Privacy Policy

This policy explains how Naicents Ltd, trading as Kasneb Revisions ("we", "us"), collects, uses, shares, retains and deletes your personal data when you use the Site, and the rights you have under the Data Protection Act, 2019 (Kenya). It is incorporated into our Terms of Use.

WHO WE ARE

Kasneb Revisions is operated by Naicents Ltd, a company registered in Kenya. For data protection purposes, Naicents Ltd is the data controller. You can reach us at hello@rubansi.com or JKUAT Towers, Nairobi 00200, Kenya.

WHAT WE COLLECT

• Account details you provide: your name, email address, and optionally your phone number, town and county.
• Sign-in credentials handled by our authentication provider. If you sign in with Google, we receive your basic Google profile (name and email). We never see your password in readable form.
• Learning activity: your practice attempts, answers, scores and progress records.
• Device and session data used to enforce the device and single-session limits: a browser-generated device identifier, a readable device label (for example "Chrome on Windows"), and sign-in activity.
• Payment metadata for purchases: the transaction reference, amount, channel and status. We do not collect or store your M-Pesa PIN or full card number; those are handled by our payment processor.
• Messages you send us through the support form.

HOW WE USE IT AND OUR LEGAL BASIS

• To create and run your account and deliver the revision materials you purchase (performance of our contract with you).
• To take payment and grant access, and to keep the financial records the law requires us to keep (contract and legal obligation).
• To secure accounts, enforce device and session limits and prevent abuse or sharing (our legitimate interest in protecting the Site).
• To respond to your support requests and send you service messages such as verification, password reset and account-deletion notices.
• To comply with applicable law and respond to lawful requests.

WHO WE SHARE IT WITH

We do not sell your personal data. We share it only with the service providers that make the Site work: our payment processor (Paystack, together with the M-Pesa or card network you use), Google (only if you choose Google sign-in), our cloud hosting, database and authentication provider, and our email delivery provider for the messages described above. Each processes your data on our behalf or under its own terms. We may also disclose data where required by law.

TRANSFERS OUTSIDE KENYA

Some of these providers host or process data on servers outside Kenya. Where that happens we rely on the safeguards permitted by the Data Protection Act, 2019 for cross-border transfers. By using the Site you consent to this processing as described here.

HOW LONG WE KEEP IT

We keep your account and learning data for as long as your account is active. When you delete your account (see below), your personal data is erased after the 30-day window. Payment and transaction records are kept for the period required by Kenyan tax and accounting law, but once your account is deleted they are anonymised so they can no longer be linked to you. Support messages are kept for a reasonable period to handle your query and any follow-up.

DELETING YOUR ACCOUNT

You can ask us to delete your account at any time from your settings page. When you do, your account is deactivated straight away: access to paid materials is withdrawn and your other sessions end. Your account then stays recoverable for 30 days, so you can change your mind and restore it. After 30 days it is permanently deleted along with your personal data, learning history and device records. Payment records we are required by law to keep are anonymised rather than deleted, so they can no longer be linked to you. The final deletion is carried out by our administrator.

YOUR RIGHTS

Under the Data Protection Act, 2019 you have the right to:

• be informed of how your data is used;
• access the personal data we hold about you;
• ask us to correct data that is inaccurate or incomplete;
• ask us to delete your data (the account deletion flow above, or by contacting us);
• object to or ask us to restrict certain processing;
• ask for a copy of your data in a portable form; and
• withdraw any consent you have given, without affecting processing already carried out.

To exercise any of these, use your settings page or contact us. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.

HOW WE PROTECT YOUR DATA

Access to your data is protected by row-level security so that you and our administrators are the only ones who can see it. Data is encrypted in transit, sessions are time-limited, and we apply device limits and sign-in lockouts to reduce the risk of unauthorised access. No system is perfectly secure, but we take reasonable steps appropriate to the sensitivity of the data.

COOKIES AND LOCAL STORAGE

We use browser storage only to keep you signed in and to hold the device identifier that enforces the device limit. We do not use advertising or third-party tracking cookies. See our Cookies Policy for the full detail.

CHILDREN

The Site is intended for users aged 18 and over. We do not knowingly collect personal data from children without the consent the law requires, and we will delete such data promptly if we become aware of it.

CHANGES TO THIS POLICY

We may update this policy from time to time. When we do, we will change the "Last updated" date above, and significant changes may be highlighted on the Site.

CONTACT US

For any privacy question or request, contact Naicents Ltd (trading as Kasneb Revisions) at hello@rubansi.com, or by post at JKUAT Towers, Nairobi 00200, Kenya.