Privacy Policy
Last updated: May 2026
Short version: We collect the minimum data needed to operate the platform, we never sell it, and you have clear rights over it. The full details are below.
1. Who we are
UPEO Academy is an online learning platform operated by Upeosoft Limited, a company incorporated in Kenya. Our registered address is Nairobi, Kenya.
When this policy refers to "UPEO Academy", "we", "us", or "our", it means Upeosoft Limited and the UPEO Academy platform (upeo.academy).
2. What data we collect
We collect information you provide directly when you:
• Create an account (name, email address, password)
• Complete your profile (username, headline, bio, company, country)
• Enrol in or purchase a course (email, payment reference — we do not store card numbers)
• Contact us or submit a support request
We also collect data automatically as you use the platform:
• Progress data (videos watched, completion status, quiz scores)
• Usage data (pages viewed, actions taken, timestamps)
• Technical data (IP address, browser type, device type) via server logs
• Cookies and similar tracking technologies (see our Cookie Policy)
3. How we use your data
We use your data to:
• Provide, maintain, and improve the platform
• Track your learning progress and issue certificates
• Send transactional emails (account verification, purchase receipts, certificate awards)
• Send optional notifications about new courses (only if you opt in)
• Respond to support requests
• Detect and prevent fraud or abuse
• Comply with legal obligations
We do not sell your personal data to third parties.
4. Legal bases for processing
We process your data under the following legal bases (in line with the Kenya Data Protection Act 2019):
• Contractual necessity — to deliver the services you signed up for
• Legitimate interests — to improve the platform and prevent abuse
• Consent — for optional marketing emails; you can withdraw consent at any time
• Legal obligation — where required by applicable law
5. How we share your data
We share data only with:
• Service providers acting as data processors on our behalf (e.g. hosting, email delivery, payment processing). These providers are contractually bound to handle data only as instructed by us.
• Authorities when required by law, court order, or to protect the rights and safety of our users.
We do not share your data with advertisers or data brokers.
6. Data retention
We keep your account data for as long as your account is active. If you request deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g. payment records for tax purposes, which we keep for 7 years).
Anonymised, aggregated usage data (which cannot identify you) may be retained indefinitely for platform analytics.
7. Your rights
Under the Kenya Data Protection Act and, where applicable, the GDPR, you have the right to:
• Access a copy of the personal data we hold about you
• Correct inaccurate data via your Profile Settings page
• Request deletion of your account and personal data
• Object to or restrict certain processing
• Data portability (receive your data in a machine-readable format)
• Withdraw consent at any time for consent-based processing
To exercise any right, email us at privacy@upeo.academy. We will respond within 30 days.
8. Cookies
We use essential cookies to keep you logged in and maintain your session. We also use analytics cookies to understand how the platform is used. You can manage cookies from your browser settings or read our full Cookie Policy for details.
9. Security
We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. However, no online system is 100% secure. If you believe your account has been compromised, contact us immediately at support@upeo.academy.
10. Children's privacy
UPEO Academy is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has created an account, please contact us and we will delete it promptly.
11. Changes to this policy
We may update this policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice on the platform. The date at the top of this page shows when the policy was last updated.
12. Contact
For privacy-related questions or to exercise your rights, contact our Data Protection Officer at:
Email: privacy@upeo.academy
Address: Upeosoft Limited, Nairobi, Kenya