Privacy should be understandable.

VibeSchool provides learning, teaching, parent, pathway and school services. For data-protection purposes, VibeSchool is operated by Gilowinc Investment in Kenya. This operator identification is provided for legal transparency; VibeSchool is the public-facing service and brand.

We aim to collect only information needed for a defined purpose and to make important uses of personal information clear before collection.

Account and profile information: information such as name, email or service identity, role, country and profile information where a feature requires it.

School and learning information: school membership, classes, subjects, curriculum activity, attendance, assignments, assessments, evidence and progress records.

Learner information: information connected to a learner record, including school identifiers, class membership, learning activity, progress and pathway activity where used.

Service and security information: authentication events, technical information, support requests and security/audit records needed to operate and protect the service.

We use personal information to provide and secure accounts, connect authorised learners and adults, deliver learning and school workflows, provide support, investigate technical or security issues, and meet applicable legal obligations. Each processing purpose must have an appropriate lawful basis.

Children require additional protection. Where Kenyan law requires parent or guardian consent for processing a child’s personal data, VibeSchool must obtain and record that authority before relying on consent for the processing. Child-data processing must protect and advance the child’s rights and best interests.

Access to learner information is intended to be limited by authorised relationship and role. Learner-facing experiences should not turn ordinary acceptance of platform terms into a substitute for consent where specific parental or guardian consent is legally required.

We do not sell personal data. Information may be made available to authorised school users, linked parents or guardians, assigned educators, service providers that help operate VibeSchool, or public authorities where disclosure is lawfully required. Access should be limited to the minimum relationship and purpose needed.

VibeSchool uses technical and organisational controls including authenticated access, role and relationship checks, database access controls, encryption in transit and audit/security controls where applicable. No online system can guarantee absolute security, so controls are reviewed as the platform changes.

Personal information is kept only for as long as reasonably necessary for the purpose for which it was collected, to maintain required educational or transactional records, resolve disputes or meet legal obligations. Retention periods may differ by record type. Information that is no longer required should be deleted or irreversibly de-identified according to the applicable retention rules.

Subject to applicable law, users may request access to personal data about them, correction of inaccurate information, objection or restriction in qualifying circumstances, deletion where applicable, portability where available, or withdrawal of consent where processing relies on consent. Rights relating to a minor may be exercised by a person with appropriate parental authority or guardianship after the relationship and identity are verified.

VibeSchool uses technology and cloud service providers to operate the platform. Personal information may therefore be processed outside Kenya. Cross-border processing must use an appropriate lawful basis and safeguards required by applicable Kenyan data-protection law.

VibeSchool uses essential browser storage and session mechanisms needed for authentication, security and core product operation. If optional analytics or advertising-related tracking is introduced, the relevant notice and controls must be updated before that tracking is enabled.

We may update this policy when VibeSchool’s services, legal obligations or data practices change. The current version and its update date will be published on this page.

Privacy questions and rights requests can be started through the VibeSchool Contact page. You may also raise a complaint with Kenya’s Office of the Data Protection Commissioner where applicable.