Privacy

What this service shows, and what it keeps

How certificate checks and learner accounts handle personal information.

Draft for eMsingi to review.Written from how the system is designed. The bracketed items need eMsingi’s answer, and the final text needs checking against the Kenya Data Protection Act, 2019 before launch.

What a certificate check shows

The recipient’s name, the course, the dates it was held, the issue date, the certificate number and whether it is valid. For a revoked certificate, also the date it was revoked and a reason category. Never the recipient’s email, the verification code, or any internal note.

What we record when someone checks

That the certificate was checked, and when. We don’t record who checked it, and checking needs no account.

Learner accounts

Your name and the email you gave when you registered for the course, so we can send you a sign-in link and show you your certificates. You can share a certificate’s public link; that link shows only what a certificate check shows.

Who can see the register

eMsingi programme staff. Every change they make is written to an audit log that none of them can edit.

How long we keep it

Certificate records are kept [for as long as the certificate may need to be verified — eMsingi to confirm a period]. Check records are kept for [period]. Reports sent through “Report a problem” are kept for [period].

Questions or corrections

Contact [eMsingi data protection contact]. If something on your certificate is wrong, the fastest route is Report a problem.