Privacy Policy

This Privacy Policy explains how MUIAA Ltd, trading as SkillChain ("SkillChain", "we", "us"), collects, uses, shares, and protects information when you use our website, APIs, and related services (the "Service"). It applies to students, instructors, affiliates, and any other visitor to SkillChain. It should be read together with our Terms of Service.

MUIAA Ltd is the data controller responsible for your information under this policy. We are registered as a data controller and data processor in Kenya, and we design our data practices to meet the requirements of the Kenya Data Protection Act, 2019, and — for learners and partners connecting from the EU — the EU General Data Protection Regulation (GDPR).

• Account & profile — name, email, password (stored as a salted hash), profile bio, avatar, locale, timezone, and any social links you add.
• Course activity — enrollments, lesson progress, quiz and assignment submissions, coding-exercise attempts, reviews, and discussion posts.
• Live sessions — registration and attendance records, and — only for instructors who connect one — an encrypted OAuth token for your Zoom or Google Meet account, used solely to create and manage sessions you schedule.
• Payments — order and transaction records (amount, currency, status, payment method type). Full card numbers and mobile-money PINs are handled by our payment processors and never touch our servers.
• Support — the content of support tickets and messages you send us.
• Device & usage data —IP address, browser type, and pages visited, collected automatically to keep the Service secure and to understand how it's used.
• Cookies & local storage — see Section 6.

• Operate and maintain your account, and deliver course content and certificates.
• Process payments, payouts, coupons, and affiliate commissions.
• Send transactional emails and notifications (enrollment, grading, live-session reminders, support replies).
• Provide AI-tutor responses, summaries, and grading suggestions.
• Maintain audit logs of access-denied and administrative actions for security and accountability.
• Detect and prevent fraud, abuse, and violations of our Terms.
• Comply with legal obligations, including tax and consumer-protection law.

We do not sell your personal data to third parties.

Where the GDPR or the Kenya Data Protection Act applies, we rely on one or more of the following bases: performance of a contract with you (running your account and delivering courses you enrolled in), your consent (for example, optional marketing communications or connecting a conferencing account), our legitimate interests (security, fraud prevention, improving the Service), and compliance with a legal obligation (such as retaining financial records).

We use cookies and browser local storage to keep you signed in, remember your theme and cart, and understand aggregate usage of the Service. You can decline non-essential storage from the cookie banner shown on your first visit; essential storage needed to keep you logged in and operate the Service cannot be disabled without affecting functionality. You can also clear cookies and local storage at any time through your browser settings.

We share information only where necessary to operate the Service:

• Payment processors — Stripe, PayPal, Flutterwave, Paystack, and M-Pesa, to process payments and payouts.
• Conferencing providers — Zoom and Google Meet, only for live sessions you register for or host.
• Communications providers — email and SMS delivery services, to send notifications you're entitled to receive.
• Instructors —your name and submitted work, limited to courses you're enrolled in, so they can grade and respond to you.
• Legal & safety — where required by law, regulation, or a valid legal process, or to protect the rights and safety of SkillChain, our users, or the public.

We do not sell or rent your personal data.

We use industry-standard safeguards to protect your data, including encryption of sensitive credentials such as conferencing OAuth tokens, access controls limiting who on our team can view personal data, and audit logging of sensitive actions. No method of transmission or storage is 100% secure, but we work to protect your information and to respond quickly if something goes wrong.

SkillChain is based in Kenya, and some of our processors and partners — including diaspora and international partnerships — operate outside Kenya, including in the EU and the US. Where we transfer personal data internationally, we take steps consistent with the Kenya Data Protection Act and, where applicable, GDPR safeguards for cross-border transfers.

We retain your information for as long as your account is active and as needed to provide the Service, plus any additional period required to meet legal, tax, or accounting obligations, resolve disputes, and enforce our agreements. Certificate records are retained indefinitely so verification links continue to work after you close your account.

Subject to applicable law, you have the right to access the personal data we hold about you, correct inaccurate data, request deletion, object to or restrict certain processing, and receive a copy of your data in a portable format. You can update most profile information directly from your account settings, or contact us at contact@skillchain.com to exercise these rights. If you're not satisfied with our response, you may lodge a complaint with Kenya's Office of the Data Protection Commissioner (ODPC) or, if the GDPR applies to you, your local data protection authority.

SkillChain is not directed at children under 16. If you are between 16 and the age of majority in your jurisdiction, you may only use the Service with a parent or guardian's consent. If we learn we've collected personal data from a child without appropriate consent, we will delete it.

We may update this Privacy Policy from time to time. If a change is material, we'll notify you by email or an in-app notice before it takes effect. The "Last updated" date at the top of this page reflects the most recent revision.

For privacy questions, data requests, or to reach our data protection contact:

MUIAA Ltd, trading as SkillChain
Nairobi, Kenya
contact@skillchain.com
+254 718 540 760