01Who we are
Satapass is operated by Satapass. We are the data controller for the personal data described in this policy. We handle personal data in line with the Kenya Data Protection Act, 2019 and other data protection laws that apply to us.
For any privacy question or request, contact us at support@satapass.com.
02The data we collect
- Account details: your full name, email address and password. Passwords are stored in a hashed form, never as plain text.
- Study data: the tests you create and take, your answers, scores, time per question, marked and bookmarked questions, notes you save, and feedback or reports you send about questions.
- Preferences: settings such as your exam (NCLEX-RN or NCLEX-PN), study preferences and exam date.
- Plan and payment details: the plan you bought, its dates and the payment confirmation. Card payments are handled by our payment provider. We do not receive or store your full card number.
- Technical and activity data: your IP address, an approximate location (city, region and country) worked out from your IP address, the pages you visit on Satapass and when, and information your browser sends, such as browser type and device.
- Messages: what you send us when you email support.
We do not ask for sensitive personal data, and we do not knowingly collect data from anyone under 18.
03How we use your data
- to create and manage your account and let you sign in;
- to provide your plan, run your tests and save your progress, including pause and resume;
- to produce your test reports, performance tracking and comparisons with the average of other students (these comparisons use combined figures and do not show anyone's identity);
- to process payments and refunds;
- to send emails you need, such as password reset links, payment confirmations and important service notices;
- to keep the platform secure, prevent account sharing and misuse, and investigate problems;
- to understand how Satapass is used so we can fix errors and improve questions and features;
- to answer your messages and requests.
04Our legal grounds
We only use personal data where the law allows it. Depending on the purpose, we rely on:
- Contract: to provide the account and plan you signed up for.
- Legitimate interests: to keep Satapass secure, prevent misuse and improve the Service, where this does not override your rights.
- Legal obligation: to keep payment records and respond to lawful requests.
- Consent: where we ask for it, for example for optional marketing emails. You can withdraw consent at any time.
06Transfers outside Kenya
Some of our service providers store or process data outside Kenya. When this happens, we take steps required by the Data Protection Act, 2019, such as working with providers that offer appropriate safeguards for personal data.
07How long we keep data
- Account and study data: for as long as your account is open. If you ask us to delete your account, we delete or anonymise this data unless we need to keep part of it for a legal reason.
- Payment records: for as long as tax and accounting laws require.
- Technical and activity logs: for as long as needed for security and to investigate problems, then deleted or anonymised.
- Support emails: for as long as needed to deal with your request and any follow-up.
08How we protect your data
We use technical and organisational measures to protect personal data, including encrypted connections (HTTPS), hashed passwords, token-based sign-in and restricted access to our systems. No system is completely secure, so please use a strong password that you do not use anywhere else, and contact us straight away if you think your account has been accessed by someone else.
09Cookies and browser storage
Satapass uses your browser's local storage and necessary cookies to keep you signed in, remember your settings (such as your exam and preferences) and keep the site working securely. We do not use advertising cookies.
You can clear this data in your browser settings at any time. If you do, you will be signed out and some preferences will be reset.
10Your rights
Under the Data Protection Act, 2019 you have the right to:
- be told how your personal data is used;
- access the personal data we hold about you;
- have inaccurate data corrected;
- have data deleted when we no longer have a reason to keep it;
- object to processing, including for direct marketing;
- receive your data in a portable format where this applies;
- withdraw consent where we rely on consent.
To use any of these rights, email support@satapass.com from the email address on your account. We may ask you to confirm your identity, and we will respond within the time the law requires.
11Age requirement
Satapass is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created an account, contact us and we will delete it.
12Changes to this policy
We may update this policy when our services or the law change. We will change the date at the top of this page and, for significant changes, let you know on the platform or by email.
13Contact and complaints
If you have a question or concern about how we handle your data, contact us first at support@satapass.com or by post to Satapass. We will try to resolve it.
You also have the right to complain to the Office of the Data Protection Commissioner (ODPC) in Kenya.