Privacy policy

• Your account: your name, email address and password. We store the password scrambled (hashed), so nobody at Chopi can read it.
• What you buy: the course and weeks you paid for, the amount, the date and how you paid. For M-Pesa payments we keep the M-Pesa code, the phone number you paid from and, if you paste it, the text of the M-Pesa SMS. We use these only to match your payment and unlock your course.
• Card payments: if you pay by card, Paystack handles your card details on its own secure page. We never see or store your card number.
• Your learning: which modules and episodes you start or finish and where you stopped, so you can carry on from the same spot on your phone or laptop.
• Technical data: our servers record basic request details such as your IP address, browser or app version and the time of each visit. We use these to keep the service working and secure.

• To create your account, sign you in and keep you signed in.
• To take payments, confirm them and unlock what you bought for the time you paid for.
• To save your progress and show you where to continue.
• To answer your messages and handle refunds.
• To keep Chopi secure and to prevent fraud and account sharing.
• To keep the payment records Kenyan tax law requires.

We process your data because we need it to provide the service you signed up for, because the law requires us to keep certain records, and for our legitimate interest in keeping Chopi safe. We do not sell your personal data, and we do not use it for advertising.

We use one cookie, to keep you signed in. It is needed for your account to work, so there is no setting to switch it off. It lasts up to 30 days, or until you log out. We do not use advertising or tracking cookies.

• Paystack, if you pay by card or through Paystack's M-Pesa checkout, to process the payment.
• Safaricom M-Pesa handles M-Pesa payments you send. We see only what your M-Pesa message and our own M-Pesa statement show.
• Our hosting provider, which runs the servers that store Chopi's data. These servers may be outside Kenya. Where they are, we use providers that protect data to a standard at least as strong as Kenyan law requires.
• The authorities, only when the law requires us to.

• Your account and learning progress: until you delete your account.
• Payment records: as long as Kenyan tax law requires, currently at least five years, even after you delete your account.
• Technical logs: a few weeks, unless we need them to look into a security problem.

Under the Data Protection Act, 2019 you can ask us to:

• tell you what personal data we hold about you and give you a copy;
• correct anything that is wrong;
• delete your account and personal data (payment records we must keep by law stay until that period ends);
• stop using your data for a purpose you object to.

Email help@getchopi.co.ke from the address on your account. We reply within 7 days. If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.

To delete your account, email help@getchopi.co.ke from the address on your account and ask us to delete it. We delete your account, your progress and your access within 7 days and confirm by email. Deleting your account ends your access to anything you bought.

Passwords are hashed, the site uses an encrypted (HTTPS) connection, and only the people who run Chopi can see account and payment records. No system is perfectly secure, so use a password you don't use anywhere else. If we ever learn of a breach that affects you, we will tell you and the Data Protection Commissioner as the law requires.

Chopi is for adults studying business. You must be 18 or older to create an account. If you think someone younger has given us their data, tell us and we will delete it.

If we change this policy, we update the date at the top of this page. If a change matters for how we use your data, we tell you by email or on the site before it applies.

Enwan Media Hub Ltd, Kenya. Email help@getchopi.co.ke.