Privacy Policy
ZoeziZone mobile app and website. Last updated 18 August 2026.
Draft for legal review. This describes what the software actually does, checked against CYBERVANT LTD's ODPC registration. It has not been reviewed by an advocate. Do not rely on it as legal advice.
Who we are
- Data controller
- CYBERVANT LTD, a private company registered in Kenya
- Postal address
- P.O. Box 0722136702 – 00400, Nairobi, Kenya
- Contact
- cybervant.ke@gmail.com
We are registered with the Office of the Data Protection Commissioner (ODPC) and process personal data under the Data Protection Act, 2019.
ZoeziZone is used by children
Most learners are under 18, and many are under 13. The Act treats a child's data as requiring particular care, and we design to that: a learner's practice history stays on their own device unless a guardian consents to share it.
What we collect
Only what the app needs to work:
- Learner — the name or nickname you enter, grade, class, school, and the answers and progress produced by using the app.
- Parent or guardian — name, mobile number, and email address where you create an account.
- School and teacher — school name, and the name and contact details of the school administrator or class teacher, where a school uses ZoeziZone.
- Device — an identifier generated on first run, so your device can sync its own records and nobody else's.
- Payments — the mobile number used to pay, the amount, and the M-Pesa receipt number. We never see or store your M-Pesa PIN, and we do not store card details.
We do not collect a learner's location, contacts, photos, or microphone or camera data.
Website visits. We count visits to our website on our own servers. There is no tracker, no cookie for this, and nothing is sent to any other company. We record the page visited, the website you arrived from if any, and a short code that lets us tell one visitor from another on the same day only. That code is scrambled with a key that changes every night, so visits on different days cannot be joined up, and it cannot be turned back into your address. We do not store your IP address. Web addresses are stripped of names, sign-in links and identifiers before anything is written down.
App use. We also count how many devices connect to us each day, so we know how many families the app is reaching. This uses the device identifier listed above, which the app already sends when it fetches questions, syncs or collects homework — nothing extra is collected from a child. It is scrambled with the same key that changes every night, so we keep no record of which device did what, and one day cannot be joined to another. We record only that some device connected on a given day: not which subject, not which questions, not which learner. A child practising without a connection is not counted at all, and what they practise still stays on the phone until a guardian allows it to move.
Practice data stays on the device until you allow it to move
A learner's answers and progress are stored on the phone. They are sent to our servers only after a guardian gives consent, which we record with a timestamp, and which you can withdraw at any time in the app under Parent Corner. Where consent has not been given, a school or teacher sees “not reported” rather than a score — never a zero.
Why we process it
- To run the app: showing the right curriculum, marking answers, tracking progress, and choosing what to practise next.
- To let a guardian, and a teacher you have approved, follow a learner's progress.
- To take payment for a subscription, and to give you what you paid for.
- To keep accounts secure — for example, emailing a sign-in code.
We do not sell personal data. We do not use it for advertising, and we do not show advertising to children.
Who else sees it
- Safaricom (M-Pesa) — to process a payment you initiate.
- Our hosting and email providers — to run the service and deliver account emails.
- A school — only the learners a guardian has consented to share, and only with that school.
Your rights
Under the Data Protection Act, 2019 you may ask us to give you a copy of your data, correct it, delete it, or stop processing it, and you may withdraw consent at any time. Write to cybervant.ke@gmail.com and we will respond within the statutory period. If you are not satisfied you may complain to the Office of the Data Protection Commissioner.
How long we keep it
Practice records are kept while the account is in use. Delete a learner profile in the app and its records go with it. Payment records are kept as long as tax and accounting law requires.
Changes
If we change this policy we will update the date above and, for a significant change, tell you in the app.