1. Who We Are
Nyenzo is operated by iDev Consulting (www.idev.co.tz), registered in Tanzania (BRELA No. 464629). Our platform is at nyenzo.com, providing AI-powered educational tools for learners worldwide.
For any privacy matter, including requests to exercise your rights, write to central@nyenzo.com with "Privacy" in the subject line.
2. Who This Policy Covers
An adult buys and controls Nyenzo. A parent or guardian creates the account, adds each learner, and remains responsible for that learner's use of the platform.
This policy therefore covers two groups:
* Account holders — the parent or guardian who registers, pays and manages the account.
* Learners — the children added to that account, who sign in with a name and PIN issued by their parent.
Learners give us no email address, no phone number and no contact details of their own. Everything we hold about a learner comes either from the parent who added them or from the learning activity itself.
3. What We Collect
From the account holder
* First name, last name and email address
* A phone number and country, if you provide them
* Password credentials, held by our authentication provider and never visible to us
* Billing name, address and card details, collected and held by our payment provider — we never see or store card numbers
* Your acceptance of our Terms, recorded as a timestamp and a version number
* Support correspondence you send us
From or about each learner
* First name and year level, entered by the parent
* Chosen subjects and pathway
* Lessons opened, days closed, weeks closed and time spent
* Exam answers, including free-text written answers, and the marks awarded
* Weekly confidence ratings the learner gives themselves
* A focus indicator recorded during timed exams, described in section 5
* Reward goals set by the parent and progress against them
Collected automatically
* IP address, browser type, device type and approximate country
* Pages visited, features used and error reports
* Cookies and similar technologies, described in section 12
We do not collect precise location, biometric identifiers, voice or video recordings, contact lists, or any special category data such as health, ethnicity, religion or political opinion.
A note on written answers. Exam answers are free-text, so a learner could type something we never asked for — a surname, an address, a school name, a phone number. We do not need any of that. Please ask your child not to include personal details in their answers. If you find something a learner should not have entered, tell us and we will remove it.
4. Why We Process It, and On What Legal Basis
| What we do | Why | Legal basis |
|---|---|---|
| Run your account, deliver lessons and exams, mark work, show progress | To provide the service you subscribed to | Performance of a contract |
| Take payment, manage subscriptions, handle refunds and billing problems | To operate the subscription | Performance of a contract |
| Send transactional email — receipts, daily summaries, billing notices | Part of the service | Performance of a contract |
| Keep the platform secure, prevent abuse, diagnose faults | To run a safe and working service | Legitimate interests |
| Review flagged content and improve lesson and exam quality | To keep the curriculum accurate | Legitimate interests |
| Measure how our advertising performs | To reach families who may want Nyenzo | Consent, where required, otherwise legitimate interests |
| Retain records of payment and agreement | To meet tax and legal obligations | Legal obligation |
Where we rely on legitimate interests, we have weighed the effect on you and limited what we do accordingly. You may object at any time under section 11.
Where we rely on consent, you may withdraw it at any time without affecting anything done before you withdrew it.
5. Children and Learner Data
Nyenzo teaches children, and how we handle their data is the most important thing in this policy.
A parent is always in control. Only an adult can create an account. When you add a learner, you give consent, as their parent or guardian, for us to process that child's data for the purposes in this policy. You can review everything we hold about your child, correct it, export it, or delete it at any time from your dashboard or by writing to us.
We collect as little as possible. A learner profile holds a first name and a year level. We do not ask a child for an email address, a surname, a photograph, a date of birth, a phone number or an address. A learner cannot message another learner, upload files, or publish anything visible outside their own account.
We never advertise to children, and we never sell their data. We show no advertising of any kind inside the learner experience. We disclose no learner data to advertising networks, data brokers or analytics companies. Our advertising measurement, described in section 8, uses account-holder data only and never touches learner data.
We do not use learner work to train AI models. Answers, written work and marks go to our AI provider only to mark or generate the work in front of the learner. Our agreement with that provider prohibits using this data to train their models, and we will not agree terms that permit it.
About the focus indicator. During a timed exam, Nyenzo records whether the exam window stayed in the foreground and how often it was left. It records that a switch happened and for how long. It does not record where the learner went, what other pages or applications were open, or anything typed elsewhere. It uses no camera, no microphone and no screen capture. The result appears to the parent as a single percentage, so they can see whether an exam was sat in one sitting.
About ranking. Where a learner has ranking switched on, they see their position among other learners in the same year who sat the same exam. Other families see a display name and a position. No other learner's identity, school, contact details or location is revealed, and you can turn ranking off at any time.
About Partners in Learning. If you invite a partner — a grandparent, for example — they receive a read-only email digest of your child's achievements. They get no account, no dashboard, no access to your billing details, and no visibility of your other children. You can remove a partner at any time.
About the Co-op Network. This stays off unless you switch it on. If you opt in, other Nyenzo parents in your city may see your first name, your general location and a contact address so they can reach you. No learner data is ever shared through it, and you can leave at any time.
If you believe we hold information about a child that we should not, write to central@nyenzo.com. We will delete it promptly and confirm when it is done.
6. AI and Automated Processing
We use artificial intelligence to generate lessons and exam questions and to mark answers, including written ones. This is central to the service and is described in our Terms.
A person can review every mark. Every marked question carries a report option. When a learner or parent flags a mark, a human reviews it and can change it. Marks awarded inside Nyenzo guide learning and show progress. They are not qualifications, we report them to no school, examination board or employer, and they produce no legal or similarly significant effect on anyone.
We use no automated processing to make decisions about your account, your billing or your access.
7. Who We Share Data With
We share personal data only with the service providers below, each under a written agreement limiting them to processing on our instructions.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Clerk | PurposeAuthentication and identity | Data involvedAccount email, credentials | LocationUnited States |
| Neon | PurposeDatabase hosting | Data involvedAll platform data | LocationUnited States / EU |
| Vercel | PurposeApplication hosting and delivery | Data involvedRequests, IP address | LocationGlobal edge network |
| LemonSqueezy | PurposePayments, as merchant of record | Data involvedBilling name, address, card data | LocationUnited States |
| Anthropic | PurposeAI content generation and marking | Data involvedLesson and exam text, learner answers | LocationUnited States |
| Cloudinary | PurposeImage hosting for lesson illustrations | Data involvedImages only, no personal data | LocationUnited States |
| Resend | PurposeTransactional email delivery | Data involvedRecipient email, message content | LocationUnited States |
| Sentry | PurposeError monitoring | Data involvedTechnical error data, IP address | LocationUnited States |
| Meta | PurposeAdvertising measurement — see section 8 | Data involvedHashed account-holder identifiers only | LocationUnited States |
We may also disclose data where the law requires it, where it is necessary to establish or defend a legal claim, or to protect the safety of a child or another person. If Nyenzo is ever sold or transferred, data may pass to the acquirer under the same protections, and we will tell you before it does.
We do not sell personal data, and we never have.
8. Advertising and Analytics
We advertise Nyenzo on Meta platforms. To measure whether those advertisements work, we share a limited set of information about account holders only with Meta: an email address and an internal account identifier, both irreversibly hashed before they leave our servers, and a country code. We send an event when someone starts a trial or subscribes.
We send Meta no learner data, no exam results, no names and no billing details. We send nothing at all about children.
Decline advertising cookies when prompted, or use your browser's privacy controls, and this stops. Declining changes nothing about your use of Nyenzo.
We use no third-party advertising or profiling anywhere inside the parent dashboard or the learner experience.
9. Sending Data Outside Tanzania
Nyenzo serves families worldwide, and the providers in section 7 sit outside Tanzania, principally in the United States and the European Union.
Where we transfer personal data out of Tanzania we apply the safeguards required by the Personal Data Protection Act, 2022, including contractual protections with each recipient and, where required, the approval of the Personal Data Protection Commission.
Where we transfer personal data out of the United Kingdom or the European Economic Area, we rely on the UK International Data Transfer Agreement or the European Commission's Standard Contractual Clauses, together with encryption in transit and at rest.
Ask us and we will tell you which safeguards apply to any particular transfer.
10. How Long We Keep Data
| Data | Retention |
|---|---|
| Account and learner records | While your account is open |
| Learning history, exam attempts and marks | While your account is open, so progress is preserved |
| Everything above, after you close your account | Deleted within 90 days |
| Payment and invoice records | 7 years, to meet tax and accounting obligations |
| Support correspondence | 2 years after the matter is closed |
| Server and security logs | 12 months |
| Advertising measurement events | Held by Meta under their retention, not by us |
We keep no children's personal information indefinitely. When an account closes, learner data is deleted on the schedule above whether or not the parent asks.
11. Your Rights
Wherever you live, you may ask us to:
* Access the personal data we hold about you or your child
* Correct anything inaccurate or incomplete
* Delete your account and the data associated with it
* Export your data, and your learner's progress, in a portable format
* Restrict how we process it while a dispute is resolved
* Object to processing we carry out on the basis of legitimate interests, including advertising measurement
* Withdraw consent at any time, where we relied on it
Write to central@nyenzo.com. We respond within 30 days and charge nothing. We may ask you to confirm your identity first, so that nobody else can obtain your family's data by asking.
Complaints. If you are unhappy with how we have handled your data, tell us first and we will try to put it right. You may also complain to a regulator: the Personal Data Protection Commission in Tanzania, the Information Commissioner's Office in the United Kingdom, or your national data protection authority in the European Economic Area.
12. Cookies
We use cookies that are strictly necessary to sign you in, keep your session secure and remember your preferences. These cannot be turned off without breaking the service.
We also use advertising cookies for the measurement described in section 8. These are optional, we ask before setting them, and declining changes nothing about your access.
We use no cookies inside the learner experience beyond those needed to keep a learner signed in.
13. Security
We protect your data with encrypted connections, encryption at rest, access controls limiting staff access to what is necessary, and separate credentials for every service. Learner sign-in requires a PIN set by the parent, and learner accounts cannot change billing or account settings.
No system is completely secure, and we will not pretend otherwise. If a breach occurs that affects your personal data, we will notify the Personal Data Protection Commission and any other regulator we are required to tell, and we will notify you directly without undue delay where there is a risk to you or your child.
14. Changes to This Policy
We may update this policy. For a material change we will email account holders and display a notice in the platform before it takes effect. The date and version at the top of this page always identify the current text.
15. Contact
iDev Consulting
Email: central@nyenzo.com
Web: www.idev.co.tz
Platform: nyenzo.com