Privacy Policy

1. Introduction

Dora is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform, in compliance with the Data Protection Act (Kenya, 2019).

2. Information We Collect

• Personal Identifiers: Full name, email address, phone number, and KRA PIN (where applicable).
• Child Data: Age, gender, learning patterns, assessment responses, progress data.
• Technical Data: Device type, browser version, IP address, location (approximate), session duration, activity logs.

3. How We Use Your Information

• To create and manage accounts and child profiles.
• To deliver personalized assessments and learning insights.
• To provide technical support, feedback resolution, and communication.
• To improve the platform through data-driven product enhancement.
• To comply with legal and regulatory obligations.

4. Data Sharing

Dora does not sell your personal data. We may share your data under the following circumstances:

• With vetted third-party service providers (e.g., analytics, hosting, communications).
• When legally required by government or judicial bodies.
• With your explicit consent for referrals or interventions.

5. Data Storage and Security

All personal and sensitive information is encrypted in transit and at rest. Access is role-restricted, and regular security audits are conducted. In the event of a data breach, users will be notified within 72 hours with recommended next steps.

6. Children's Privacy

We only collect children’s data from parents/guardians who have legal authority. Children do not use the platform independently. All child data is handled with enhanced protections and only used to support educational interventions.

7. International Data Transfers

In cases where data may be processed outside Kenya (e.g., via cloud hosting), Dora ensures such data is handled in compliance with applicable data protection laws, using secure and approved transfer mechanisms.

8. Your Rights

You may access, update, correct, or request deletion of your personal data. To exercise your rights, contact us at support@dora.africa. You may also object to certain processing or request data portability where applicable.

9. Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined above or as required by law. Afterward, it is securely deleted or anonymized.

10. Updates to This Policy

We may update this policy from time to time. Any changes will be reflected on this page and, where material, users will be notified via email or in-app notification.

11. Contact

If you have any questions or concerns regarding this policy, please reach out via support@dora.africa.