and record keeping requirements.

You may withdraw consent at any time by asking us to delete your account, though this will end your access to the course.

6. Who Can See Your Data

6.1. Your profile, progress, quiz results, submissions, and payments are not visible to other learners.

6.2. Authorised members of the Kuzana team can see this information to run the course, support you, review submissions, reconcile payments, and issue invoices.

6.3. A certificate shows your name, the course, and the date it was issued. If you share your certificate, anyone you share it with can see those details.

7. How We Share Data

We do not sell your personal data. We share it only as follows:

• With service providers who help us operate the Platform, for example cloud hosting and file storage, email delivery, and Paystack, which processes payments by M-Pesa and card. These providers process data on our behalf under appropriate obligations;
• With Google, when you choose to sign in with Google. Google’s own privacy policy applies to your Google account;
• With YouTube, which hosts the course videos. Videos are embedded in privacy-enhanced mode, so YouTube does not set cookies until you play a video; once you do, YouTube’s and Google’s privacy policies apply to that viewing;
• With the Kenya Revenue Authority, where we issue a tax invoice that includes your KRA PIN;
• Where required by law, or to protect our rights, safety, or property, or those of others;
• In connection with a business transfer (such as a merger or acquisition), subject to this policy.

8. Data Storage and Security

8.1. Your data is stored on secured servers. Uploaded files are stored with a cloud storage provider.

8.2. Some of our service providers, including our hosting provider, process or store data outside Kenya. Where this occurs, we take steps intended to ensure appropriate protection consistent with applicable law.

8.3. We implement reasonable technical and organisational measures to protect your data, including encryption of connections, access controls, and regular backups. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data Retention

9.1. We retain your personal data while your account is open.

9.2. When your account is deleted, we remove your name, email address, WhatsApp number, Google account link, profile photo, and saved KRA PIN.

9.3. We keep payment and invoice records, including any KRA PIN and invoice name given at checkout, for as long as tax and accounting law requires, even after your account is deleted. We may also retain certain data for a limited period where necessary to resolve disputes, prevent fraud, or enforce our agreements, after which it is deleted or anonymised.

9.4. Progress and quiz data that no longer identifies you may be kept in aggregate to improve the course.

10. Your Rights

Under the Data Protection Act, 2019, you have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Have your data deleted, subject to the records we must keep by law (Section 9.3);
• Object to or restrict certain processing, including reminders and follow up messages;
• Data portability, where applicable;
• Withdraw consent at any time;
• Lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these rights, including deleting your account, contact us at info@kuzana.co. We will respond within the timeframes required by law.

11. Children

The Platform is not intended for anyone under 18, and we do not knowingly collect data from children. If we learn that we have, we will delete it.

12. Cookies and Similar Technologies

The Platform uses cookies and similar technologies that are strictly necessary for it to function, for example to keep you signed in and to protect your session. These are essential and cannot be turned off without affecting core features like signing in.

Course videos are embedded from YouTube as described in Section 7. We may also use privacy-friendly analytics to understand how the Platform is used and to improve it. We do not use cookies for advertising, and we do not sell your data.

You can control or delete cookies through your browser settings, though disabling essential cookies will prevent you from signing in.

13. Changes to This Policy

We may update this policy from time to time. We will post the updated version with a revised “Last updated” date and, where appropriate, notify you.

14. Contact

For any questions about this policy or your personal data: info@kuzana.co, Kuzana Accelerator Limited, Spring Valley Rd, Nairobi, Kenya.