Introduction
At CBC Pathways (cbcpathways.org), we provide AI-driven career guidance for Kenyan CBC students, helping them explore pathways like STEM, Social Sciences, and Arts & Sports through aptitude tests and personalized advice. This Privacy Policy explains how we collect, use, and protect your data, and how we share anonymized, aggregated data with stakeholders like government officials, principals, and teachers to support educational planning.
We comply with the Kenya Data Protection Act 2019, GDPR for international users, and COPPA for minors. By using our website or app ("Service"), you agree to this policy.
What Data We Collect
Personal Data
We collect the following to deliver and improve our Service:
- Contact Info: Name, email, phone number.
- Demographics: Age, gender, city/county (optional).
- Education Data: School, grade, aptitude test responses (e.g., career interests).
- Family Background: Parental occupation, socioeconomic status (optional, with consent).
- Payment Data: Transaction details via Instasend (e.g., for premium features).
- Media: Photos/videos for avatars via D-ID (with consent).
- Chat Data: Interactions with our Dialogflow chatbot for career queries.
Usage Data
Automatically collected data includes:
- Device Info: IP address, browser, device type.
- Interactions: Pages visited, test completions, time spent.
- Location: Approximate location (with consent) for regional career advice.
Third-Party Logins
Logging in via Google or other services may provide us with your name, email, or profile picture, used per this policy.
Cookies
We use cookies for functionality and analytics (e.g., Firebase Analytics):
- Necessary Cookies: For login and site features.
- Analytics Cookies: To track usage trends.
Manage cookies via our Cookies Policy or browser settings.
How We Use Your Data
We use your data to:
- Provide personalized career guidance based on aptitude tests.
- Improve our AI (via Google Cloud, Dialogflow) for better recommendations.
- Create anonymized reports for stakeholders (e.g., career trend insights).
- Process payments securely via Instasend.
- Generate avatars via D-ID for interactive features.
- Send updates or career tips (with opt-out).
- Monitor and secure our Service.
Sharing Your Data
We share only anonymized, aggregated data with:
- Government Officials: For policy-making (e.g., demand for STEM careers).
- Principals/Teachers: To inform curriculum or student support (e.g., aggregated test results).
- Other Stakeholders: For educational research, never including personal details.
We also share data with:
- Service Providers: D-ID, Firebase, Dialogflow, Google Cloud, and Instasend, under strict data protection agreements.
- Legal Authorities: If required by law (e.g., court orders).
- Business Transfers: During mergers, with user notice.
We never share personal data with stakeholders without consent and do not sell your data.
Data Retention
We keep data only as needed:
- Personal Data: Until account deletion or 2 years of inactivity.
- Payment Data: As required by Instasend and tax laws (typically 7 years).
- Usage Data: Up to 1 year for analytics.
Data is deleted securely per Kenyan law.
Your Data Rights
You can:
- Access or correct your data via account settings.
- Request data deletion or restrict processing.
- Receive your data in a portable format.
- Object to marketing or certain data uses.
- Dispute payments via Instasend support.
Contact us at info@cbcpathways.org to exercise these rights (response within 30 days).
Data Security
We protect your data with:
- Encryption: Via Firebase and Google Cloud (in transit and at rest).
- PCI-DSS Compliance: For Instasend payments.
- Access Controls: Limited to authorized staff.
- Audits: Regular security checks.
No system is 100% secure; report breaches to us immediately.
Children’s Privacy
Our Service is for users 13+. For those under 16, we require parental consent per COPPA and Kenyan law. Parents can review or delete their child’s data at info@cbcpathways.org. We delete unconsented data from users under 13 promptly.
Third-Party Links
Links to D-ID, Google, or Instasend are not under our control. Review their privacy policies before sharing data.
Policy Updates
We may update this policy, notifying you via email or our website 7 days before changes. Check here for the latest version.
Reach us at: