At STEM Made Familiar, we are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, and safeguard your data when you use our platform, with a special emphasis on protecting our younger users.

1. Information We Collect (Data Minimization)

We practice "data minimization," meaning we only collect what is strictly necessary to provide our educational services:

• Account Data: A chosen username, email address (optional), phone number, and current academic grade.
• Payment Data: When you subscribe via M-Pesa (Daraja API), we only receive your mobile phone number and the transaction receipt code. We do not collect, store, or process M-Pesa PINs, ID numbers, bank details, or any other sensitive financial information.
• Usage Data: Exam scores, quiz attempts, time spent on notes, and device fingerprints (strictly for anti-cheating during live exams).

2. How We Use Your Information

We use the data we collect solely to:

• Process your M-Pesa subscriptions and manage your access to premium CBC-aligned content.
• Generate anonymous or username-based leaderboards to encourage healthy academic competition.
• Prevent fraud and ensure academic integrity during scheduled, high-stakes exams.
• Send you important, non-marketing updates regarding your subscription or exam schedules.

3. Children's Privacy & Parental Consent

Our platform is designed primarily for Junior Secondary (JSS) and Senior School students. We take the privacy of minors very seriously and have implemented strict safeguards:

• No Sensitive Financial Data: We do not ask children for credit cards, bank accounts, or national ID numbers. Payments are processed exclusively via M-Pesa using only a mobile phone number.
• Parental Authorization: Because M-Pesa STK pushes require a PIN entry on the registered mobile device, a successful transaction inherently serves as parental or guardian consent for the minor's subscription.
• Limited Profiling: We do not build detailed behavioral profiles of children for advertising purposes. Our usage data is strictly limited to academic progress tracking within the app.
• Right to Erasure: Parents or guardians can request the immediate deletion of a minor's account and all associated learning data at any time by contacting us.

4. Data Security & Anti-Cheating

During live exams, our platform monitors tab-switching and fullscreen exits to maintain a fair testing environment. This behavioral data is encrypted, strictly used for academic integrity, and is never sold, rented, or shared with third-party advertisers or data brokers.

5. Your Data Rights

Under the Kenya Data Protection Act, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Update your phone number, grade, or username at any time via your profile settings or by contacting us.
• Deletion: Request the permanent deletion of your account and all associated data.

6. Contact Us

If you have questions about this policy, wish to exercise your data rights, or need to report a privacy concern regarding a minor's account, please contact our Data Protection Officer at info@stemmadefamiliar.co.ke.