Privacy Policy

MylesCorp Technologies Ltd ("MylesCorp", "we", "us", or "our") is a private limited company registered in Kenya, with its principal place of business at Westlands, Nairobi, Kenya. We operate website www.mylescorp.co.ke and provide AI-powered software products including EduMyles, EduRyde, MylesCare, AgriMyles, and MylesCRM.

This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, use our products, or engage with our services. By using our website or services, you agree to practices described herein.

This policy complies with Kenya Data Protection Act, 2019 and, where applicable, General Data Protection Regulation (GDPR).

Information you provide directly:

• Name, email address, phone number, and organisation name when you contact us, book a demo, or subscribe to our newsletter
• Account registration information when you sign up for any MylesCorp product
• Payment information processed securely via M-Pesa or our banking partners — we do not store card details
• Communications you send us via email, WhatsApp, or our contact forms

Information collected automatically:

• IP address, browser type, device type, and operating system
• Pages visited, time spent on pages, and referring URLs
• Cookie data and similar tracking technologies (see Section 9)

Information from our products:

• EduMyles and EduRyde: Student and staff records entered by school administrators
• MylesCare: Patient records entered by healthcare facilities
• AgriMyles: Farmer profiles, crop data, and location data
• MylesCRM: Business contacts, sales data, and transaction records

We use information we collect to:

• Provide, operate, and improve our products and services
• Process transactions and send related confirmations
• Respond to enquiries, book demos, and provide customer support
• Send product updates, newsletters, and marketing communications (with your consent)
• Analyse usage patterns to improve our website and products
• Comply with legal obligations under Kenyan law
• Prevent fraud, abuse, and security threats

We will never sell, rent, or trade your personal information to third parties for their marketing purposes.

Under Kenya Data Protection Act, 2019, we process your personal data on following legal bases:

• Contract performance: Processing necessary to provide services you have requested
• Legitimate interests: Processing necessary for our legitimate business interests, provided these do not override your rights
• Consent: Where you have provided explicit consent, such as for marketing communications
• Legal obligation: Processing required to comply with applicable Kenyan laws and regulations

We may share your information with:

• Service providers: Trusted third-party vendors who assist in operating our website and products under strict confidentiality agreements
• M-Pesa / Safaricom: For payment processing — governed by Safaricom's own privacy policy
• SHA and insurance partners: Only for MylesCare users, and only for claims processing purposes
• Legal authorities: Where required by law, court order, or regulatory requirement
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred subject to same privacy protections

We do not share personal data with third parties for advertising or marketing purposes without your explicit consent.

Your data is stored on secure cloud infrastructure hosted on Vercel and AWS. We implement following security measures:

• SSL/TLS encryption for all data in transit
• AES-256 encryption for sensitive data at rest
• Role-based access controls — staff only access data necessary for their role
• Regular security audits and vulnerability assessments
• Multi-factor authentication for internal system access

We retain your personal data only as long as necessary:

• Account data: Duration of your subscription plus 2 years after termination
• Transaction records: 7 years in compliance with Kenyan financial regulations
• Marketing consent records: Until you withdraw consent
• Website analytics data: 26 months
• Support communications: 3 years

Upon expiry, data is securely deleted or anonymised.

Under Kenya Data Protection Act, 2019, you have the right to: access your data, request rectification, request erasure, data portability, object to processing, and withdraw consent at any time. To exercise any right, contact us at privacy@mylescorp.co.ke. We will respond within 30 days.

We use cookies and similar tracking technologies to enhance your experience. For full details please read our Cookie Policy. You can control cookie preferences through your browser settings or our cookie consent banner.

Our website may contain links to third-party websites including our social media pages. We are not responsible for privacy practices of external sites and encourage you to read their privacy policies before sharing any personal information.

Our website is not directed at children under 18. For school-related products (EduMyles, EduRyde), student data is collected and managed by school as data controller — we act as a data processor. If you believe we have inadvertently collected information from a minor, contact us immediately at privacy@mylescorp.co.ke.

We may update this Privacy Policy periodically. Material changes will be notified by updating "Last Updated" date, emailing registered users, and displaying a notice on our website. Continued use after changes constitutes acceptance.

For any questions regarding this Privacy Policy or your personal data: