Privacy Policy

Last updated: 2026. Draft for review — not legal advice; have a lawyer review before public launch.

1. Who we are

Inzira ("we", "us") is a mastery-based learning platform offering courses, an AI tutor, adaptive assessments and access to human tutors. This policy explains what personal data we collect, why, and your rights.

2. Data we collect

• Account: name, username, email, password (stored only as a secure hash).
• Learning profile: grade level, country, subjects, and learning preferences.
• Age signal (minimized): we ask only your year of birth — used solely to determine whether you are a minor — and store just the birth year and a "minor" flag. We never collect your full date of birth.
• For minors: a parent/guardian email, used to obtain and record consent.
• Usage & learning data: progress, assessment results, mastery, and AI chat interactions, used to teach and to measure outcomes.
• Payments: handled by our processors (Stripe for cards; a mobile-money provider for Rwanda). We do not store card numbers.

3. Children & guardian consent

Students under 16 must have a parent/guardian approve their account. We create the account in a locked "pending" state and email the guardian a link; the account activates only after the guardian confirms. Guardians may request access to, correction of, or deletion of their child's data at any time. We minimize what we collect about children and do not use children's data for advertising.

4. How we use data

To provide and personalize the learning experience (including tailoring the AI tutor to your mastery), to measure learning outcomes, to process payments, to communicate with you (and guardians), and to keep the service safe.

5. How we protect data

Encryption in transit (HTTPS), encryption at rest, access controls, hashed passwords, and payment tokenization. No system is perfectly secure, but we take reasonable measures and minimize what we collect.

6. Analytics & cookies

We use privacy-respecting analytics to understand how the site is used — how many people visit, which pages, and general location by country — so we can improve it:

• Plausible Analytics: a cookieless, privacy-focused tool. It sets no cookies, does not track you across sites, and does not collect personal data — it reports aggregate metrics only (visits, pages, country-level location, referrer).
• PostHog (when enabled): product analytics to understand feature usage. We configure it conservatively — session recording is disabled, form inputs are masked, we honor your browser's "Do Not Track" setting, and we do not identify minors. It may process your IP address (for coarse location) via our provider.

You can opt out of PostHog by turning on "Do Not Track" in your browser. We do not use analytics for advertising, and we never use children's data for advertising or profiling.

7. Sharing

We share data only with service providers who help us operate (e.g., hosting, email, payment processors, analytics) under their terms, or where required by law. We do not sell personal data.

8. Your rights

Depending on your region (including GDPR), you may access, correct, export, or delete your data, and withdraw consent. Contact us to exercise these rights. Account deletion is available on request (and self-serve where offered).

9. Retention

We keep data while your account is active and as needed to provide the service or meet legal obligations, then delete or anonymize it.

10. Contact

Questions or requests: support@inzira.io.