Privacy policy

Privacy policy.

How we collect, use and protect personal data — including children’s data. Written in plain language on purpose.

1. Who we are

SomaKwetu is a school management platform operated by Forinda Ventures. This notice explains how we handle personal data across our website and the platform.

2. Who is responsible for what

For a school’s records — learners, guardians and staff — the school decides how that data is used, and we process it only on the school’s instructions. For our own website and marketing, we decide, and this notice applies directly.

3. What we collect

From our website: the contact details you give us — name, email, phone, and anything you write in a message — plus basic usage data. On the platform: the records a school enters, which typically include learner and guardian details, staff records, attendance, academic results, fees and payments.

4. Children’s data

Most learner records belong to children. We process them only on behalf of the school, only to run the school, and never for advertising or profiling. We do not sell personal data, and we do not use school data to train models.

5. Why we use it

To provide the service a school has signed up for, to answer enquiries, to keep the platform secure, and to meet our legal obligations. Nothing else.

6. Who else sees it

Only the suppliers we need to run the service — infrastructure, payments, SMS and email delivery, and error monitoring. Each one is bound to protect the data and may use it only to provide their part of the service. The current list is on our sub-processors page.

7. Cookies and analytics

Our website uses Google Analytics to count visits and see which pages are useful — the pages you view, roughly where you are (to the city), your browser and device. It runs only if you choose Accept on the cookie notice; if you decline or ignore it, nothing is sent to Google. Google processes this data for us. You can change your choice at any time from “Cookie settings” at the bottom of every page, which also removes the analytics cookies. The platform itself — what schools, staff and parents sign in to — has no analytics.

8. How long we keep it

A school’s records are kept while its subscription is active. After it ends, the school can export its data, and we delete it within 30 days unless the school asks otherwise or the law requires us to keep it longer. Website enquiries are kept for up to two years.

9. Your rights

You can ask for a copy of your data, ask us to correct or delete it, or object to how it is used. If the data is a school’s record, ask the school first — they decide, and we act on their instruction. Write to [email protected] and we will respond within 30 days.

10. Security

Each school’s data is held in its own separate database. Access is restricted and logged, sensitive fields are encrypted, and every change is recorded in an audit trail that cannot be quietly edited.

11. Contact

Questions or complaints: [email protected]. If you are not satisfied with our answer, you may complain to the data protection authority where you live.