1. Information We Collect
Elimu Nova collects only the information necessary to provide our educational services:
- Account information (name, email, role) provided during signup
- Learning data (assignments, grades, study sessions, AI interactions)
- School affiliation data for school-connected accounts
- Payment information processed via Stripe (never stored on our servers)
2. Children's Privacy (COPPA Compliance)
Elimu Nova complies with the Children's Online Privacy Protection Act (COPPA). For student accounts:
- Student accounts are created by parents, school administrators, or teachers
- Parents have full access to view, manage, and delete their children's data
- Parents can delete their child's entire profile and all associated data at any time
- We do not collect any unnecessary personal information from children
- Student data is never shared with third parties or used for advertising
3. GDPR Compliance
For users in the European Union and United Kingdom:
- Right to access — request a copy of your data at any time
- Right to erasure — delete your account and all associated data
- Right to rectification — correct inaccurate personal data
- Data is stored on secure Neon PostgreSQL servers in the AWS us-east-1 region
4. Data Security
We implement industry-standard security measures:
- All data encrypted in transit (HTTPS/TLS) and at rest
- Passwords hashed using bcrypt with 12 salt rounds
- Role-based access control (RBAC) for all API endpoints
- Rate limiting on authentication and AI endpoints
- Automated 72-hour activity log purging
5. Contact
For privacy-related inquiries or data deletion requests, contact us at support@elimunova.com.