GDPR Compliance

While EverLearn primarily serves schools in Kenya, we apply GDPR-aligned data protection practices as good practice for any user, anywhere — including international school groups and staff/parents who may be EU residents.

We process personal data on the basis of a school's legitimate interest in operating a student information system, and/or the school's contract with us as a data processor on their behalf. Schools act as the data controller for their own students' and staff's information.

• Access — request a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate data.
• Erasure — request deletion of your data, subject to legal/record-keeping requirements.
• Portability — request your data in a portable format.
• Objection — object to certain types of processing.

For student/staff data, please start with your school administrator, as they control that record. For data we hold directly (e.g. a school account holder's own contact details), email support@everlearn.co.ke and we'll respond within a reasonable timeframe.

Some of our infrastructure providers (cloud storage, email, push notifications) may process data outside Kenya. We select providers that maintain appropriate data protection standards.

For any GDPR-related inquiry, contact support@everlearn.co.ke.