Controller
Teacher's Aide Ltd, Nairobi, Kenya. ODPC registration: pending.
Principles we follow
Lawful, fair and transparent processing; purpose limitation; data minimisation; accuracy; storage limitation; integrity and confidentiality; and accountability.
Security
Row-Level Security on every database table, encrypted transport (HTTPS), server-side input validation, regular security scans, and role-based access for administrators. Sensitive columns (learner emails, file paths) are gated behind security-definer functions.
International transfers
Some processors host data outside Kenya (EU, US). Transfers rely on safeguards permitted under Section 48 of the Act.
Data Subject Access Requests
Email info@teachersaide.app with the subject "DSAR". We respond within 30 days.
Breach notification
We notify the ODPC and affected users within 72 hours of becoming aware of a personal data breach likely to result in risk.