Privacy Policy

Last updated: 12 November 2026

IGLA Learn (“IGLA Learn”, “we”, “us”), operated by the Institute of Global Leadership and Administration (IGLA), Harare, Zimbabwe, provides a hosted school platform and a course platform (formerly known as EduVenture). This policy explains what personal data we collect, why, and the rights you have.

1. Data we collect

• Account data: name, email address, phone number (optional), password (stored hashed), user type and role.
• School data: school profile, logo, colours, student and staff records you upload, enrolments, grades, attendance, fee records and messages.
• Learning data: course enrolments, progress, quiz and assignment submissions, grades and certificates.
• Technical data: IP address, browser type, session cookies and security logs.
• Content uploads: files you upload (documents, images, videos) for lessons, assignments or profiles.

2. Why we process it

• To provide the platform: accounts, classes, courses, grading, notices, certificates and payments.
• To secure the platform: fraud prevention, rate limiting and audit logs.
• To communicate: transactional emails and notices you have subscribed to.
• To improve the service: aggregated, de-identified statistics.

Schools are the data controllers of their students' records; IGLA Learn acts as the data processor. We process student data only on the school's documented instructions.

3. Children's data

Our school platform is used by minors. Schools are responsible for obtaining any required parental or guardian consent for enrolling children and for the lawfulness of the data they upload. We collect only what is necessary for schooling and never use student data to train AI models by default.

4. AI features

AI tools (lesson drafting, quiz generation, marking assistance and the student tutor) send the minimum necessary text to our AI providers under terms that do not permit them to train on your data. AI usage is quota-limited and logged for school administrators.

5. Sharing

We share data only with: infrastructure and email providers acting on our instructions; payment gateways (to process payments); and a school's own authorised staff. We never sell personal data.

6. Retention

We keep account and school records while a licence is active. After termination, a school may export its data at any time; we delete or anonymise remaining personal data within 90 days, except where the law requires retention.

7. Your rights

Subject to Zimbabwe's Cyber and Data Protection Act [Chapter 12:07], you may request access, correction, deletion or export of your personal data, and object to processing. Contact your school administrator (for school records) or info@igla.africa for platform records.

8. Security

We apply transport encryption (TLS), hashed passwords, role-based access control, audit logs, and encrypted off-site backups with tested restores.

9. Cookies

We use essential cookies for sessions and security. Analytics cookies are not set by default.

10. Changes and contact

We will post any changes on this page. Questions or data-protection requests: IGLA, Harare, Zimbabwe · info@igla.africa · +263 772 321 477.