Legal

Privacy Policy

Last updated September 1, 2026

This explains what information Somastreaming collects, why, and the choices you have about it.

1. Information we collect

Account information — name, email address, and school (where applicable), collected when you or your school registers you for an account. Authentication is handled by our identity provider, Supabase.

Payment information — when you pay for a title via M-Pesa, we receive confirmation of the transaction (amount, phone number, and a reference code) from Safaricom. We do not receive or store your M-Pesa PIN.

Usage information — which titles you watch, playback progress, device type, and general diagnostics we use to keep streaming reliable.

2. How we use your information

  • To create and secure your account, and confirm your entitlement to a title;
  • To process payments and keep a record of your purchases;
  • To resume playback where you left off;
  • To operate, maintain, and improve the streaming experience; and
  • To communicate service updates, or respond to a support request you raise.

3. Cookies & local storage

We use essential cookies and browser storage to keep you signed in and remember basic preferences (like a theme or a paused subtitle setting). We do not use these for third-party advertising.

4. Who we share information with

We share the minimum information needed with the vendors that run the service on our behalf:

  • Supabase — authentication and database hosting;
  • Bunny.net — secure video delivery and playback tokens;
  • Safaricom / M-Pesa — payment processing.

We do not sell your personal information. We may disclose information if required by law, or to protect the rights, safety, or property of Somastreaming or our users.

5. Data retention

We keep account and payment records for as long as your account is active and for a reasonable period afterward to meet accounting and legal obligations. You can request deletion of your account as described in Section 7.

6. Security

We use industry-standard safeguards — encrypted connections, access controls, and row-level security on our database — to protect your information. No system is completely secure, so we can’t guarantee absolute security, but we work to keep these protections current.

7. Your rights & choices

You can review and update your account details from your dashboard settings at any time. To request a copy of your data, or to request that we delete your account, email support@somastreaming.co.ke from the address on your account. We will respond within a reasonable time and may need to verify your identity first.

8. Students & school accounts

Where an account is created by a school on behalf of a student, the school is responsible for obtaining any consent required from the student or their parent/guardian before submitting the student’s information to us. Schools can request removal of a student’s account at any time.

9. Changes to this policy

We may update this Privacy Policy as the service changes. We will update the “last updated” date above, and material changes will be highlighted in the app.

10. Contact us

Questions about this policy or your data can be sent to support@somastreaming.co.ke.