Privacy Notice

1. Who we are

Miinsat Academy is operated by ABDULLAHI AHMED ALI. For the purposes of data protection law, ABDULLAHI AHMED ALI is the data controller — the person responsible for deciding how your personal data is used.

2. What data we collect

• Account data: your name, email address, and login credentials.
• Contact data: your phone number (for example when you request a course or pay via M-Pesa) and messages you send us.
• Learning data: your course enrollments, lesson progress, quiz answers and results, and certificates.
• Usage data: basic technical information such as your IP address, device and browser type, and how you use the site.

Payment card details are collected and processed directly by Paddle (our Merchant of Record) — we never see or store your card numbers.

3. Why we use your data (and legal basis)

• To provide the service — creating your account, giving you course access, tracking your progress, and issuing certificates (performance of our contract with you).
• Customer support — responding to your questions and requests (legitimate interests / contract).
• Security and fraud prevention — protecting accounts and payments (legitimate interests / legal obligation).
• Product improvement — understanding how the service is used so we can improve it (legitimate interests).
• Marketing — only with your consent, which you can withdraw at any time.

4. Who we share data with

• Service providers that help us run the service (hosting, database, and analytics providers).
• Paddle, our Merchant of Record, for the sale of courses, subscription management, payments, tax compliance, and invoicing.
• Professional advisers (legal, accounting) where needed.
• Authorities where we are required to do so by law.

We do not sell your personal data to anyone.

5. International transfers

Some of our service providers process data outside Kenya. Where data is transferred internationally, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

6. How long we keep your data

We keep your data for as long as your account is active and as needed to provide the service, meet legal obligations (such as tax records), and resolve disputes. When data is no longer needed, it is deleted or anonymised.

7. Your rights

Depending on your country's law, you may have the right to: access your data, correct it, request its deletion, restrict or object to processing, request a portable copy, withdraw consent, and complain to a data protection authority. To exercise any of these rights, contact us on WhatsApp at +254 722 718 028. We respond within one month.

8. Security

We use appropriate technical and organisational measures to protect your data, including encryption in transit, access controls, and row-level security in our database.

9. Cookies

We use only essential cookies needed to keep you signed in and make the site work. We do not use advertising or marketing cookies. You can control cookies through your browser settings, but disabling essential cookies may prevent sign-in.

10. Changes

We may update this notice from time to time. The latest version is always on this page, with the date shown at the top.