Privacy Policy

Last updated: 24 July 2026

1. Introduction

Elimora ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform at elimora.ke. It complies with the Kenya Data Protection Act, 2019.

2. Data Controller

The data controller is Elimora. Questions may be addressed to support@elimora.ke.

3. Information We Collect

3.1 Information You Provide

Teachers: Full name, National ID number, TSC number, phone number, email address, CV, academic certificates, CBC training certificate, reference contacts, employment history, counties available for work, and referee code-of-conduct notes.

Schools: School name, school type, registration number, contact person name, phone number, email address, location county and town.

All Users: Account email address and password (hashed).

3.2 Information Collected Automatically

IP address, browser type, operating system, referring URLs, page views, and session duration. This data is anonymised where possible.

4. Legal Basis for Processing

We process your data based on:

Consent: You provide data voluntarily when creating a profile or account
Contractual necessity: Data is required to provide the marketplace service
Legal obligation: We may retain data to comply with Kenyan law
Legitimate interests: Verification of TSC status and fraud prevention

5. How We Use Your Information

To create and maintain your account
To verify TSC registration status
To enable schools to search for and contact teachers
To process subscription payments via Paystack
To communicate with you about account and platform updates
To detect and prevent fraud, abuse, or policy violations
To improve our platform and user experience

6. Data Sharing and Disclosure

We share data only as necessary:

With other users: Teacher names, subject combinations, and experience are visible publicly. Contact details are only shown to subscribing schools after explicit unlock.
Payment processing: Paystack Inc. processes payments; we do not store payment card details.
Legal compliance: We may disclose data if required by law or court order.
Service providers: Supabase (database and authentication), Vercel (hosting).

We do not sell personal data to third parties.

7. Data Retention

We retain your data for as long as your account is active and for a reasonable period thereafter (up to 12 months) to comply with legal obligations, resolve disputes, and enforce agreements. You may request deletion at any time.

8. Data Security

We implement appropriate technical and organisational measures, including encryption in transit (TLS), database encryption, and Row-Level Security in Supabase. However, no internet transmission is completely secure. We use Row-Level Security to ensure users can only access their own data.

9. Your Rights Under Kenya's Data Protection Act

You have the right to:

Access your personal data held by us
Rectification of inaccurate or incomplete data
Deletion of your data (subject to legal retention requirements)
Restriction of processing in certain circumstances
Data portability to receive your data in a structured format
Object to processing based on legitimate interests
Withdraw consent at any time where processing is based on consent

To exercise these rights, email support@elimora.ke. We will respond within 30 days as required by law.

10. Cookies

We use essential cookies for authentication and platform functionality. See our Cookie Policy for details.

11. Third-Party Links

The Platform may contain links to external sites (e.g., Paystack, TSC). We are not responsible for their privacy practices.

12. Changes to This Policy

We will notify users of material changes via email or platform notice. Continued use after changes constitutes acceptance.

13. Contact

Data Protection Officer: dpo@elimora.ke
General inquiries: support@elimora.ke