1. Introduction

Welcome to PlanFi ("we," "our," or "us"), an AI-powered educational technology platform operated by Draxford Technologies Limited, a company registered in the Republic of Zambia. This Privacy Policy explains how we collect, use, store, disclose, and safeguard your personal information when you access or use our platform at planfi.app and any associated services (collectively, the "Service").

PlanFi is designed exclusively for Zambian educators and educational professionals to create curriculum-aligned lesson plans, assessments, activity sheets, schemes of work, records of work, weekly forecasts, and related educational content using artificial intelligence technology.

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this Privacy Policy, you must discontinue use of the Service immediately.

2. Information We Collect

2.1 Account Registration Information When you create an account, we collect: - Full name - Email address - Phone number (where provided) - School or institution name - Teacher Service Number (TS Number) - Department, subject areas, and grade levels taught - Province and district information - Password (stored in hashed form only)

2.2 Content and Educational Data When you use the Service, we collect and store: - AI-generated lesson plans, lesson notes, tests, activity sheets, schemes of work, records of work, and weekly forecasts - Selected curriculum parameters (grades, subjects, topics, subtopics, competencies) - Customisations, edits, and modifications you make to generated content - PDF downloads and export history - Reviews and feedback you submit

2.3 Payment and Transaction Data - Subscription plan selections and billing cycle - Payment transaction references and status - Mobile money or payment provider identifiers (we do not store full card numbers or mobile money PINs)

2.4 Automatically Collected Information - IP address and approximate geolocation - Device type, operating system, and browser information - Login timestamps and session duration - Pages visited, features used, and interaction patterns - Referring URLs and search terms used to find our Service

2.5 Cookies and Similar Technologies We use cookies and similar tracking technologies to maintain your session, remember your preferences, and analyse usage patterns. Essential cookies are required for the Service to function. You may disable non-essential cookies through your browser settings, though this may affect certain features.

3. How We Use Your Information

We process your personal information for the following purposes:

Service delivery: Generate AI-powered educational content aligned with the Zambian curriculum (ECZ standards)
Account management: Create and maintain your account, authenticate your identity
Payment processing: Process subscription payments, issue receipts
AI processing: Send content generation parameters to our AI service providers
Communication: Send transactional emails, service updates, subscription reminders
Service improvement: Analyse usage patterns, improve AI output quality
Security: Detect, prevent, and respond to security incidents
Legal compliance: Comply with applicable laws and regulations

4. Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of all data in transit using TLS 1.2 or higher
Encryption of sensitive data at rest
Passwords stored using industry-standard cryptographic hashing (bcrypt)
Role-based access controls limiting internal access to personal data
Regular security assessments and vulnerability monitoring
Database access restricted to authorised personnel and systems only

No method of electronic transmission or storage is completely secure. In the event of a data breach, we will notify affected users and relevant authorities as required by applicable law.

5. Data Sharing and Third-Party Services

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following limited circumstances:

AI service providers: We use OpenAI's API to generate educational content. Curriculum parameters (not personal identity) are transmitted for processing.
Authentication providers: Third-party sign-in providers receive limited information during authentication.
Payment processors: Receive only information necessary to complete transactions.
Legal obligations: Where required by law, court order, or government regulation.
Ministry of Education / ECZ: Aggregated, anonymised statistical data only.
Business transfers: In event of merger, acquisition, or asset sale.

6. Data Retention

Account data: Retained for account duration + 12 months after deletion
Generated content: Retained for account duration, deletable anytime
Payment records: Minimum 7 years (Zambian tax regulations)
Usage logs: Automatically purged after 90 days
Cookies: Session cookies expire on browser close; persistent cookies max 12 months

Upon account deletion, we will remove or anonymise your personal information within 30 days, except where retention is required by law.

7. Your Rights

Subject to applicable law, you have the following rights:

Right of access: Request a copy of your personal data
Right to rectification: Request correction of inaccurate data
Right to erasure: Request deletion of your account and data
Right to data portability: Export your data in machine-readable format
Right to restrict processing: Limit how we process your data
Right to object: Object to direct marketing processing
Right to withdraw consent: Withdraw consent at any time

Contact support@planfi.app to exercise these rights. Response within 14 business days.

8. Children's Privacy

PlanFi is intended exclusively for educators aged 18+. We do not knowingly collect personal information from individuals under 18. The Service does not collect or store any student personal information.

9. International Data Transfers

Your information may be transferred to countries other than Zambia (including the United States for AI processing via OpenAI). We ensure appropriate safeguards through data processing agreements with service providers.

10. Changes to This Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. When we make material changes, we will update the "Last updated" date, post the revised policy, and notify you via email for significant changes.

Your continued use of the Service after changes constitutes acceptance.

11. Governing Law

This Privacy Policy is governed by the laws of the Republic of Zambia, including the Data Protection Act No. 3 of 2021. Disputes shall be subject to the exclusive jurisdiction of the courts of Zambia.

12. Contact Us

Draxford Technologies Limited Email: support@planfi.app Address: Lusaka, Zambia

We will acknowledge your inquiry within 3 business days and provide a substantive response within 14 business days.