Privacy Policy

This Privacy Policy explains how Infosencia (referred to as “we” or “us”) collects, uses and protects your personal information when you use NurseMasomo. We handle personal data in line with the Kenya Data Protection Act, 2019. By using the Service, you agree to the practices described here.

1. Information we collect

We collect the following categories of information. Account details, which include your phone number, name and your profession or cadre. Study content, which includes the notes, past papers and materials you upload. Activity data, which includes your quizzes, scores and revision progress. Payment records, which include the amount, plan and M-Pesa transaction reference for each payment. Technical data, which includes basic device and log information needed to run the Service securely. We do not collect or store your M-Pesa PIN.

2. How we use your information

We use your information to create and manage your account, to generate questions from the materials you upload, to personalise your revision and track progress, to process payments and confirm access, to provide support, and to keep the Service secure and to improve it over time.

3. Legal basis

We process your data where it is necessary to provide the Service you have requested, where you have given consent, and where we have a legitimate interest in operating and improving the Service. You may withdraw consent at any time, although some features may not work without certain data.

4. How we share information

We do not sell your personal data. We share it only with the service providers that help us run NurseMasomo, and only as far as needed. These include Supabase for hosting and database storage, IntaSend for M-Pesa payment processing, and trusted artificial intelligence providers used to generate study questions. These providers are bound to handle your data securely and to use it only to provide their service to us. We may also disclose information where required by law.

5. Data retention

We keep your information for as long as your account is active and for as long as needed to provide the Service and meet legal or accounting obligations. When data is no longer required, we delete it or remove its connection to you.

6. Security

We use appropriate technical and organisational measures to protect your data, including encrypted connections and restricted access. Payments are processed by IntaSend, and your M-Pesa PIN is entered directly with Safaricom and is never seen or stored by us.

7. Your rights

Under the Kenya Data Protection Act, 2019 you have the right to access the personal data we hold about you, to ask us to correct or delete it, to object to or restrict certain processing, and to withdraw consent. To exercise any of these rights, contact us using the details below.

8. International transfers

Some of our service providers operate outside Kenya. Where your data is transferred abroad, we take reasonable steps to ensure it remains protected to a standard consistent with Kenyan law.

9. Children

The Service is intended for students aged 18 and above. Where a younger student uses the Service with the consent of a parent or guardian, that adult is responsible for the data shared. We do not knowingly collect data from children without appropriate consent.

10. Changes to this policy

We may update this policy from time to time. If we make a material change, we will take reasonable steps to inform you. The effective date at the top of this page shows when the policy was last updated.

11. Contact

For any privacy question or to exercise your rights, contact us at info@infosencia.com.