Legal
Privacy policy
Last updated: August 2026
This Privacy Policy explains how SIMU Educational Technology ("SIMU," "we," "our," or "us") collects, uses, stores, and protects personal information when you use the SIMU platform, website, or related services.
SIMU is committed to handling personal information responsibly and in accordance with Uganda's Data Protection and Privacy Act, 2019 and applicable data protection requirements.
1. Information We Collect
Information you provide:
Depending on how you use SIMU, we may collect information such as your name, email address, phone number or WhatsApp number, school, class level (S1–S6), subject preferences, account details, questions submitted to the AI tutor, and feedback you provide to us.
Information collected when you use SIMU:
We may collect technical and usage information such as your browser or device type, operating system, pages or features accessed, session information, IP address, error logs, and platform performance information.
Information provided by schools:
Where a student uses SIMU through a school programme, the school may provide information necessary to create and manage student accounts, such as the student's name, class, stream, or school affiliation. Schools are expected to provide such information in accordance with applicable data protection requirements.
2. How We Use Your Information
We use personal information only for purposes connected with providing, operating, securing, and improving SIMU. These purposes may include:
- (a) Providing AI tutoring and learning support appropriate to the student's curriculum level
- (b) Creating and managing user accounts
- (c) Personalising the learning experience, where appropriate
- (d) Understanding how students use SIMU and improving the platform
- (e) Conducting user testing, evaluations, and collecting feedback
- (f) Communicating with users, schools, and authorised contacts about the platform and support
- (g) Maintaining platform security, reliability, and performance
- (h) Producing aggregated or de-identified statistics for research, evaluation, and reporting
- (i) Complying with applicable legal and regulatory requirements
3. AI and Third-Party Services
SIMU uses third-party technology providers to operate parts of the platform, including cloud hosting, databases, analytics, communications, and AI services.
Where SIMU uses OpenAI services through its API, information necessary to generate an AI response may be processed by OpenAI. SIMU configures and uses these services in accordance with the applicable service terms and data protection requirements.
We do not intentionally send unnecessary personal information to third-party AI providers. Where technically and reasonably possible, we minimise or remove information that is not needed to provide the requested service.
Third-party providers may process information on our behalf and are expected to maintain appropriate confidentiality and security protections.
4. When We Share Information
We do not sell or rent your personal information.
We may share personal information where necessary to operate SIMU, provide services, comply with the law, or protect the rights and safety of users and the platform.
This may include sharing information with:
- Service providers: companies that provide hosting, databases, communications, analytics, security, or other technical services on our behalf.
- AI and technology providers: third-party providers whose services are required to operate particular SIMU features.
- Schools: where a student is participating through a school programme, authorised school personnel may receive appropriate learning or usage information for educational and safeguarding purposes.
- Funders and programme partners: we may share aggregated, de-identified, or otherwise appropriately limited information for monitoring, evaluation, research, and reporting purposes.
- Authorities: where disclosure is required by applicable law or necessary to respond to a lawful request.
5. Students Under 18
SIMU is designed for secondary school students, including students who are under 18 years of age. We recognise that children and young people require additional care when their personal information is processed.
We aim to collect only information that is reasonably necessary to provide and improve the service. Where SIMU is provided through a school, we work with the school and its designated representatives to support appropriate consent, authorisation, and safeguarding arrangements.
We do not intentionally collect sensitive personal information from students unless there is a specific and lawful reason to do so.
A parent, guardian, student, or authorised school representative may contact us about a student's personal information, including requests concerning access, correction, or deletion, subject to applicable law and any requirements relating to the school programme.
6. Data Storage and Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, alteration, disclosure, loss, or destruction.
Depending on the service involved, these measures may include encrypted connections, access controls, secure authentication, database security measures, logging, and restricted access to personal information.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law.
No internet-based service can guarantee absolute security. If we become aware of a security incident affecting personal information, we will take appropriate steps to investigate, contain, and respond to it in accordance with applicable requirements.
7. Your Rights
Subject to applicable law, you may have rights in relation to your personal information, including the right to:
- Access personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of personal information in appropriate circumstances
- Object to or request restriction of certain processing
- Withdraw consent where processing is based on consent
- Raise a concern or complaint about how your information is handled
To make a privacy request or ask a question about how we handle personal information, contact us at hello@simututor.com
8. Changes to This Policy
We may update this Privacy Policy as SIMU develops, as our services change, or when legal or regulatory requirements change. When we make material changes, we will update the effective date above and, where appropriate, provide additional notice through the platform or other suitable means.
9. Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or the way SIMU handles personal information, please contact us at hello@simututor.com