This Privacy Policy explains how Unibruz ("we", "us", or "our") collects, uses, and protects your information when you use our website, the Unibruz Academy learning platform, and our mobile application (together, the "Services").
1. Information We Collect
- Account information — your email address and password when you register for the Academy or a teacher account. Passwords are handled by Firebase Authentication and are never stored by us in plain text.
- Learning activity — course progress, lesson completions, quiz results, achievements, and certificates you earn.
- Content you submit — messages sent through our contact and partnership forms.
- Usage data — anonymous, aggregated analytics about how pages are used, to help us improve the Services.
2. How We Use Your Information
- To create and manage your account and deliver the learning experience.
- To track your progress and issue certificates of completion.
- To respond to your enquiries and provide support.
- To maintain security and improve the performance of the Services.
3. Data Storage & Cross-Border Transfer
Account data and learning records are securely stored using Google Firebase (Authentication and Cloud Firestore). Since Firebase servers are located outside Uganda (such as in the United States or Europe), your personal data will be transferred to and processed in these jurisdictions. We ensure that these transfers comply with the Data Protection and Privacy Act, 2019, by utilizing service providers that maintain high standards of security. By using our Services, you consent to this cross-border transfer, storage, and processing of your information.
We retain your information for as long as your account is active, or as necessary to fulfill the purposes outlined in this policy.
4. Sharing of Information
We do not sell your personal information. We share data only with service providers that help us operate the Services (such as Google Firebase) and only as needed to provide those Services, or where required by law.
5. Your Rights
Under the Data Protection and Privacy Act, 2019 of Uganda, you have the following rights regarding your personal data:
- Right to access — you can request a copy of the personal data we hold about you.
- Right to rectification — you can request that we correct any inaccurate or incomplete data.
- Right to erasure (deletion) — you can request the deletion of your account and associated personal data.
- Right to object — you can object to the processing of your data for specific purposes.
To exercise any of these rights, please email us at info@unibruz.com. If you believe your data protection rights have been infringed, you also have the right to lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda via their website at www.pdpo.go.ug.
6. Children's Privacy
The Services are intended for users who are old enough to consent to the processing of their data under applicable local law. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can remove it.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.
8. Contact Us
Questions about this Privacy Policy? Email us at info@unibruz.com.