Privacy Policy

Last Updated: January 2026

1. Introduction

Kurasa ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Name and email address
• Phone number
• Organization name and details
• Password (encrypted)

2.2 Customer Data

You provide customer information including:

• Phone numbers
• Names and contact details
• Message content and conversation history
• Opt-in/opt-out preferences

2.3 Usage Data

We automatically collect:

• IP address and device information
• Browser type and version
• Usage patterns and feature interactions
• Message delivery statistics

2.4 Payment Information

Payment data is processed by third-party providers (M-PESA, Paystack). We store only transaction references, not full payment details.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the Service
• Process your transactions
• Send service-related communications
• Improve and optimize the Service
• Provide customer support
• Detect and prevent fraud
• Comply with legal obligations

4. Data Sharing and Disclosure

We may share your information with:

• Service Providers: WhatsApp (Meta), payment processors, cloud hosting providers
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with mergers or acquisitions

We do not sell your personal information to third parties.

5. Data Security

We implement industry-standard security measures including:

• Encryption of data in transit and at rest
• Secure authentication with JWT tokens
• Regular security audits
• Access controls and monitoring
• Encrypted storage of sensitive credentials

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your data at any time, subject to legal retention requirements.

7. Your Rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Export your data
• Opt-out of marketing communications
• Withdraw consent

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain your session
• Remember your preferences
• Analyze usage patterns
• Improve user experience

You can control cookies through your browser settings.

9. Third-Party Services

Our Service integrates with:

• WhatsApp Business API: Subject to Meta's privacy policy
• OpenAI: For AI-powered features, subject to OpenAI's privacy policy
• Payment Processors: M-PESA and Paystack, subject to their respective policies

10. International Data Transfers

Your data may be transferred to and processed in countries other than Kenya. We ensure appropriate safeguards are in place for such transfers.

11. Children's Privacy

Our Service is not intended for users under 18 years of age. We do not knowingly collect information from children.

12. Changes to Privacy Policy

We may update this Privacy Policy periodically. We will notify you of significant changes via email or through the Service.

13. Contact Us

For privacy-related questions or to exercise your rights, contact us at:

Email: info@mykurasa.com
Phone: +254 20 8000 208
Address: 5th Floor, SUS Center, Keri Rd, Madaraka, Nairobi, Kenya

14. Data Protection Officer

For data protection inquiries, contact our Data Protection Officer at dpo@mykurasa.com