Privacy Policy.

Edyfra is an educational technology platform based in Nairobi, Kenya. We provide AI-assisted learning, tutor matching, study rooms, and community features for students and tutors.

Contact: privacy@edyfra.com
Address: Nairobi, Kenya

Edyfra connects students with tutors and study resources. We use AI to personalize learning, generate study content, and provide real-time academic assistance. Our platform includes study rooms, booking systems, community forums, and progress tracking.

We collect only the information necessary to provide and improve our service:

• Account information: Email, name, phone number, education level, and subjects
• Usage data: Study sessions, progress, interactions with tutors and AI
• Content: Messages, notes, and materials you create or upload
• Payment information: Processed securely by our payment providers (M-Pesa, Paystack). We do not store full card details.
• Device and log data: IP address, browser type, and access times for security and analytics

What we DON'T collect: We do not collect unnecessary personal data, sell your information, or use ad trackers.

We use your data to:

• Provide and improve the Edyfra platform
• Match you with suitable tutors and study partners
• Power AI features like Mash AI for personalized learning
• Send important notifications about your account and sessions
• Ensure platform safety and prevent abuse

AI Training: We do not use your personal data or study content to train AI models. Your data is processed only to provide you with personalized educational assistance.

We use essential cookies to keep you logged in and maintain your preferences. We also use analytics cookies to understand how the platform is used.

We work with trusted service providers to operate Edyfra:

• Supabase — database and authentication (Privacy Policy)
• Google Cloud / Firebase — hosting, AI, and messaging (Privacy Policy)
• Stream — chat and video infrastructure (Privacy Policy)
• M-Pesa / Paystack — payment processing (Privacy Policy)
• Resend — email delivery (Privacy Policy)
• Vercel — hosting and deployment (Privacy Policy)

We retain your data only as long as necessary:

• Account data: Retained until you delete your account
• Study sessions: Retained for your learning history and progress tracking
• Analytics logs: Retained for up to 30 days for security and debugging
• Payment records: Retained as required by law (7 years)

You can request deletion of your account and associated data at any time.

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Update or correct your information
• Deletion: Request deletion of your account and data
• Portability: Export your data in a usable format
• Objection: Object to certain processing activities

To exercise these rights, contact us at privacy@edyfra.com.

Your data may be transferred to and processed in Kenya and other countries where our service providers operate. We ensure appropriate safeguards are in place for international transfers.

Edyfra is designed for students aged 13 and above. If you are under 18, you must have parental consent to use the platform. We do not knowingly collect personal information from children under 13.

We implement industry-standard security measures including encryption, Row Level Security (RLS), and regular security audits. However, no system is completely secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in-app notification. The "Last updated" date at the top indicates when the policy was last revised.

For privacy-related questions or requests, contact us at:

Email: privacy@edyfra.com
Address: Nairobi, Kenya