This Privacy Policy explains how Abshir China (“we”, “our”, or “us”), a company registered in Kenya, collects, uses, stores, and protects your personal information when you use the Abshir China platform — including the website at abshirmandarin.com, the iOS and Android mobile applications, and all related services (collectively, the “Platform”).
The Platform is an educational service for Mandarin Chinese language learning and university admissions facilitation. By using the Platform, you agree to the collection and use of your information as described in this policy.
| Data | When collected | Purpose |
|---|---|---|
| Full name | Account registration | Personalise your experience and identify you in the community |
| Email address | Registration, payments, notifications | Log in, send receipts and status updates |
| Password (hashed) | Account security | Authenticate your identity — stored using industry-standard hashing, never in plain text |
| Profile photo | Optional, profile settings | Display your avatar in the community and dashboard |
| Country / location | Optional, student profile | Tailor content and display your flag in community |
| Date of birth / age | Optional, student profile | Age verification and content recommendations |
| Passport scan | Admissions applications only | Required by Chinese university application process |
| Academic transcripts | Admissions applications only | Required by Chinese university application process |
| Language test scores | Admissions applications only | Required by Chinese university application process |
| Financial documents | Admissions applications only | Required by Chinese university application process |
| Payment details | Stripe-processed payments | Process course fees and admissions fees — card details never touch our servers |
| M-Pesa phone number | M-Pesa STK Push payments | Initiate mobile money payment requests |
| Application details | Admissions form | Process your university application |
| Community posts & comments | When you post in the community | Display your contributions to other platform members |
| Organisation details | Partnership applications | Review and process your partnership request |
| Partnership proposal (PDF) | Partnership applications | Evaluate your partnership proposal |
| Data | When collected | Purpose |
|---|---|---|
| Course progress & completion | As you watch lessons and complete quizzes | Track your learning journey and enable auto-resume |
| Quiz scores and attempts | When you attempt quizzes | Calculate your leaderboard rank and display your progress |
| Lesson timestamps | During video playback | Resume playback from where you stopped |
| Device type and browser | Session metadata | Ensure the platform works correctly on your device |
| IP address | Server logs | Rate-limiting, fraud prevention, and payment security |
| Authentication tokens | When you log in | Keep you securely logged in across sessions |
| App version and OS | Mobile app usage | Ensure compatibility and deliver updates |
The Platform uses browser local storage and cookies to store authentication tokens, user preferences, and form draft data (so you can resume incomplete forms). This data is stored on your device and is not transmitted to our servers unless explicitly submitted. You can clear this data at any time through your browser or app settings.
In accordance with the Kenya Data Protection Act 2019, we process your personal data on the following legal bases:
All data we collect is used exclusively to provide and improve the educational services on the Abshir China platform. We do not sell, rent, or share your personal data with third parties for their own marketing or advertising purposes. We do not use your data for profiling, automated decision-making, or targeted advertising.
Your data is stored on Supabase infrastructure (PostgreSQL database and file storage), hosted on Amazon Web Services (AWS). Our web application is deployed on Vercel. These services may store and process your data in data centres located outside your country of residence, including the United States and the European Union.
By using the Platform, you consent to the transfer of your personal data to these jurisdictions. We ensure that all third-party service providers maintain appropriate data protection standards and contractual safeguards.
In the event of a data breach that may affect your personal information, we will notify affected users and the Office of the Data Protection Commissioner of Kenya within 72 hours of becoming aware of the breach, in accordance with the Kenya Data Protection Act 2019.
We use the following third-party services to operate the Platform. Each operates under its own privacy policy. We do not share your data with any third party beyond what is necessary to deliver the Platform services described in this policy.
Supabase
Database, authentication, and file storage
Stripe
International card payment processing
Safaricom M-Pesa (Daraja)
Mobile money payments for East African users
Vimeo
Video hosting for course lessons
Resend
Transactional email delivery (receipts, notifications)
Vercel
Web application hosting and deployment
Apple App Store
iOS app distribution and in-app purchases
Google Play Store
Android app distribution and in-app purchases
The mobile application may send push notifications for educational purposes — including course reminders, lesson updates, quiz deadlines, and application status changes. You can enable or disable push notifications at any time through your device settings. Disabling notifications will not affect your access to the Platform or its educational content.
We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:
Under the Kenya Data Protection Act 2019 and applicable international privacy laws, you have the right to:
To exercise any of these rights, contact us at abshirafc@gmail.com. We will respond to your request within 30 days.
You may request deletion of your account at any time by using the account deletion option in your account settings or by emailing us at abshirafc@gmail.com. Upon deletion:
The Platform is intended for users aged 17 and older for independent account creation. Users aged 13 to 16 may use the Platform only under a parent or guardian-managed account. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal data, contact us immediately and we will delete it. All content on the Platform is educational in nature and appropriate for users aged 13 and older.
We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and/or in-app notification and update the “Last updated” date at the top of this page. Continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.
For privacy questions, data requests, or concerns: