Privacy Policy

Last updated: May 2026

Short version: We collect the minimum data needed to operate the platform, we never sell it, and you have clear rights over it. The full details are below.

1. Who we are

UPEO Academy is an online learning platform operated by Upeosoft Limited, a company incorporated in Kenya. Our registered address is Nairobi, Kenya. When this policy refers to "UPEO Academy", "we", "us", or "our", it means Upeosoft Limited and the UPEO Academy platform (upeo.academy).

2. What data we collect

We collect information you provide directly when you: • Create an account (name, email address, password) • Complete your profile (username, headline, bio, company, country) • Enrol in or purchase a course (email, payment reference — we do not store card numbers) • Contact us or submit a support request We also collect data automatically as you use the platform: • Progress data (videos watched, completion status, quiz scores) • Usage data (pages viewed, actions taken, timestamps) • Technical data (IP address, browser type, device type) via server logs • Cookies and similar tracking technologies (see our Cookie Policy)

3. How we use your data

We use your data to: • Provide, maintain, and improve the platform • Track your learning progress and issue certificates • Send transactional emails (account verification, purchase receipts, certificate awards) • Send optional notifications about new courses (only if you opt in) • Respond to support requests • Detect and prevent fraud or abuse • Comply with legal obligations We do not sell your personal data to third parties.

4. Legal bases for processing

We process your data under the following legal bases (in line with the Kenya Data Protection Act 2019): • Contractual necessity — to deliver the services you signed up for • Legitimate interests — to improve the platform and prevent abuse • Consent — for optional marketing emails; you can withdraw consent at any time • Legal obligation — where required by applicable law

5. How we share your data

We share data only with: • Service providers acting as data processors on our behalf (e.g. hosting, email delivery, payment processing). These providers are contractually bound to handle data only as instructed by us. • Authorities when required by law, court order, or to protect the rights and safety of our users. We do not share your data with advertisers or data brokers.

6. Data retention

We keep your account data for as long as your account is active. If you request deletion, we will delete or anonymise your personal data within 30 days, except where we are required to retain it by law (e.g. payment records for tax purposes, which we keep for 7 years). Anonymised, aggregated usage data (which cannot identify you) may be retained indefinitely for platform analytics.

7. Your rights

Under the Kenya Data Protection Act and, where applicable, the GDPR, you have the right to: • Access a copy of the personal data we hold about you • Correct inaccurate data via your Profile Settings page • Request deletion of your account and personal data • Object to or restrict certain processing • Data portability (receive your data in a machine-readable format) • Withdraw consent at any time for consent-based processing To exercise any right, email us at privacy@upeo.academy. We will respond within 30 days.

8. Cookies

We use essential cookies to keep you logged in and maintain your session. We also use analytics cookies to understand how the platform is used. You can manage cookies from your browser settings or read our full Cookie Policy for details.

9. Security

We implement industry-standard security measures including HTTPS encryption, hashed passwords, and access controls. However, no online system is 100% secure. If you believe your account has been compromised, contact us immediately at support@upeo.academy.

10. Children's privacy

UPEO Academy is intended for users aged 16 and above. We do not knowingly collect data from children under 16. If you believe a child has created an account, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. When we make significant changes, we will notify you by email or by displaying a notice on the platform. The date at the top of this page shows when the policy was last updated.

12. Contact

For privacy-related questions or to exercise your rights, contact our Data Protection Officer at: Email: privacy@upeo.academy Address: Upeosoft Limited, Nairobi, Kenya