Privacy Policy

1. Introduction & Scope

This Privacy Policy describes how Milestone Minds Limited collects, uses, protects, and discloses information when you access or use:

• The Milestone Minds Ebooks web platform and digital reader (milestoneminds.co.ke and official domains).
• The Milestone Minds Android Application distributed via the Google Play Store for mobile phones and tablets.
• Our linked learning platform EduNexus (www.joinedunexus.app) and related educational services.

2. Information We Collect

We collect only the minimum data required to facilitate student learning, deliver digital textbooks, process subscription payments, and synchronize 1-year study access across devices:

• Student & Account Information: Student name, email address, password (stored via salted cryptographic hashes), and school/educational grade level (e.g., Grade 7, 8, or 9 CBE).
• Subscription & Transaction Information: Phone number provided for Safaricom Daraja M-Pesa STK Push payments, amount paid (KES 350 per book for a 1-year subscription), transaction timestamps, Safaricom Checkout Request IDs, and M-Pesa receipt reference codes. We never collect, see, or store your M-Pesa secret PIN.
• Educational Reading Progress & Licenses: Subject textbook identifiers subscribed to, chapter bookmark states, and 1-year license verification tokens.
• Technical & Device Information: Device type, operating system version (Android), app version, and diagnostic crash logs necessary to ensure stability and compatibility across Android smartphones and tablets.

3. How We Use Your Information

We use the collected information exclusively for authorized educational and service delivery purposes:

1. Authentication & Single Sign-On: Allowing you to log in with identical credentials across this web application and the Milestone Minds Android App on Google Play.
2. Curriculum Delivery: Granting instant access to interactive CBE curriculum textbooks upon payment verification.
3. Online Reader Synchronization: Synchronizing chapter reading bookmarks and assessments so learners can seamlessly study across web and mobile devices.
4. Payment Processing: Interfacing with the Safaricom Daraja API to trigger Lipa Na M-Pesa STK push prompts and verify subscription fulfillments.
5. Service Improvement & Support: Responding to teacher, school, and student inquiries sent to our support desk.

4. Children’s Privacy & Student Data Protection

Because Milestone Minds Ebooks serves primary and junior secondary school students:

• No Third-Party Advertising: Our applications contain zero third-party commercial advertisements or tracking pixels.
• No Sale of Data: We never sell, lease, trade, or monetize personal data or learning records.
• Parental and Institutional Rights: Parents, legal guardians, and school administrators may review, request modifications to, or request deletion of a student's personal information at any time.
• Legal Compliance: We comply with the Kenya Data Protection Act (2019) and international child safety best practices including COPPA (Children's Online Privacy Protection Act) standards.

5. Third-Party Service Providers

We partner only with reputable, security-certified infrastructure providers to support app operations:

• Google Firebase (Google Cloud Platform): Powers user authentication, session security, and Firestore real-time database synchronization for user profiles and book licenses.
• Safaricom Daraja API: Processes real-time M-Pesa STK push transactions under Safaricom’s secure regulatory banking protocols.
• Google Play Services: Manages Android application installation, updates, and compatibility.
• EduNexus (www.joinedunexus.app): Powers companion AI learning tools and educator development resources.

6. Data Security & Retention

We implement rigorous technical and organizational security controls:

• All web and API data transmissions are encrypted using industry-standard HTTPS / TLS 1.3.
• Database records are stored in secure cloud containers with role-based access rules and strict Firestore security policies.
• Data is retained only as long as the user account remains active or as required by applicable educational auditing and taxation standards.

7. Account Deletion & User Data Rights

In accordance with Google Play Store User Data Policy and the Kenya Data Protection Act (2019), users have full control over their personal data:

• Online Deletion Request Portal: You can submit a deletion request or execute instant account removal at our dedicated compliance portal: https://milestoneminds.co.ke/delete-account.
• Email Deletion Request: You may permanently delete your account and all associated personal data at any time by emailing us at [email protected] with the subject "Milestone Minds Account Deletion". Your account, credentials, and profile records in Firebase will be permanently expunged within 48 to 72 hours.
• Access & Export: You may request a copy of the educational and subscription records associated with your student profile.

8. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect enhancements in our educational features or legal requirements. Updates will be posted on this URL with an updated "Last Reviewed" date.

9. Contact Us

If you have questions, concerns, or privacy inquiries regarding Milestone Minds Ebooks or the Milestone Minds Android App, please contact our designated Data Protection & Academic Compliance team:

• Company Name: Milestone Minds Limited
• Founder / Lead Administrator: Godfrey Ojiambo
• Email: [email protected]
• Location: Nairobi, Kenya
• Website: Milestone Minds Portal