Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account Information: Name, email address, phone number, and role within the school.
• Student Records: Student names, grade levels, class assignments, attendance records, exam marks, and report cards.
• Financial Data: Fee charges, invoices, and the payment records a school enters. Parents pay school fees directly to their school; Mwangazza does not process those payments. A school's own subscription payment to Mwangazza is taken through a payment provider.
• Usage Data: Login timestamps, feature usage patterns, and device information for improving our service.

2. How We Use Your Information

• To provide and maintain the Mwangazza platform services.
• To manage student enrollment, attendance, grading, and reporting.
• To keep a school's fee records and to take the school's subscription payment to Mwangazza.
• To communicate important updates about your account or school.
• To improve and personalize your experience.

3. Data Storage and Security

Your data is stored in secure, encrypted databases. We implement industry-standard security measures including:

• Encryption in transit (TLS/HTTPS) and, for our primary database and its backups, at rest.
• Role-based access control (RBAC) ensuring users only access data relevant to their role.
• Multi-tenant data isolation. Each school's data is logically separated and inaccessible to other schools.
• Automated dependency vulnerability checks before changes are released.

4. Data Sharing

We do not sell, rent, or trade your personal information. We may share data only in the following circumstances:

• With your school's authorized administrators as part of normal school operations.
• With a payment provider, to take a school's subscription payment to Mwangazza.
• When required by law or to comply with legal obligations.

Our guide videos are hosted by YouTube. Nothing from YouTube loads until you open a guide. When you open one, your browser connects to YouTube to play it, and YouTube's own privacy policy applies to that player.

5. Data Retention

We retain personal data only for as long as necessary to provide the service and meet applicable legal obligations. Some school records may need to be retained for longer where the law requires it.

6. Your Rights

You have the right to:

• Access your personal data stored in the system.
• Request correction of inaccurate information.
• Delete your account and associated data — how to delete your account.
• Withdraw consent for optional data processing.

7. Children's Privacy

Children use Mwangazza only through their school and a parent or guardian. A school keeps its students' records in Mwangazza on the school's behalf, and a school is responsible for having any permission the law requires for those records. A child never creates a Mwangazza account of their own, never chooses a password and never types personal details into the app: a parent sets up the Mwangazza Family app on the child's phone, and what the child sees there is what the school has recorded about that child, shown to the child, with practice questions built into the app. Children of any age may use it, including children under 13, and for them we do the following. The app has no advertising, no advertising identifier and no third-party analytics or advertising code. On a child's phone it has no messages, no chat and no fees, and its camera is used only to read a code on a parent's screen while the phone is set up, with no picture saved or sent. Practice a child does in the app stays on that phone and is erased when the child's access ends. A parent can remove a child's phone at any time. We do not knowingly collect personal information directly from a child except what a parent has set up for them, as section 9 describes. To ask about a child's information, write to us at the address in section 11, or ask the school.

8. The Mwangazza Staff App

The Mwangazza Staff app for Android is for school staff. It sends our servers your name, email address, phone number (only if you sign in with a code sent by phone), your Mwangazza ID and sign-in session, and the school work you do in it: registers, marks and remarks, fee charges and payments the school records, and school messages. If the app stops because of an error, it sends a short report of the phone model, Android version, app version, the screen, the type of error and where in the code it happened; names, phone numbers and messages are removed from it. We do not sell your data, share it for advertising, or put advertising or analytics tools in the app. You can delete your account in the app, or here on our website.

9. The Mwangazza Family App

Who uses it. The Mwangazza Family app for Android is for parents and guardians of students at a school that uses Mwangazza and has opened the app to them, and, on a phone a parent sets up, for the student. A parent signs in to follow the children the school has linked to them.

What a parent sends us. Your name; your email address or phone number, depending on how you sign in; your Mwangazza ID and sign-in sessions; a protected form of your password if you use one, never the password itself; a secret code the app makes for each phone, which keeps your session on that phone; and the messages you send to a teacher or the school's accountant, with which charge a question is about. What the school has recorded about your child is shown to you: attendance, timetable, results and report cards, notices and the calendar, fees and payments the school has recorded, and the school's messages to you. The app saves a report card or a receipt on your phone only if you choose to save or share it, and it hands an event to your phone's own calendar app only when you ask; it never reads your calendar.

A student's phone. Only a parent sets one up, from Me, Log in my child, and confirms it with their own sign-in. The phone then holds a separate student session. It sends us the code it was set up with, a name for the phone and the same kind of secret code as above, and it reads the child's own timetable, attendance, results, notices and calendar. The student's side of the app sends no messages and shows no fees. When a parent removes the phone, or deletes their account, the phone stops working the next time it connects to Mwangazza.

The camera. The camera is used for one thing: to read the parent's code on screen when a phone is being set up, and only when the person taps Scan the code. Each camera image is read on the phone itself, no picture is saved, and no picture is sent anywhere; only the code that was read is sent, as if it had been typed. If the camera is refused, the code can be typed.

No advertising, no tracking tools. The app shows no advertisements, contains no third-party analytics or advertising code, and does not ask for or use an advertising identifier. We do not sell your data or share it for advertising.

Error reports. If the app stops because of an error, it sends a short report: the phone model, Android version, app version, the screen (never an address with a child's or a charge's number in it), the type of error and where in the code it happened. Email addresses, phone numbers, codes and tokens are removed from the one line of text it carries. From a student's phone that line is left out altogether.

Deleting your account. A parent can delete their account in the app, or here on our website. Your Family sign-in ends, your links to children end, and every phone you set up for a child is signed out the next time it connects. The school keeps its own records about its students.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify affected users of significant changes via email or in-app notification.

11. Contact Us

If you have questions about this Privacy Policy or your data, contact us at [email protected].