Privacy Policy

Last updated: May 13, 2026

1. Introduction

Mctaba Academy ("we", "us", "our") is operated by Mctaba Labs. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at academy.mctaba.com and use our services.

2. Information We Collect

We collect information you provide directly to us, including:

  • Account information: first name, last name, email address, and password when you create an account.
  • Payment information: processed securely through Paystack. We do not store your card details or M-Pesa PIN. Paystack handles all payment data in compliance with PCI-DSS standards.
  • Usage data: course progress, lesson completion status, and learning activity within the platform.
  • Device and browser information: IP address, browser type, operating system, and referring URLs collected automatically through server logs.

3. How We Use Your Information

  • To create and manage your account.
  • To process payments and grant access to purchased courses.
  • To track your learning progress and provide personalized course recommendations.
  • To send transactional emails (enrollment confirmations, email verification).
  • To improve our platform, content, and user experience.
  • To respond to your inquiries and provide customer support.

4. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only with:

  • Paystack: to process payments securely.
  • Resend: to deliver transactional emails.
  • Vercel: to host and serve the platform.
  • Law enforcement: if required by law or to protect our legal rights.

5. Data Security

We implement industry-standard security measures to protect your information. Passwords are hashed using bcrypt. All data is transmitted over HTTPS. Payment processing is handled entirely by Paystack, a PCI-DSS compliant payment processor.

6. Cookies

We use essential cookies to maintain your login session and remember your authentication state. We do not use tracking cookies or third-party advertising cookies.

7. Your Rights

You have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Withdraw consent for marketing communications at any time.

To exercise any of these rights, contact us at hello@mctaba.com.

8. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy, contact us at hello@mctaba.com.