Privacy by Design.

STC Learn (stc-learn.online) is a financial learning platform developed and operated by STC-Chama, an informal, private group based in Kenya. It supports financial education through public demo quizzes, invited guest Quickfires, and member learning activities.

We aim to collect and use only information reasonably needed to operate STC Learn, provide the learning experience, protect access, and improve the platform. Depending on how you use the site, this may include:

• Member and guest identifiers: Member Quickfire results may be associated with an assigned seat identifier. Invited guest sessions use a guest identifier and roster name so results can be attributed to the correct guest. These identifiers are not the same as anonymity.
• Learning and performance data: When a Quickfire is submitted, the platform may record score, accuracy, average response pace, question-level answer selections, the Quickfire/week, participant type, and submission time. These details are used for results, guest comparisons, member standings, and learning review as applicable.
• Website analytics: The site uses Vercel Analytics to understand general site usage and platform performance. Analytics may process technical information such as page views and general device or geographic information as described by Vercel.

STC Learn is a financial learning platform, not a bank or payment processor. The platform is not designed to request:

• Bank account details, M-Pesa statements, or debit/credit card numbers.
• Mobile money PINs, bank passwords, or authentication credentials.
• Government identification documents or biometric data through the learning experience.

Quickfire submissions are sent through the platform's server-side submission endpoint to an STC-controlled Google Apps Script/Google Sheets workflow. Member results support member standings and learning discussions. Guest results support guest-only standings, comparisons, and evaluation of the guest learning experience. Public demo submissions are intended to remain separate from internal member records.

We do not sell personal information or quiz results to data brokers or advertisers. The platform relies on service providers, including Vercel and Google services, to host the website, deliver analytics, and process submissions. Those providers may process information as needed to provide their services.

Public demo results help us understand whether questions are clear and useful and where participants may struggle. Demo submissions are intended for product evaluation and are not treated as official STC member results.

• What may be recorded: Score, accuracy, average decision pace, question answer selections, and submission time. These details may be used to review question clarity and improve the learning experience.
• Avoid over-identification: The public demo does not ask you to enter your legal name or contact details to submit a result. Technical information may still be processed by hosting or analytics providers as part of delivering the site.
• Separation: Public demo results are intended to be kept separate from the internal STC-Chama member results. Invited guest and member submissions follow their respective reporting paths.

The platform uses browser storage for essential functionality. The guest sign-in process uses a server-set HttpOnly cookie to keep the invited guest session active for up to seven days. This cookie is not accessible to client-side JavaScript. The site also uses browser localStorage for functional state, such as:

• Remembering your visual theme preference (stc_theme).
• Maintaining scoped Quickfire progress and result history on the device during active runs.

STC-Chama retains information for as long as reasonably needed to operate STC Learn, maintain learning and operational records, protect the platform, and meet applicable obligations. Retention may differ between browser-stored progress, guest-session information, analytics, and submitted Quickfire records. Specific deletion periods are not currently published for each category and should be confirmed as the platform's retention schedule is formalised.

Subject to applicable law, you may request access to or correction of personal information associated with you, ask questions about its use, or raise a concern about how it is handled. Because some records use seat or guest identifiers, please provide enough context for us to locate the relevant record without sending passwords or PINs.