Privacy Policy

Last updated 18 August 2026

1. Who we are

AfriLev Maths Practice is operated by AfriLev Solutions Limited, a company registered in Uganda and based in Kampala. We trade publicly as African Leverage. For anything in this policy, write to info@africanleverage.com.

We are the data controller for the information described here, which we handle under Uganda's Data Protection and Privacy Act, 2019.

2. What we collect

When you use the WhatsApp service

• Your WhatsApp phone number. This is how the service knows who you are. We do not use a separate account or password.
• The messages you send the bot. Your answers, the buttons you tap, and any commands you type.
• Your practice record. Which questions were sent to you, which option you chose, whether it was correct, when you answered, and whether you asked to see the full working.
• Your progress. Streaks, milestones, and which topics you have practised.
• Your consent record. The date you accepted these terms and which version you accepted.
• Your answer to one age question. Whether you told us you are 18 or older — a yes or no, never your exact age or date of birth. The answer is kept against your number because the law does not let it flip back and forth.

When a parent or guardian approves a student under 18

• The approving parent or guardian's WhatsApp number, their decision (approve or decline), when it was made, and the exact wording they were shown. Ugandan law (section 8 of the Data Protection and Privacy Act, 2019) requires this approval before we can serve a student under 18, and the record of it is the proof that we had it — so it is kept for as long as the student's records are kept.
• A parent who approves can withdraw at any time by sending STOP to the bot from the same number. Withdrawal pauses the student's practice until fresh approval is given; it does not delete the approval record itself, which we must keep to show what was approved and when.

When you pay

• The Mobile Money number you ask us to charge, the amount, and whether the payment succeeded or failed.
• Payment is processed by our provider. We never see or store your PIN, and we do not hold card details of any kind.

When you use this website

• Standard server logs kept by our hosting provider. This site sets no advertising or tracking cookies, and runs no analytics script.
• When you tap a button that opens WhatsApp, our own server notes that the button was used and which page you tapped it on, then sends you straight there. That note carries no cookie, no identifier and no IP address — it counts how many people started a chat, and nothing about who they are.
• If you send the contact form, the name, email address and message you type are posted to our own server, which emails them to us. No third-party form service is involved and nothing about the enquiry is stored in a database. We keep a short-lived count of recent submissions per IP address purely to block abuse. If our mail system were unavailable, the page falls back to opening your own email app instead.

What we deliberately do not collect

We do not ask for your name, school, address, photograph, contacts or location — and not your exact age or date of birth either: the one age question we ask is whether you are 18 or older, and yes or no is all we store. We cannot read any of your other WhatsApp conversations — only the messages you send to our bot. We do not track you across other websites.

3. Why we hold it

• To provide the service you asked for — send questions, mark them, remember your topic and progress, and grant the access you paid for.
• To take and confirm payment, and to keep accounting records the law requires us to keep.
• To answer you when something goes wrong. If you message us about a failed payment, we look up your record to fix it.
• To improve the teaching. We study which topics and which specific misunderstandings students struggle with, so we can write better questions and explanations.

Our lawful bases are your consent (which you give in the chat before paying, and can withdraw) and the performance of our contract with you.

4. Who else sees it

We do not sell your data, ever, to anyone. We share only what is necessary with the services that make the product work:

• WhatsApp / Meta — delivers the messages. Your use of WhatsApp is also governed by their own privacy policy.
• Our payment provider — receives the Mobile Money number and amount in order to process the payment.
• Our hosting provider — runs the servers and database on our behalf.

We may also disclose information where the law requires it, or to establish or defend a legal claim.

What we publish

We publish reports on how students perform across topics, so teachers can see where learners struggle. These are aggregates only. No individual student's results are ever published or identifiable: figures are suppressed unless they rest on a substantial number of answers from a substantial number of different students, precisely so that a published number can never be narrowed back to one person.

5. How long we keep it

• Practice and progress records — while your account is active, and afterwards in a form used for teaching statistics.
• Payment records — retained as long as tax and accounting law requires. We cannot delete these on request while that obligation stands.
• Operational logs (message-delivery records, anti-spam counters) — automatically deleted on a short cycle, measured in days and weeks.

6. Students under 18

This service is built for S5 and S6 students, and many of them are under 18. Section 8 of the Data Protection and Privacy Act, 2019 requires a parent or guardian's consent before we may collect or process a child's data, and the service is built around that requirement rather than around a checkbox.

• Every user is asked once whether they are 18 or older. A student who says they are under 18 cannot use the service — not even the free questions — until a parent or guardian approves.
• Approval comes from the parent's own phone. The student forwards an approval message; the parent opens it, sees exactly what we collect and why, and taps Approve or Decline from their own WhatsApp number. We never message a parent first — the conversation only ever starts from their side.
• Approval can be withdrawn at any time by the approving parent sending STOP from the same number. Practice pauses until fresh approval is given. Paid access periods continue to run while paused — payments are final — so a withdrawal is worth resolving quickly.
• We collect the minimum that makes teaching possible — no name, no exact age, no school, no photograph.
• We act on requests from the holder of the number. We have no way to verify that someone is really a student's parent beyond the approval record itself, so we will not hand over a student's records for anyone who simply says they are — that protection cuts both ways. A parent or guardian who wants a student's data deleted should make the request together with the student, from that student's WhatsApp number.
• We never publish anything that identifies an individual student, and we do not use students' data for advertising.

7. Your rights

Under the Data Protection and Privacy Act, 2019 you may:

• ask what personal data we hold about you, and get a copy;
• ask us to correct anything inaccurate;
• ask us to delete your data (subject to records we must keep by law, such as payment records);
• withdraw your consent, and stop using the service at any time;
• object to how we are using your data;
• complain to Uganda's Personal Data Protection Office if you believe we have handled your data wrongly.

To exercise any of these, email info@africanleverage.com and tell us the WhatsApp number the request concerns. That number is the only identifier we hold, so before we act we will confirm the request with whoever holds it — otherwise anyone who knew your number could ask for your records. We aim to respond within 30 days.

8. Security

Data travels encrypted in transit, and access to live systems is limited to the people who need it, on accounts that carry no more privilege than their job requires. Phone numbers are masked by default in our internal tools. No system is perfectly secure and we do not claim otherwise — we design so that the damage from any single mistake stays contained. If a breach ever puts your data at risk, we will tell you and Uganda's Personal Data Protection Office, as the law requires.

9. Changes

If we change this policy in a way that materially affects you, we will update the date at the top and, where the change is significant, ask you to accept the new version in the chat before you continue.

10. Contact

AfriLev Solutions Limited, Village 1, Ntinda, Kampala, Uganda
info@africanleverage.com