Privacy Policy
Last updated: June 2026
1Introduction
Skykids Africa ("we", "our", "us") is committed to protecting the privacy and personal data of our students, parents, guardians, and website visitors. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform at skykids.co.ke and our educational services.
We comply with the Kenya Data Protection Act, 2019 (DPA) administered by the Office of the Data Protection Commissioner (ODPC). We also align our practices with international frameworks including the EU General Data Protection Regulation (GDPR), the US Children's Online Privacy Protection Act (COPPA), and other applicable data protection laws in jurisdictions where our students reside.
Skykids Africa serves students internationally. Regardless of where you are located, we apply the same high standards of data protection to all users.
2Information We Collect
Personal Information: Full name, email address, phone number, date of birth, age, gender, country of residence, nationality, and guardian/parent contact details.
Educational Data: Course enrollments, assignment submissions, grades, attendance records, learning progress, coding projects created on our platform, teacher feedback reports, and certificates earned.
Technical Data: IP address, browser type and version, device information, operating system, session duration, pages visited, and cookies for platform functionality and analytics.
Payment Information: Transaction records, M-Pesa confirmation codes, and payment timestamps processed through our payment partners. We do not store credit/debit card numbers directly.
AI-Generated Data: When students use AI-powered features on our platform (such as AI code suggestions, chatbot interactions, or AI-assisted learning tools), we may collect prompts, responses, and interaction logs to improve our educational services. This data is processed in accordance with this policy and is never used to train third-party AI models without consent.
Communication Data: Messages sent through our platform, support tickets, and feedback provided.
3How We Use Your Information
We process your personal data for the following purposes:
• To provide and personalise our educational services
• To communicate with parents/guardians about their child's progress
• To process payments and manage accounts
• To improve our curriculum, platform, and AI-powered learning tools
• To ensure child safety and platform security
• To send important service updates, class schedules, and newsletters
• To comply with legal obligations under Kenyan law and international regulations
• To generate anonymised analytics for educational research
• To facilitate teacher assignment and scheduling
• To issue certificates and maintain academic records
Legal Basis for Processing (under Kenya DPA and GDPR):
• Consent (provided during registration)
• Performance of a contract (delivery of educational services)
• Legitimate interests (platform security, service improvement)
• Legal obligation (compliance with Kenyan education and child protection laws)
4Data Sharing
We do not sell, trade, or rent personal information to third parties. We may share data with:
• Teachers: Limited student information necessary for instruction (name, age, progress, attendance)
• Payment processors: For transaction processing only
• Cloud service providers: For secure data hosting in compliant data centres
• AI service providers: For AI-powered educational features (data is processed but not stored for third-party model training)
• Communication tools: For live class delivery and notifications
• Legal authorities: When required by Kenyan law, court order, or to protect child safety
International Data Transfers: As we serve students globally, data may be processed in jurisdictions outside Kenya. We ensure appropriate safeguards are in place, including data processing agreements with all service providers that meet the requirements of the Kenya DPA and GDPR.
5Children's Privacy
We take special care with data belonging to children under 18. As an educational platform primarily serving minors, child data protection is central to our operations.
Parental Consent: We require verifiable parental/guardian consent for student registration. No child under 18 can create an account without guardian approval.
Minimal Collection: We collect only information necessary for educational service delivery.
No Behavioural Advertising: We never use children's data for advertising, profiling, or behavioural targeting.
AI Interactions: AI features used by children are designed with safety filters. AI interactions involving minors are subject to enhanced monitoring and content filtering.
Parents and guardians can at any time:
• Access their child's personal data
• Request correction or deletion of their child's data
• Withdraw consent for data processing
• Download a copy of all stored data (data portability)
• Restrict processing of their child's data
• Object to specific uses of their child's data
Contact us at skykidsafrica@gmail.com to exercise these rights. We respond within 30 days as required by the Kenya DPA.
6Data Retention & Security
We retain personal data only as long as necessary for educational purposes or as required by law:
• Active student records: Duration of enrollment
• Post-enrollment records: 2 years after departure (for certificate verification and reference requests)
• Payment records: 7 years (as required by Kenya Revenue Authority)
• Communication logs: 1 year
• AI interaction logs: 6 months
• Analytics data: 12 months (anonymised)
Security Measures:
• Encryption in transit (HTTPS/TLS 1.3)
• Encryption at rest (AES-256)
• Firebase Security Rules restricting data access by role
• Regular security audits and penetration testing
• Access controls (role-based: admin, teacher, student, guardian)
• Secure authentication with email verification
• Automatic session expiry after inactivity
• Regular backups with encrypted storage
In the event of a data breach, we will notify affected users and the Office of the Data Protection Commissioner within 72 hours as required by the Kenya DPA.
7Your Rights
Under the Kenya Data Protection Act, 2019 and (where applicable) the GDPR, you have the right to:
• Access: Request a copy of all personal data we hold about you
• Rectification: Correct inaccurate or incomplete information
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Data Portability: Receive your data in a machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw previously given consent at any time
• Automated Decisions: Not be subject to decisions based solely on automated processing (including AI profiling)
How to Exercise Your Rights:
Email skykidsafrica@gmail.com with your request. We will verify your identity and respond within 30 days.
Complaints:
If unsatisfied with our response, you may lodge a complaint with:
• Office of the Data Protection Commissioner, Kenya (www.odpc.go.ke)
• For EU residents: Your local Data Protection Authority
• For other jurisdictions: The relevant data protection regulator in your country
8Contact Us
For privacy inquiries or to exercise your data rights:
Email: skykidsafrica@gmail.com
Phone: +254 735 846 076
Address: Nairobi, Kenya