Privacy Policy
Last updated: May 3, 2026
1. Who we are
This Privacy Notice is issued by Leonard Otieno Okong'o, trading as "ElimuPath AI" ("we", "us", "our"). We act as the data controller for the personal data described in this notice. You can contact us at hello@elimupath.ai.
2. Personal data we collect
- Account data: name, email address, login credentials.
- Profile and school data: information you provide about your school, students, or programmes when using the service.
- Support data: messages, attachments, and metadata when you contact us.
- Usage and device data: log files, IP address, browser type, pages viewed, and similar telemetry.
- Cookies: essential cookies needed to run the service, and (with your consent) analytics cookies.
Payment card data is collected directly by our reseller, Paddle, and is not stored on our systems.
3. Why we use your data
- To create and operate your account (contract performance).
- To provide, maintain, and improve the service (legitimate interests).
- To prevent fraud and keep the service secure (legitimate interests, legal obligation).
- To respond to your support requests (contract performance / legitimate interests).
- To send service-related and, where permitted, marketing communications (consent or legitimate interests).
- To comply with legal, tax, and accounting obligations.
4. Who we share data with
- Service providers / subprocessors we rely on for hosting, database, analytics, and customer support tooling.
- Paddle.com Market Limited, our Merchant of Record, who processes payments, manages subscriptions, handles tax compliance, and issues invoices.
- Professional advisers such as legal, accounting, and audit providers when reasonably necessary.
- Public authorities where we are required to disclose data by law.
5. International transfers
Some of our service providers may be located outside your country of residence. Where personal data is transferred internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions.
6. Data retention
We keep personal data only for as long as needed to provide the service and to meet our legal, accounting, and reporting obligations. When data is no longer required, we delete or anonymise it.
7. Your rights
Subject to applicable law, you may have the right to access, rectify, erase, restrict, or port your personal data, to object to processing, and to withdraw consent. You may also have the right to lodge a complaint with your local data protection authority. To exercise any of these rights, email hello@elimupath.ai. We aim to respond within one month.
8. Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and least-privilege practices, to protect your personal data.
9. Cookies
We use cookies that are strictly necessary to operate the service (for example, authentication). With your consent, we may also use analytics cookies to understand how the service is used. You can manage cookie preferences through your browser settings.
10. Changes
We may update this notice from time to time. Material changes will be communicated via the service or by email.