ConnectED Privacy Policy

Effective date: 10/20/2026 · Last updated: 10/20/2026

ConnectED ("ConnectED", "we", "us") is a web platform at connected.co.ke where university students complete practical challenges, receive reviewed feedback, build a portfolio of their work and appear on leaderboards. ConnectED is operated by OMURI DANIEL, University of Kabianga, Kericho, Kenya. This policy explains what personal data we collect, why, who can see it, how long we keep it, and the choices you have. Questions? Email kengereomuri@gmail.com.

1. Data we collect

Account and profile

Academic details (students)

Google user data (only if you choose "Continue with Google")

GitHub data (only if you choose "Connect GitHub")

Submissions and reviews

Employer accounts

Settings and technical data

2. How we use your data

We do not use your data, including Google user data, for advertising, and we do not sell it.

3. Who can see your data

We do not sell, rent or trade personal data.

4. Google API Services User Data Policy

ConnectED's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use Google user data

ConnectED requests only the basic Google authentication scopes openid, email and profile. We use the information received through these scopes, including your name, email address, email verification status and unique Google account ID, to authenticate you, create or associate your ConnectED account, verify your account details where required, and support subsequent sign-ins.

How we share Google user data

We do not sell Google user data, use it for targeted advertising, or share it with data brokers. We do not disclose Google user data to third parties for their independent marketing or unrelated purposes.

Google account information may be processed by the infrastructure and service providers that operate ConnectED, including our hosting and database provider, Railway, when necessary to store account records and provide the service. Such processing is limited to the purposes described in this policy. We may also disclose information when required by law or when necessary to protect the security and integrity of the service.

Security and protection

Google account information retained by ConnectED is protected using the security measures described in Section 5, including HTTPS for data in transit and role-based access restrictions. Access is limited to authorized purposes necessary to operate and maintain the platform.

Retention and deletion of Google user data

We retain Google account information for as long as necessary to maintain your ConnectED account and provide authentication functionality. If you request account deletion, we will delete the associated Google account information within the timeframe described in Section 6, except where retention is required by law. Revoking ConnectED's access through your Google Account permissions stops future authorization, but may not by itself delete information already stored by ConnectED.

Limited use

ConnectED's use of Google user data is limited to providing or improving user-facing features that are prominent in the application, providing security-related functionality, complying with applicable law, and other uses expressly permitted by the Google API Services User Data Policy. We do not use Google user data to develop, train or improve generalized artificial intelligence or machine-learning models.

5. Security

Data travels over HTTPS. Passwords are hashed. Access is limited by role. Uploaded files are checked for type and size and can only be downloaded by the student who submitted them, their campus admin and platform administrators. Login and registration are rate limited. No system is perfectly secure, but we work to protect your data.

6. How long we keep data, and deleting it

We keep your data while your account is active. To delete your account and the data tied to it (profile, submissions, uploaded files, feedback and notifications), email kengereomuri@gmail.com from your registered address and we will delete it within 30 days, except anything the law requires us to keep.

You can also stop ConnectED accessing your Google account at myaccount.google.com/permissions and disconnect GitHub in your GitHub account settings (Applications).

7. Your rights

Under Kenya's Data Protection Act, 2019, you have the right to be informed about how your data is used, to access it, to correct it, to ask for it to be deleted, and to object to or withdraw consent for its processing. You may also complain to the Office of the Data Protection Commissioner. To use any of these rights, email kengereomuri@gmail.com.

8. Cookies and local storage

We use essential cookies to keep you signed in and to protect forms from forgery. We do not use advertising cookies. To stop you losing what you typed, forms save unsent text in your browser's local storage for up to 24 hours. That text stays on your device and is never sent to us until you submit the form.

9. Changes to this policy

If we change this policy we will update the date above and, for significant changes, tell you in the app or by email.

10. Contact

OMURI DANIEL, ConnectED, University of Kabianga, Kericho, Kenya · kengereomuri@gmail.com