Privacy Policy

Last updated: July 2026

This Privacy Policy explains how Vertex Tech Solutions ("we", "us", "our") collects, uses, and protects information through DARASA (the "Service"). We built DARASA for teachers in Kenya and take the sensitivity of school data seriously, including student information entered by teachers.

1. Information We Collect

Account information

Your email address and password (managed securely through our authentication provider, Supabase).

Profile information

Your name, school name, subject, profile photo, and academic year/term, which you provide during setup.

Student information you enter

Student names, admission numbers, parent contact details (phone/email), academic performance, attendance records, and optional medical notes. This information is entered and controlled by you as the teacher, for your own class management purposes.

Files you upload

Teaching resources, lesson plan documents, timetables, calendars, and exam documents you choose to upload, stored securely via Supabase Storage.

Subscription and payment intent information

When you request a subscription, we record the plan you selected, your chosen payment method (M-Pesa, Airtel Money, or Bank), and the phone number or name you provide for us to verify payment. We do not collect or store your M-Pesa PIN, card numbers, or bank login credentials — payments are confirmed manually outside the app.

Device and usage information

We record basic device/browser information and login activity (such as last-seen timestamps) to keep your account secure and to understand overall usage of the Service.

2. How We Use Information

  • To provide and operate the Service you signed up for;
  • To sync your data across your devices;
  • To verify and activate subscriptions you request;
  • To provide AI marking and exam-generation features (see below);
  • To communicate with you about your account, updates, or support requests;
  • To maintain the security, integrity, and reliability of the Service;
  • To comply with legal obligations.

We do not sell your information, or your students' information, to advertisers or data brokers.

3. Your Role and Ours, for Student Data

When you enter information about your students, you act as the data controller for that information — you decide what to record and why, as part of your teaching duties. Vertex Tech Solutions acts as a data processor, storing and processing that data on your behalf using secure infrastructure. You are responsible for ensuring you have the appropriate authority from your school to record student information in DARASA.

4. Third Parties We Work With

Supabase

Our database, authentication, and file storage provider. Your account data, class data, and uploaded files are stored on Supabase's infrastructure.

AI processing (Cerebras & OpenRouter)

When you use AI Marking or the AI Exam Generator, the content you upload or provide (such as exam questions and answers) is sent to third-party AI models via Cerebras and/or OpenRouter to generate marking schemes and extracted text. Avoid uploading unnecessary personal information about students within exam content.

We do not permit these providers to use your data for purposes beyond providing the Service to us.

5. Data Storage and Security

Data is stored using Supabase's secure cloud infrastructure with row-level access controls, meaning each teacher can only access their own class and student data (except our administrators, who have limited oversight for account management and support purposes). Core app data is also cached on your device using local storage so the app works with unreliable internet connections, syncing to the cloud when a connection is available.

6. Data Retention

We retain your account and class data for as long as your account is active. If you'd like your account and associated data deleted, contact us at support@reply.darasa.site and we will process your request, subject to any legal retention obligations.

7. Your Rights

Under Kenya's Data Protection Act, 2019, you have the right to:

  • Access the personal data we hold about you;
  • Request correction of inaccurate data;
  • Request deletion of your data, subject to legal or legitimate business requirements;
  • Object to or restrict certain processing;
  • Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya.

To exercise any of these rights, contact us at support@reply.darasa.site or +254 751 936947.

8. Children's Data

DARASA is intended for use by teachers and school staff, not directly by children. Student data is entered by teachers as part of their professional duties, not by students themselves creating accounts. DARASA does not knowingly allow minors to create their own accounts.

9. Changes to This Policy

We may update this Privacy Policy as DARASA evolves. We'll update the "Last updated" date above when we make changes, and significant changes will be communicated within the app.

10. Contact Us

For any privacy questions or requests, reach us at support@reply.darasa.site or +254 751 936947 (call or WhatsApp).