Privacy notice

Who is responsible

eScience Academy is operated by Nambozzo Aisha. She handles data-protection requests and safeguarding concerns using the contact details below. Buloba High School is the contact address supplied by the operator; this notice does not claim endorsement by the school, UNEB or NCDC.

What we collect, and why

Account details (name, email, role and a protected password), subscriptions, payment references and proof, lesson activity, stored quiz answers, coursework, feedback and messages support teaching, account security, payment verification and learner progress. Teachers provide qualifications, conduct declarations and review information for staff assessment. Previously recorded guardian contact and authority information is retained as private historical information, subject to the retention and deletion process below.

Account information needed to provide a service is marked required. Do not put identity documents, financial PINs, passwords, medical details or unrelated personal information in coursework or messages. Payment-proof uploads should conceal unrelated balances and transactions. Routine learner signup does not request an age group, date of birth, identity document or guardian contact details.

Teaching subjects and tutoring requests

Teachers select the subjects they teach. Reviewed selections and published-topic subject labels help learners find teachers; unreviewed claims are not presented as reviewed qualifications. Private qualifications and reference-check evidence stay within authorised staff review.

Teachers also supply a private phone number and may indicate that the same number is available on WhatsApp. The academy uses these details for application review, necessary verification and account support. Teachers can correct them under My profile. Only the teacher and an authorised administrator opening the purpose-audited application can see them; they are not shown to learners, in public teacher profiles or in notification messages. A supplied number is not proof of identity or verified ownership. Updating it does not itself approve or withdraw teaching or tutoring privileges. These private contact details follow the ordinary account-closure retention process below, subject to necessary account-level holds.

For tutoring requests, the academy records the version and time of the teacher’s explicit safeguarding-rules agreement, request status and administrator’s review decision. Teachers receive saved in-app decisions with the reason, date and read status. Reading or dismissing a notice does not change their privileges. Requests are optional and do not approve themselves. A per-sign-in reminder flag prevents prompts from repeatedly interrupting the teacher; it is not consent or an approval record.

Learners of all ages

All ages are welcome. Learner registration, learning activity, private academy messaging and one-to-one booking have no age declaration or guardian-permission prerequisite. Learners register directly without an invitation. Normal account, lesson-access and booking rules apply, and teachers still need academy clearance for private learner contact.

Child-data legal basis requires separate review. Removing an age or guardian-consent step from the software does not establish a lawful basis for processing children’s personal information or an educational exemption. The operator is responsible for reviewing the applicable requirements and handling data-protection requests. Historical age and guardian records do not determine learner eligibility.

Who can see information

Learners see their own work. Teachers see the curriculum and enrolled learners they are authorised to teach or mark. Guardian contacts, teacher references and safeguarding review notes do not appear in ordinary learning snapshots or public teacher profiles.

When a signed-in learner opens an authorised lesson or past paper online, the Academy records one access record for that learner and item, including the first and latest access times. Reopening does not add another unique learner. Administrators can review these records; teachers can review only the topics and papers within their teaching permissions. Free-learning access is recorded separately for administrators. This records access, not mastery, attendance, full video playback or proof of payment. Anonymous browsing and teacher or administrator previews are not recorded as learner access.

Private academy messages are not confidential from authorised safeguarding administrators: they may review a selected conversation for a recorded safeguarding or support purpose. Access is logged; administrators cannot send as another user. Reports are visible only to the reporter and authorised administrators, not automatically to the person reported.

Storage, external services and offline notes

The platform uses its configured hosting, database and file storage to deliver the service. Hosting location and any transfer of personal information outside Uganda need an operator assessment before public release; these notices alone do not establish adequate transfer protections. External video and meeting links use providers’ own terms and privacy policies. Opening those links can disclose information to those providers.

Essential session cookies keep you signed in. If you choose Save notes offline, a copy is stored in this browser for the earlier of access expiry or 30 days. It excludes quiz answers, private submissions, payments and video. Clear it on shared devices. Logout or switching accounts clears saved notes; an offline device cannot immediately detect a server-side access withdrawal.

Retention and account closure

Closed-account coursework, messages and ordinary learning-access records are scheduled for deletion after 90 days, except records specifically held for necessary financial, legal or safeguarding purposes. Holds need a reason and review date; they are not permission to retain everything indefinitely. Account closure prevents further login. Payment records needed for financial obligations can be kept separately from ordinary coursework and access reporting.

Backups require a separate, controlled retention and deletion process. Copies in operator backups do not disappear merely because a live account is closed. Contact the data-protection lead to ask about the records held, retention reasons, backup handling and erasure.

Your choices and rights

Contact us to request access, correction, an account closure or erasure, or to withdraw consent. We verify a requester’s authority and explain any records that must still be retained. You can also raise a concern with Uganda’s Personal Data Protection Office. A policy page does not replace required registration, security controls or independent legal review.