Privacy Policy

1. Data We Collect

To provide our educational services and comply with the Kenya Data Protection Act 2019, NurseFiti collects the following personal data:

• Student Data: Names, email addresses, phone numbers, nursing school/institution, course details, exam dates, and payment transaction records.
• Tutor Data: Names, email addresses, phone numbers, NCK license numbers, professional certificates, ID information, CVs, and professional qualifications.
• Usage Data: Practice answers, mock exam scores, and performance metrics to personalise the study experience.

2. How We Use Your Data

Your data is collected and processed solely to provide the NurseFiti service. This includes personalised study recommendations, progress tracking, verifying tutor credentials, and processing M-Pesa payments. We do not sell your personal data to third parties.

3. Secure Storage & Access Control

Your data is stored securely on encrypted databases with strict Row-Level Security (RLS) policies. All data is transmitted via HTTPS.

• Confidential Documents: Sensitive documents such as NCK licenses, IDs, and professional certificates are stored in private, non-public storage buckets.
• Access Control: Only authorized members of the NurseFiti admin verification team have access to view these confidential documents for the sole purpose of identity and credential verification. These documents are never exposed publicly.

4. Tutor Anonymity & Privacy

Under the Data Protection Act 2019, and to protect the privacy and professional standing of tutors—including those employed by the Government of Kenya or other institutions—NurseFiti provides an anonymity feature. Tutors may opt to use a pseudonym (pseudo name) when interacting with students on the platform. While NurseFiti internally verifies and stores the tutor's true credentials securely for quality assurance, their real identity remains strictly confidential and is not disclosed to students or the public, safeguarding them from potential conflicts of interest.

5. Data Retention Policy

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including satisfying any legal, accounting, or reporting requirements. Educational performance data may be anonymized and aggregated for statistical analysis after account deletion.

6. Your Rights & Deletion Requests

Under the Data Protection Act 2019, you have the right to access, correct, or request the deletion of your personal data. You can request the complete deletion of your account and all associated identifiable data at any time by emailing danotyanga@gmail.com. We process deletion requests within 30 days.

7. Contact

For privacy-related questions or data requests, email our Data Protection Officer at danotyanga@gmail.com