Privacy Policy

Introduction

TeachTrack ("we," "us," "our," or "Company") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

Please read this privacy policy carefully. If you do not agree with our policies and practices, please do not use our services. By using TeachTrack, you agree to this Privacy Policy.

Information We Collect

Personal Information

We collect information you provide directly:

• Email address and password
• Full name, phone number, and school affiliation
• Grade level, subject, and teaching experience
• TSC (Teachers Service Commission) number (for Kenyan teachers)
• Payment information (processed securely through M-Pesa/Stripe)
• Profile picture and other account customization data

Usage Information

We automatically collect information about your interactions:

• IP address and device information
• Browser type and operating system
• Pages visited and features used
• Login and activity timestamps
• Links clicked within our service
• Search queries and preferences

How We Use Your Information

We use collected information for:

• Providing and maintaining TeachTrack services
• Processing payments and handling transactions
• Sending transactional emails (verification, password reset, receipts)
• Personalizing your experience and improving features
• Detecting and preventing fraud or security issues
• Complying with legal obligations
• Sending marketing communications (with your consent)
• Analytics and understanding usage patterns

Data Security

We implement comprehensive security measures to protect your data:

• HTTPS/TLS encryption for all data in transit
• Passwords hashed with industry-standard algorithms (bcrypt)
• Secure database access controls and firewalls
• Regular security audits and vulnerability assessments
• Access restricted to authorized personnel only
• Brute-force protection and rate limiting
• Session management with secure token handling

Note: While we employ security best practices, no system is 100% secure. We cannot guarantee absolute security of your data.

Third-Party Services

We use third-party services that may collect information about you:

• Google OAuth: For secure authentication and account creation
• M-Pesa & Stripe: For payment processing (PCI-DSS compliant)
• Cloudinary: For secure file storage and delivery
• Redis: For session and cache management
• Analytics: To understand usage and improve services

These services have their own privacy policies. We encourage you to review them.

Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update or correct inaccurate information
• Deletion: Request deletion of your account and data (subject to legal requirements)
• Export: Receive your data in a portable format
• Opt-Out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw consent for data processing at any time

To exercise these rights, contact us at teachtrack26@gmail.com

Data Retention

• Active accounts: Data retained for the duration of account use
• Deleted accounts: Data retained for 30 days before permanent deletion
• Legal compliance: Some data retained for legal/tax requirements
• Backups: May be retained for up to 90 days for disaster recovery

International Data Transfers

Your information may be transferred to, stored in, and processed in countries other than your country of residence. These countries may have data protection laws that differ from your home country. By using TeachTrack, you consent to such transfers.

Children's Privacy

TeachTrack is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted here with an updated "Last updated" date. Your continued use of TeachTrack constitutes acceptance of the updated policy.