Privacy policy

1. Information We Collect

Information you provide directly:

Name, email address, phone number, and/or WhatsApp number; school name, class level (S1–S6), and subject preferences; account credentials; feedback submitted through UAT forms; questions or messages submitted to the AI tutor.

Information collected automatically:

Device information (browser type, operating system); usage data (pages visited, features used, session duration); IP address and approximate location (country/region level only); error logs and performance data.

Information from schools:

For students enrolled through a school pilot programme, we may receive student names, class information, and teacher contact details from the school's designated contact person.

2. How We Use Your Information

• (a) To provide and personalise AI tutoring responses aligned to your curriculum level
• (b) To create and manage your user account
• (c) To improve the quality and accuracy of our AI model and educational content
• (d) To conduct User Acceptance Testing and gather feedback
• (e) To communicate with you about platform updates and support
• (f) To monitor platform performance and ensure security
• (g) To generate anonymised statistics for reporting to our funders

3. Data Sharing

We do NOT sell, rent, or trade your personal information.

We may share information with:

• Service Providers: Cloud hosting providers (Railway, Vercel, Supabase) that process data on our behalf under strict confidentiality obligations.
• AI Providers: OpenAI for embedding generation and AI model functionality. We do not share personally identifiable information — only anonymised query content.
• Funders: Anonymised and aggregated data may be shared with the Makerere AI Innovation Academy and STI for grant reporting.
• Schools: Usage reports may be shared with your school's designated contact person.

4. Children's Privacy

SIMU is designed for secondary school students, many of whom are under 18. We collect only the minimum information necessary. Parental, guardian, or school consent is required for students under 18. We do not knowingly collect sensitive personal information from any user. Parents or guardians may request access to, correction of, or deletion of their child's data at any time.

5. Data Storage and Security

Your data is stored on secure cloud infrastructure with encryption in transit (HTTPS/TLS) and at rest. We implement access controls, encrypted database connections, regular security reviews, and minimal data collection practices. No method of electronic storage is 100% secure — we cannot guarantee absolute security.

6. Your Rights

Under Uganda's Data Protection and Privacy Act, 2019, you have the right to:

• Access — request a copy of your personal data
• Correction — request correction of inaccurate data
• Deletion — request deletion of your data
• Restriction — limit processing in certain circumstances
• Objection — object to processing for certain purposes
• Withdrawal of Consent — withdraw consent at any time

To exercise these rights, contact patiencesitati99@gmail.com

7. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of significant changes through the platform or by email. You may also lodge a complaint with Uganda's Personal Data Protection Office (PDPO) if you believe your rights have been violated.