Privacy Policy

1. Information we collect

• Account and profile details, including name, email, phone number, institution, program, role, and profile image.
• Learning and professional information, including enrolment, attendance, activity, submissions, assessments, feedback, progress, certificates, skills, and job-readiness activity.
• Content and communications, including messages, discussion posts, uploaded files, support requests, and video or audio submitted in recording-enabled activities.
• Transaction and subscription records. Payment providers process payment credentials; IGA Africa receives transaction status and related records.
• Device and usage information, including IP address, device identifiers, app version, logs, security events, notification tokens, and approximate location inferred from IP where enabled.
• AI interactions, prompts, responses, and relevant course context when you use an AI-enabled feature.

2. How and why we use information

Depending on the context and applicable law, processing is based on performance of our agreement, consent, legitimate interests in operating and securing an educational service, and compliance with legal obligations.

• Create and secure accounts, authenticate users, and provide the website and mobile app.
• Deliver courses, assessments, communications, support, payments, certificates, analytics, and institutional reporting.
• Personalize learning, provide AI-enabled assistance, and improve service quality.
• Prevent fraud and misuse, moderate content, troubleshoot incidents, and meet legal or educational recordkeeping duties.
• Send service messages and, where permitted, optional communications that you can control through available preferences.

3. Who receives information

Information is available only as needed to authorized Kepler College personnel, your participating institution, instructors or administrators, and service providers that support hosting, storage, communications, analytics, payments, identity, security, integrations, and AI features.

We may disclose information when required by law, to protect people or the service, during a business reorganization with appropriate safeguards, or when you direct or consent to disclosure. We do not sell personal information.

4. International processing

Some providers may process information outside Rwanda or your country. We use contractual, access-control, and other appropriate safeguards for international processing where required.

5. Retention and deletion

We retain information only for the period needed for the purposes above, applicable educational and financial records, security, dispute handling, and legal obligations. The Data Retention Policy provides more detail.

Deleting an account removes or de-identifies account-linked information unless a record must be retained. De-identified operational, financial, and audit records may remain.

6. Your rights and choices

• Request access to or a copy of your personal information.
• Correct inaccurate or incomplete information.
• Request deletion, restriction, or objection where applicable.
• Withdraw consent for future processing where consent is the basis.
• Control optional notifications and device permissions in the app or device settings.
• Complain to Rwanda's Data Protection and Privacy Office or another competent authority.

7. Children and young users

Users under 16 require the designated parent or guardian consent process when processing relies on consent. Schools and participating institutions are responsible for providing accurate age and authorization information. See our Child Safety Policy.

8. Security and updates

We use access controls, encryption in transit, monitoring, backups, staff controls, and other organizational and technical safeguards appropriate to the service. No system can guarantee absolute security.

We may update this policy and will publish the new effective date. Material changes will receive additional notice where appropriate.

9. Contact

Send privacy questions or rights requests to iga.africa@keplercollege.ac.rw. We may need to verify your identity before completing a request.