Privacy Policy

Effective Date: January 1, 2024

Last Updated: January 1, 2024

Moosla is committed to safeguarding the privacy, safety, and rights of all its users, especially students and educators. This Privacy Policy outlines how we collect, use, store, share, and protect your personal data in compliance with Ghana's Data Protection Act (Act 843), Cybersecurity Act (Act 1038), and other applicable laws.

1. Data We Collect

We collect the following types of personal information:

User Profile Data: Full name, email address, phone number, age, school name, role (e.g., student, teacher)

Authentication Data: Passwords (hashed), digital signatures (where applicable)

Educational Data: Course progress, test scores, assignments, feedback

Usage Data: IP address, device type, browser, location data, access logs

Parental Consent Records: For users under 18, verified guardian consent is required

2. How We Collect Data

When you register for an account

When you enroll in courses or participate in platform activities

When you contact our support team or participate in surveys

Automatically via cookies and analytics tools (with consent)

3. Why We Collect Data (Purpose Specification)

We collect personal data to:

Deliver educational content and services

Track and improve learning outcomes

Enable teacher-student engagement

Personalize user experience

Monitor platform usage for security and performance

Comply with regulatory requirements

4. Legal Basis for Processing

We process personal data based on:

User consent

Performance of a contract (e.g., providing platform services)

Legal obligations under Ghanaian law

Protection of vital interests (e.g., child protection)

Legitimate interests (e.g., fraud prevention, educational insights)

5. Children's Privacy

We take special precautions to protect the privacy of children under 18:

Children may only use the platform with verified parental or guardian consent

Content is filtered for age appropriateness

Child data is never used for advertising or profiling

We comply fully with Ghana's Child Online Protection Framework

6. Data Sharing & Disclosure

We do not sell personal data. We may share data with:

Your school or educational institution (if registered through one)

Service providers (e.g., cloud storage, analytics) who are data processors

Law enforcement, regulators, or CSA in case of cyber incidents or legal requests

Third parties with your explicit consent

All processors operate under strict data protection agreements.

7. Data Retention

In line with the Electronic Transactions Act (Act 772) and Act 843:

We retain personal and educational records for a minimum of 6 years

Data is securely deleted or anonymized after this period unless required for legal, educational, or archival purposes

8. Data Security

We implement Security by Design, including:

End-to-end encryption

Two-factor authentication

Secure access controls

Continuous vulnerability scanning

Incident detection and response plans

In case of a breach, we will notify users and the Data Protection Commission and/or CSA within the legally required timeframe.

9. Your Rights

Under the Data Protection Act (Act 843), you have the right to:

Access your personal data

Correct or update inaccurate data

Request deletion or anonymization

Object to processing

Withdraw consent at any time

Requests can be made via our contact details below.

10. Cookies & Tracking

We use cookies to:

Maintain login sessions

Track learning progress

Improve system performance

You can manage your cookie preferences in your browser settings.

11. Governance & Oversight

We have appointed a Data Protection Officer (DPO) and CISO to manage privacy and security.

As a designated Critical Information Infrastructure (CII) provider, we are regulated by the Cyber Security Authority and subject to regular audits.

12. Contact Us

For questions or privacy requests:

Moosla Data Protection Office

Email: tech@moosla.org

Phone: +233 55 847 7305

Address: Accra, Ghana

13. Updates to This Policy

We may update this Privacy Policy from time to time. All changes will be posted here with a revised "Effective Date." We will notify users of significant changes via email or platform alerts.