Learnix Technologies ("Learnix", "we", "us") runs the online learning platform at https://learnixsoftwares.co.ke. This policy explains what personal data we collect, why, how we protect it and the rights you have under Kenya's Data Protection Act, 2019. We are the data controller for the information described here.
1. What we collect
- Account details: your name and email address. Learnix has no passwords: you sign in with a one-time code we email you, or with Google. If you use Google, we receive your name, email address and a Google account ID — never your Google password.
- Consent records: the date you accepted these terms, and whether you want reminder emails.
- Payment details: the M-Pesa phone number you pay from, the amount, date and M-Pesa receipt number. We never see or store your M-Pesa PIN.
- Learning activity: courses you enrol in, lessons completed, quiz answers, XP, streaks, certificates, your daily study goal and reminder time.
- Messages you send us: contact-form messages, live-training requests, project submissions and questions you type to the Learnix Tutor and site assistant.
- Technical data: IP address, browser type and basic logs needed to keep the site secure and working.
2. Why we use it (and our lawful basis)
- To provide the service you signed up for (contract): your account, lessons, progress, certificates and Learnix Pro access.
- To process payments (contract and legal obligation): confirming M-Pesa payments, issuing receipts and keeping financial records required by Kenyan tax law.
- To send service emails (contract): welcome, payment receipts and subscription-expiry notices.
- To send learning reminders and weekly summaries (consent): you can turn these off at any time from the link in each email or in your profile.
- To keep Learnix safe and improve it (legitimate interest): preventing fraud and abuse, fixing errors and understanding which lessons need improving.
We do not sell your personal data, and we do not use it for advertising by third parties.
3. Who we share it with
- Safaricom (M-Pesa) — to process your payment. Safaricom handles your payment under its own privacy terms.
- Google — only if you choose "Continue with Google", to confirm who you are.
- Our hosting and email providers — the servers that run the website and send our emails. They process data only on our instructions.
- Authorities — only when required by Kenyan law or a valid court order.
Anyone who checks a certificate number on our verification page sees the certificate holder's name, course and date — that is the purpose of a verifiable certificate.
4. How long we keep it
- Account and learning data: while your account is open. When you delete your account (Profile → Delete account) we delete it, except as below.
- Payment records: up to 7 years, as required for tax and accounting.
- Server logs: normally no longer than 90 days.
5. How we protect it
The site uses encrypted connections (HTTPS), passwords are hashed, access to the admin area is restricted and logged, and we only collect what we need. No system is perfectly secure; if a breach affecting your data occurs, we will notify you and the Office of the Data Protection Commissioner as the law requires.
6. Cookies and local storage
We only use cookies that are essential for the site to work. We do not use advertising, tracking or third-party analytics cookies.
- learnix_session — keeps you signed in while you use the site.
- remember_web_… — keeps you signed in on this device until you log out (so you don't have to sign in every day).
- XSRF-TOKEN — protects forms from being submitted by other websites.
- learnix_cookies — remembers that you have seen this cookie notice.
Your browser's local storage also remembers preferences such as light/dark mode and whether you closed the "install app" message. You can clear cookies and storage in your browser settings at any time; you will then need to sign in again.
7. Your rights
Under the Data Protection Act you have the right to:
- be informed about how your data is used (this policy);
- access the personal data we hold about you;
- correct inaccurate data (you can edit your name and email in your profile);
- have your data deleted, or object to or restrict its processing;
- withdraw consent for reminder emails at any time;
- receive your data in a portable format.
To use any of these rights, email us (below). We will reply within 30 days. If you are unhappy with our response you may complain to the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.
8. Children
Learnix is designed for learners aged 18 and over. Learners under 18 may use Learnix only with the consent and supervision of a parent or guardian, who should create or approve the account and handle any payment.
9. Changes to this policy
If we make important changes we will update the date above and tell registered users by email or on the site.
Contact us
Learnix Technologies, Kenya
Email: support@learnix.test
Or use our contact form.