Privacy Policy
Last updated: 30 October 2026
1. Data we collect
| Category | Examples | Source |
|---|---|---|
| Account data | Username, email, profile bio, avatar | You provide it |
| Google sign-in data | Name, verified email, profile photo (only when you choose Google sign-in) | Google, with your consent |
| Content you post | Videos, text posts, comments, quizzes, collections, subjects | You provide it |
| Usage data | Videos watched, progress seconds, likes, bookmarks, quiz attempts, follows | Generated as you use the app |
| Technical data | Device type, OS version, crash logs (once diagnostics are enabled) | App / OS |
We do not collect precise location, contacts, or financial data. Videos you upload are stored so they can be streamed to other users — never upload anything you want to keep private.
2. How we use it
- Operate the service: accounts, feeds, uploads, streaming, quizzes, recommendations.
- Safety and integrity: prevent spam, abuse and Terms violations.
- Improve the product: aggregated learning about which explainers help, never sold.
- Communications: essential service messages only (e.g. security notices). No marketing email without consent.
3. Sharing & third parties
- Public by design: your username, avatar, videos, posts, comments and public collections are visible to other users.
- Infrastructure: video files are stored on Cloudflare R2; the API runs on our servers. Providers process data only to deliver the service.
- Google sign-in: handled by Google under Google's Privacy Policy; we receive only your verified profile basics.
- Legal: we disclose data where required by Kenyan law or valid legal process.
- We never sell your personal data.
4. Google Play Data Safety summary
| Data type | Collected? | Shared? | Purpose |
|---|---|---|---|
| Personal info (name, email) | Yes | No | Account functionality |
| Photos & videos (uploads) | Yes | Yes — visible to other users | App functionality |
| App activity (watch history, quiz attempts) | Yes | No | Functionality, personalization |
| Precise location / contacts / financial | No | No | — |
Data is encrypted in transit (TLS). Account deletion (in-app or by request) removes associated personal data as described below.
5. Retention
- Account data and content are kept while your account is active.
- On deletion, your profile, videos, posts, comments, collections, bookmarks, quiz data and history are removed immediately from production systems.
- Backups may retain encrypted copies for up to 30 days, after which they age out and are not restored.
6. Your rights & deletion
- In-app (fastest): Profile → Delete account → confirm twice. Immediate and permanent.
- By request: email [email protected] from your account email with subject “Delete my Elimika account”. We verify ownership and delete within 7 days.
- You may request a copy, correction, or restriction of your data at the same address. See the account deletion page for the full walkthrough.
7. Children
Elimika is not directed at children under 13, and we do not knowingly collect their data. If you believe a child under 13 has an account, contact us and we will remove it promptly.
8. Security
We use TLS in transit, hashed passwords (bcrypt), scoped credentials, and least-privilege infrastructure access. No system is perfectly secure; use a unique password and keep your device updated.
9. Changes & contact
Material changes to this policy will be announced in-app before taking effect. Contact: [email protected].