Privacy Policy
Last updated 21 October 2026
Who we are
ConfiLearn is a learning marketplace and holiday-tuition service operated for users in Kenya. The data controller is the ConfiLearn operator. Contact hello@confilearn.co.ke, phone +254 706 397 373. This policy is written for the Kenya Data Protection Act, 2019 (the Act) and the Data Protection (General) Regulations.
Data we collect
We collect the account details you give us (name, email, phone, role), learning activity (enrolments, progress, XP, streaks, reviews), messages you send in class, tutor KYC documents you upload (national ID, TSC number, Certificate of Good Conduct), and payment metadata from Paystack (amount, channel, reference, and the fee Paystack reports). We never store your M-Pesa PIN or your full card number. If you join with Google, we receive the name and email Google shares with us.
Children and parental consent
ConfiLearn is used by learners under 18, including CBC and KCSE students. A child should use the service with a parent or guardian. The parent or guardian accepts these terms and this policy at signup, including when the first login is with Google. We do not knowingly build advertising profiles of children. A parent may ask us to access, correct, or delete a child's account. Holiday tuition at a family's home, when a tutor and the family both agree to it, should have a parent or guardian in the house.
Why we process data
We process data to perform the contract (running your account, classes, and payments), to meet legal duties (tax, KYC, and the Act), and on legitimate interests that we balance against your rights (fraud checks, securing the service, and measuring real learning activity). Marketing email is optional. AI answers are produced by Groq on our server. We send the question and the relevant lesson or policy text, not your payment instrument.
Payments
Paystack is the only checkout. References start with CL- and the charge metadata says app=confilearn. We verify the charge with Paystack before we enrol a learner, open a class, or credit a wallet. Paystack's fee for that transaction (M-Pesa, card, or bank) is recorded on the payout ledger and is paid from ConfiLearn's commission, not from the tutor's 85%.
Class recordings
A class is recorded only when the tutor turns recording on and the room is configured for it. Learners are asked to agree in the classroom. Recordings are stored for enrolled learners of that class. Downloadable notes and worksheets are watermarked with the learner's name, email, and the date.
Affiliates
If you arrive through a referral link we store a first-touch code for 30 days in a cookie, or at signup if you already have an account. We keep the referrer id, the code, and later the commission earned. We do not sell this to data brokers.
Your rights
Under the Data Protection Act, 2019 you may request access, correction, deletion, or a restriction, and you may object to processing that is based on legitimate interests. You may lodge a complaint with the Office of the Data Protection Commissioner (www.odpc.go.ke). Email hello@confilearn.co.ke. We will respond within the timelines in the Act.
Retention
Account data stays while the account is open and for a limited period afterwards so we can finish refunds, payouts, and legal claims. Payment ledger rows are kept for audit. You can close your account from Settings.
Contact hello@confilearn.co.ke