Privacy Policy

1. Who we are

Soma Smart provides online CBC learning and exam practice for Kenyan families (PP1–Grade 9), including practice questions, progress tracking, subscriptions, and AI-assisted answer explanations.

Website: https://somasmartassesments.com

2. Google user data (Google Sign-In)

If you choose Sign in with Google, we use Google Identity Services (OAuth / OpenID Connect) for authentication only. We request the basic profile information needed to create or sign in to your Soma Smart account.

Google user data we access

• Google user ID (the unique sub identifier)
• Email address (and whether it is verified by Google)
• Name (given name and family name, when provided by Google)

We do not request access to your Gmail, Google Drive, Contacts, Calendar, or other Google Workspace content. We only use Google Sign-In to authenticate you and obtain the profile fields listed above.

How we use Google user data

• To verify your identity and sign you into Soma Smart
• To create or link your Soma Smart account
• To display your name in the product and send account-related emails when needed
• To prevent duplicate accounts and secure your login session

How we store Google user data

We store your Google user ID, email, and name in our application database as part of your Soma Smart user record, together with session data needed to keep you signed in.

How we share Google user data

We do not sell or rent Google user data. We do not share Google user data with third parties for advertising. We may disclose Google user data only:

• To infrastructure and service providers that help us operate the service (for example hosting, email delivery, or security), under contractual obligations to protect the data and use it only for providing those services
• When required by law, regulation, or valid legal process
• To protect the rights, safety, and security of Soma Smart, our users, or the public
• With your direction or consent

3. Other information we collect

Depending on how you use Soma Smart, we may also collect:

• Account details: phone number, PIN (stored as a secure hash), role (e.g. guardian)
• Learner profiles: names, grade level, and related details you add for linked learners
• Learning activity: exam attempts, answers, scores, and progress
• Payments: subscription and M-Pesa payment references needed to activate plans (we do not store full card numbers)
• Technical data: IP address, browser type, device information, and cookies/local storage for sessions and preferences (such as theme)
• Support communications: messages you send us about your account

Demo practice may run in a temporary browser session without creating an account. If you later sign up, account data is stored as described above.

4. How we use information

We use information to:

• Provide, secure, and improve the learning platform
• Authenticate users (phone + PIN and/or Google Sign-In)
• Show exam content, mark answers, and display progress to guardians and learners
• Process subscriptions and send related SMS or email notifications
• Generate AI tutor explanations for quiz answers (using question content and the learner’s selected answer — not Google account credentials)
• Prevent fraud, abuse, and unauthorized access
• Comply with legal obligations

5. How we share information

We may share information with:

• Service providers who process data on our behalf (hosting, email, SMS, payment gateways, AI explanation providers)
• Legal authorities when required by applicable law
• Professional advisers where necessary to protect our legal rights

We do not sell personal information. Payment providers (such as M-Pesa) process payments under their own terms and privacy practices.

6. Retention and deletion

We retain account and learning data for as long as your account remains active and as needed to provide the service, resolve disputes, enforce agreements, and meet legal or accounting requirements.

You may request deletion of your Soma Smart account and associated personal data by contacting us at privacy@somasmartassesments.com. We will delete or anonymize personal data unless we must retain certain records (for example payment records) for legal compliance. After deletion, Google Sign-In will no longer reconnect that deleted account unless you create a new one.

You can also revoke Soma Smart’s access to your Google Account at any time in your Google Account permissions: myaccount.google.com/permissions.

7. Security

We use administrative, technical, and organizational measures designed to protect personal data, including encrypted connections (HTTPS) in production, hashed PINs, access controls, and rate limiting on authentication endpoints. No method of transmission or storage is completely secure; please use a strong unique PIN and keep your devices protected.

8. Children and learners

Soma Smart is designed for guardians and educators to support learners. Learner profiles are typically created and managed by a parent, guardian, or authorized adult. If you believe a child’s information was provided without appropriate consent, contact us and we will take appropriate steps.

9. Your choices and rights

Subject to applicable law, you may request to:

• Access the personal data we hold about you
• Correct inaccurate information
• Delete your account or certain personal data
• Withdraw Google Sign-In access via your Google Account settings

To make a request, email privacy@somasmartassesments.com. We may need to verify your identity before fulfilling the request.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes — including changes to how we use Google user data — we will update the effective date on this page and, where appropriate, notify you in the product or by email and obtain any consent required before using Google user data in a new way.