Privacy Policy

Ustadi-ai runs Ustadi at ustadi-ai.com, a teaching assistant for university lecturers in Kenya. For the personal data described here we are the data controller. You can reach us at support@ustadi-ai.com.

Only what we need to run Ustadi for you: your account details from signing in, what you add to and create in Ustadi, and the records of your plan and payments. We never see your card or M-Pesa details.

• To run the tools you ask for, grounded in the materials you attach.
• To run student rooms for the lecturer who created them, including the insights report and quiz results.
• To keep your history, apply your plan and its limits, and process payments.
• To keep Ustadi secure, fix problems, and answer your support requests.

We do not sell personal data, and we do not use your materials or your students' messages for advertising.

The Data Protection Act asks us to name our reasons. They are:

• to provide the service you signed up for or joined, under our agreement with you;
• our legitimate interest in keeping Ustadi secure, preventing abuse, and fixing problems;
• your consent, where we ask for it. You can withdraw consent at any time.

We use trusted service providers to run Ustadi, for example to sign you in, store your work, draft responses, and take payments. They may use your data only to provide these services to us, under data protection terms. Some of them process data outside Kenya; where they do, we rely on safeguards for cross-border transfers, as the Data Protection Act requires.

For each student who joins a room we keep the name and registration number they enter, their messages to the room tutor and in the class chat, and their quiz answers. We use these only to run that room.

A room is set up by a lecturer, who decides which documents its tutor uses. The lecturer can see who joined, read their conversations with the tutor, and see their quiz answers and results. Messages in the class chat are also seen by the other students in the room. The insights report summarises the class's common questions without naming students.

Lecturers should tell their students that the room is run on Ustadi and link to this policy.

Drafts, tutor replies, and feedback in Ustadi are produced by AI to help the lecturer, who reviews them and makes the decisions. No decision with legal or similarly significant effect is made about anyone by automated means alone. If you have questions about how AI is used, or want a person to look at something, write to support@ustadi-ai.com.

We use privacy-friendly site analytics to count visits and see which pages are used. It sets no cookies and builds no personal profile of you. Signing in uses only what is needed to keep you signed in.

We keep your account data, documents, drafts, and rooms while your account is active. You can delete individual drafts, documents, and rooms at any time. If you ask us to close your account, we delete its data within 30 days, except payment records we must keep for tax and accounting.

Under the Kenya Data Protection Act, 2019, you may:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, or object to how we process it;
• ask for your data in a portable format;
• complain to the Office of the Data Protection Commissioner.

Write to support@ustadi-ai.com from your account's email address. Students can make the same requests about their room data through the lecturer or directly to us.

Data travels over encrypted connections, and your work can only be reached by signing in to your account. No system is perfectly secure; if a breach affects your data we will tell you and the Data Protection Commissioner as the law requires.

If we change this policy we will update the date above, and tell you by email or in the app before significant changes take effect.