1. Who we are
Skillflow is an online learning platform that connects students with notes, video lessons and exams published by their teachers. This policy covers the student portal, the teacher portal, the exam app and the Skillflow website.
Skillflow is operated from Tanzania. For anything in this policy, write to info@skillflowtz.com.
2. What we collect
We only ask for information the platform actually uses. Here is all of it.
| Information | Why we have it |
|---|---|
| Account details Name, email address, phone number (optional), password, profile picture |
To create your account, sign you in, and contact you about your account. Passwords are stored only as an irreversible hash — we cannot read yours. |
| Study profile Education level, class or form, school, region, subjects, learning goal, gender, date of birth |
Collected during sign-up so the catalogue shows material for your level and subjects rather than everything at once. Every field except your level can be skipped. |
| Teaching profile School, position, years of experience, subjects and levels taught |
For teacher accounts, so students can see who published a lesson. |
| Learning activity Lessons opened, how far through you are, watch history, watchlist, teachers you follow, likes and comments |
To let you pick up where you stopped, keep your library, and show your progress. |
| Exams and results Your answers, scores, and the comments your teacher leaves |
To mark your work and give you and your teacher a record of it. |
| Purchases and payments What you bought, amount, currency, payment reference and status |
To unlock what you paid for and keep a receipt. See Payments — we do not receive your PIN or wallet credentials. |
| Technical information Sign-in token held in your browser, and server logs of requests and errors |
To keep you signed in and to find and fix faults. We do not use advertising or tracking cookies. |
3. How we use it
- To run your account and keep you signed in.
- To show learning material that matches your level and subjects.
- To take payment and unlock what you have bought.
- To mark exams and return results and feedback.
- To send you service messages — email confirmation, password resets, and notifications about your lessons and results.
- To keep the platform secure, prevent abuse, and fix problems.
We do not use your information to build advertising profiles, and we do not sell or rent it to anyone.
4. Signing in with Google
You can sign in with a Google account instead of a password. When you do, Google confirms your identity and passes us your name, email address, profile picture and a Google account identifier. We never see your Google password.
If you already have a Skillflow account with the same confirmed email address, we link Google to that existing account rather than creating a second one — so your history stays intact and you can afterwards sign in either way.
This is handled through Firebase Authentication, a Google service. You can disconnect Skillflow from your Google account at any time in your Google security settings.
5. Payments
Payments are processed by our mobile money provider. When you pay, you confirm the transaction on your own phone with your provider.
Your PIN, wallet credentials and full mobile money account details never reach Skillflow's servers. We receive only the amount, the currency, a payment reference and whether the payment succeeded — enough to unlock your purchase and show you a receipt.
6. Who we share information with
We share only what each of these needs to do its job:
| Who | What they receive |
|---|---|
| Your teachers | Your name and your submitted exam answers and scores, so they can mark your work. Teachers do not see your payment details or your date of birth. |
| Google (Firebase) | Authentication when you sign in with Google, and secure storage of lesson files and images. |
| Our mobile money provider | The payment amount and reference needed to complete a transaction. |
| Google Gemini (AI) | Only content a teacher chooses to send when generating draft exam questions — a topic or a document they upload. Student work is never sent to an AI service. |
| Our email provider | Your email address and the message, to deliver confirmation and password-reset emails. |
We may also disclose information if the law requires it, or to protect the rights and safety of our users.
7. Where your information is stored
Account records, results and purchase history are held in our own database on our hosting provider's servers. Lesson files — documents, videos, images and profile pictures — are held in Google Firebase Storage. Some of these providers operate servers outside Tanzania, which means your information may be processed in another country.
8. How long we keep it
- While your account is open — your profile, purchases, results and activity are kept so you can use them.
- After you delete your account — we remove your personal details. Records we are required to keep, such as payment receipts, are retained for as long as the law requires.
- Server logs — kept briefly for fault-finding and security, then discarded.
9. Your rights
You can ask us at any time to:
- Give you a copy of the information we hold about you.
- Correct anything that is wrong — most of it you can edit yourself on your profile page.
- Delete your account and the personal information attached to it.
- Stop sending you non-essential messages.
Write to info@skillflowtz.com and we will respond within 30 days. If you are not satisfied with our answer, you may complain to the relevant data protection authority.
10. Younger students
Skillflow is used by school students, and some of them are under 18. We ask for a date of birth so that material can be suggested appropriately, and we collect no more from a younger student than from anyone else.
If you are under 18, please use Skillflow with the knowledge of a parent, guardian or teacher. A parent or guardian may contact us to see, correct or delete a child's information, and we will act on that request.
11. How we protect your information
- Traffic between your device and Skillflow is encrypted in transit.
- Passwords are stored only as an irreversible hash, never as readable text.
- Paid documents are delivered by our servers only after checking that your account is entitled to them — the underlying files are not published as public links.
- Email addresses are confirmed by a link we send you, and password reset links expire and can only be used once.
- Signing out, or resetting your password, invalidates your existing sign-in sessions.
No online service can promise perfect security, but if a breach ever affects your information we will tell you and the relevant authority without undue delay.
12. Changes to this policy
If we change what we collect or how we use it, we will update this page and change the date at the top. Significant changes will also be announced inside the app.
13. Contact us
Questions, requests or complaints about privacy:
info@skillflowtz.com