Privacy Policy
Last updated: July 2025
1. Introduction
MasomoCare ("we", "our", "us") is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and share your data when you use our platform. We comply with the Kenya Data Protection Act, 2019.
2. Information We Collect
Account information: Full name, email address, phone number, role (parent/student/tutor), and country.
Profile information: For tutors - qualifications, experience, subjects, teaching style, and bio. For students - grade level, subjects of interest, date of birth.
Verification documents: National ID, academic certificates, and police clearance certificates (tutors only). These are stored securely and accessed only by our verification team.
Payment information: Transaction history, wallet balances, and payout details. We do not store full card numbers - these are handled by our PCI-compliant payment processors (Paystack/Flutterwave).
Usage data: Pages visited, features used, device information, IP address, and browser type for service improvement and security.
Communications: Messages sent through the platform, support tickets, and feedback.
3. How We Use Your Information
- To create and manage your account
- To match parents/students with suitable tutors
- To process payments and manage escrow
- To verify tutor identity and credentials
- To resolve disputes between users
- To send important notifications about your bookings
- To improve our platform and develop new features
- To prevent fraud and ensure platform security
- To comply with legal obligations
4. Data Sharing
We share your data only in these circumstances:
Between users: Limited profile information is shared between tutors and parents/students to facilitate bookings (e.g., name, subjects, reviews, teaching style).
Payment processors: Transaction data is shared with Paystack and Flutterwave to process payments securely.
Legal requirements: We may disclose information when required by law, court order, or government authority.
We never sell your personal data to advertisers or third-party data brokers.
5. Data Security
We implement industry-standard security measures including:
- Encryption of data at rest (AES-256) and in transit (TLS 1.3)
- Secure password hashing (bcrypt)
- Regular security audits and penetration testing
- Access controls and role-based permissions
- Secure cloud infrastructure with Supabase and verified hosting providers
6. Data Retention
We retain your account data for as long as your account is active. If you delete your account, we remove personal data within 30 days, except where required for legal, tax, or audit purposes (up to 7 years for financial records). Verification documents are retained for the duration of the tutor's active status plus 12 months.
7. Your Rights
Under the Kenya Data Protection Act, you have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to processing of your data
- Data portability (receive your data in a structured format)
- Withdraw consent at any time
To exercise these rights, contact us at privacy@masomocare.com
8. Children's Privacy
Accounts for children under 18 are managed by their parent or guardian. We do not knowingly collect personal information from children without parental consent. Minor student profiles contain only the information necessary for tutoring (name, grade level, subjects).
9. Cookies & Tracking
We use essential cookies for authentication and session management. We use analytics cookies to understand how our platform is used. You can manage cookie preferences through your browser settings. We do not use advertising trackers.
10. Changes to This Policy
We may update this policy periodically. Significant changes will be communicated via email at least 14 days before taking effect. The "Last updated" date at the top reflects the most recent revision.
11. Contact Us
For privacy-related questions or to exercise your data rights, contact our Data Protection Officer at privacy@masomocare.com