Privacy Policy

1. Who is responsible

Rubrica is a product under RCFI, based in Nairobi, Kenya. RCFI is responsible for deciding how and why personal information is used for this website and its waitlist.

For privacy questions or requests, email [email protected]. You can find RCFI at rcfi.co.ke.

2. What this policy covers

Rubrica is in development. This policy covers the current marketing website, waitlist registrations and correspondence with us. Joining the waitlist does not create a school account or give access to the product.

Future school services may involve school, teacher or learner information. Before actual service access, we will provide a separate notice and any relevant school agreement explaining that processing. This website policy does not cover all future product processing.

3. Information we collect

The waitlist asks for your email address and two separate consents: one to receive Rubrica product updates and news about access, and one to have your registration processed in the United States. Both checkboxes start unchecked and must be selected to join.

A saved registration includes your email address and original signup time. Alongside your waitlist membership, we keep a record of the current privacy notice and consent wording versions, when you gave consent, your agreement to each consent and the United States processing destination. If you are already on the waitlist, your existing membership is kept when you give the current consents.

This form does not collect payment details, school records or learner information. Registrations are private, and there is no public list of email addresses. No email is automatically sent when you sign up.

When you visit, our hosting and security providers process request information, including your IP address and information about the request, to deliver the website and protect it from abuse.

If you email us, we receive your email address, your message and any information or attachments you choose to send. Please only send information needed for your enquiry, and avoid sending learner records or sensitive personal information.

4. Why we use information

We use your waitlist email to keep your registration and provide the product updates and access news you agreed to receive. We rely on your update consent for those updates and your separate, explicit consent for processing your registration in the United States. Signup is voluntary. You can browse the website without joining the waitlist, but an email address and both consents are required to register.

We use correspondence to respond to your enquiry and handle requests. We use request information to serve the website, maintain availability and prevent misuse. These activities support our legitimate interests in operating the website securely and responding to people who contact us, subject to your rights. Where a legal obligation requires information to be used or retained, that obligation may provide a separate basis.

5. Service providers and sharing

We use service providers for website hosting and delivery, private registration storage, security and email correspondence. They process the information needed for those services. Access to registration information is limited to people and providers who need it for the purposes described in this policy. For details about these providers and how they handle your information, email [email protected].

We do not publish or sell waitlist registrations. Information may also be disclosed where required by law or where necessary to address misuse or protect legal rights, subject to applicable law.

6. Processing outside Kenya

We store and process your waitlist registration and consent record in the United States to maintain your membership and manage the product updates and access news you requested. We rely on your separate, explicit consent for this transfer and processing. An earlier agreement to receive updates is consent to updates only; it is not treated as consent to processing in the United States.

Data protection laws and remedies in the United States may differ from those in Kenya. You may not have the same protections or ways to seek redress if your information is misused. Please consider this risk before choosing whether to join the waitlist.

Joining is voluntary. You can decline either consent and continue browsing the website without registering. You can withdraw either consent by emailing [email protected]. If you withdraw consent to US processing, we will remove you from the active waitlist and stop using your email for updates. We will handle deletion and any limited retention as described below. Withdrawal does not affect the lawfulness of processing that took place before withdrawal.

Hosting, security and email services may also involve processing outside Kenya. For details about our service providers, processing locations and how your information is handled, email [email protected].

7. How long we keep information

We keep your waitlist registration while it is needed for the product updates and access news you requested. If you withdraw consent, we stop using your email for those updates and remove it from the active waitlist. We delete information when it is no longer needed for its purpose, unless a legal obligation or the handling of a legal claim requires limited information to be retained.

We keep correspondence for as long as needed to handle your enquiry and any related follow-up. Request and security information is kept only for as long as needed to operate and protect the website or meet applicable legal requirements.

8. Your choices and rights

You may ask us to explain how your information is used, provide access, correct inaccurate information or delete information. You may also object to processing and withdraw your consent to updates. Your rights apply under Kenyan data protection law and may be subject to legal conditions.

To make a request or stop receiving updates, email [email protected], preferably from the address you registered. We may ask for information needed to verify your identity before acting on a request. Withdrawing consent does not affect the lawfulness of processing that took place before withdrawal.

The Office of the Data Protection Commissioner explains your rights as a data subject. If you have a concern about how your information is handled, you can contact us or raise a complaint with the Office of the Data Protection Commissioner.

9. Security and children’s information

Registrations are held in private storage. We limit access and use hosting and security services to help protect the website and its information. No online service can guarantee complete security. Please email [email protected] if you believe information has been exposed or misused.

The waitlist is for people interested in Rubrica updates and is not designed to collect children’s information or learner records. Please do not submit that information through the waitlist. If a child’s information has been sent to us, contact us so we can review it and take appropriate action.

10. Cookies, external websites and changes

The current website does not use analytics or advertising cookies or store persistent preferences in your browser. Our Cookies Policy explains this and the difference between browser storage and necessary request processing.

External websites have their own privacy practices. We may revise this policy as the website or its processing changes. The effective date on this page identifies the current version. If a change introduces a purpose requiring consent, we will seek that consent before using your information for that purpose.