Privacy notice

Who is responsible

eScience Academy is operated by Nambozzo Aisha. She handles data-protection requests and safeguarding concerns using the contact details below. Buloba High School is the contact address supplied by the operator; this notice does not claim endorsement by the school, UNEB or NCDC.

What we collect, and why

Account details (name, email, role and a protected password), subscriptions, payment references and proof, lesson activity, stored quiz answers, coursework, feedback and messages support teaching, account security, payment verification and learner progress. Teachers provide qualifications, conduct declarations and review information for staff assessment. Previously recorded guardian contact and authority information is retained as private historical information, subject to the retention and deletion process below.

Account information needed to provide a service is marked required. Do not put identity documents, financial PINs, passwords, medical details or unrelated personal information in coursework or messages. Payment-proof uploads should conceal unrelated balances and transactions. Routine learner signup does not request an age group, date of birth, identity document or guardian contact details.

Learners of all ages

All ages are welcome. Learner registration, learning activity, private academy messaging and one-to-one booking have no age declaration or guardian-permission prerequisite. Learners register directly without an invitation. Normal account, lesson-access and booking rules apply, and teachers still need academy clearance for private learner contact.

Child-data legal basis requires separate review. Removing an age or guardian-consent step from the software does not establish a lawful basis for processing children’s personal information or an educational exemption. The operator is responsible for reviewing the applicable requirements and handling data-protection requests. Historical age and guardian records do not determine learner eligibility.

Who can see information

Learners see their own work. Teachers see the curriculum and enrolled learners they are authorised to teach or mark. Guardian contacts, teacher references and safeguarding review notes do not appear in ordinary learning snapshots or public teacher profiles.

Private academy messages are not confidential from authorised safeguarding administrators: they may review a selected conversation for a recorded safeguarding or support purpose. Access is logged; administrators cannot send as another user. Reports are visible only to the reporter and authorised administrators, not automatically to the person reported.

Storage, external services and offline notes

The platform uses its configured hosting, database and file storage to deliver the service. Hosting location and any transfer of personal information outside Uganda need an operator assessment before public release; these notices alone do not establish adequate transfer protections. External video and meeting links use providers’ own terms and privacy policies. Opening those links can disclose information to those providers.

Essential session cookies keep you signed in. If you choose Save notes offline, a copy is stored in this browser for the earlier of access expiry or 30 days. It excludes quiz answers, private submissions, payments and video. Clear it on shared devices. Logout or switching accounts clears saved notes; an offline device cannot immediately detect a server-side access withdrawal.

Retention and account closure

Closed-account coursework and messages are scheduled for deletion after 90 days, except records specifically held for necessary financial, legal or safeguarding purposes. Holds need a reason and review date; they are not permission to retain everything indefinitely. Account closure prevents further login. Payment records needed for financial obligations can be kept separately from ordinary coursework.

Backups require a separate, controlled retention and deletion process. Copies in operator backups do not disappear merely because a live account is closed. Contact the data-protection lead to ask about the records held, retention reasons, backup handling and erasure.

Your choices and rights

Contact us to request access, correction, an account closure or erasure, or to withdraw consent. We verify a requester’s authority and explain any records that must still be retained. You can also raise a concern with Uganda’s Personal Data Protection Office. A policy page does not replace required registration, security controls or independent legal review.