Privacy Policy

Elimupoa is operated by Valkom Studios (Kenya). We serve schools and institutions in Kenya.

Contact: support@elimupoa.co.ke | 0758 835 777

Schools and institutions using Elimupoa act as the data controllers for school data.

Elimupoa acts as a data processor on behalf of schools for data stored and processed through the platform.

• Account and authentication data, including email and password (processed through Clerk).
• Organization data, including school name and organization setup details through Clerk Organizations.
• School operations data, including staff role data (for example admin/teacher), student names, records, and operational workflows entered by schools.
• Payment transaction data and status information related to M-Pesa Express transactions.
• Audit logs and operational event records.
• Usage and product analytics events through PostHog.

We do not intentionally collect unnecessary sensitive student personal data. As shared by our customers, student name data is typically used for school operations within Elimupoa.

• Provide and maintain the Elimupoa platform.
• Authenticate users and manage school organizations.
• Process and reconcile payment workflows.
• Provide support, troubleshooting, and service updates.
• Monitor security, fraud risks, and abuse prevention.
• Improve product performance and user experience.

We process personal data in accordance with applicable laws in Kenya, including obligations relevant to contractual performance, legitimate interests, and legal compliance.

We use third-party providers to operate Elimupoa, including:

• Clerk (authentication and identity management)
• Convex (database, cloud functions, and storage)
• M-Pesa Express ecosystem (payment processing)
• PostHog (product analytics)
• Atlassian tools (service and operational status workflows)
• Docker-based hosting workflows for the landing environment

We implement reasonable technical and organizational security measures, including role-based access controls, audit logs, and service-provider security controls.

Convex handles data processing and backup infrastructure. Security controls such as encryption are provided according to Convex platform capabilities and terms.

Data is retained for as long as needed to provide services and meet legal, audit, and contractual obligations.

Schools may request data export or deletion through support@elimupoa.co.ke.

Subject to applicable law and school-controller instructions, users may request access, correction, deletion, and export of personal data.

Elimupoa does not permit unauthorized downloading of school data. Data export and download permissions are restricted by role, and administrative roles are required for export-level access.

Some service providers may process data in jurisdictions outside Kenya. Where this occurs, we require appropriate safeguards and contractual protections.

We may update this Privacy Policy from time to time. Material updates will be communicated by email.

For privacy requests or concerns, contact:
Email: support@elimupoa.co.ke
Phone: 0758 835 777