Privacy policy

Last updated: 13 November 2026

This policy explains what personal data multilecture collects when you use www.multilecture.com and our mobile app, why we collect it, who we share it with, and the choices you have.

Who we are

multilecture is an online learning platform operated by StroomUp, based in Kigali, Rwanda. We are responsible for the personal data described in this policy. You can reach us at the contact details at the end of this page.

What we collect

Account details: your name, email address, username, password (stored only as a secure hash), and optionally a profile photo, bio and time zone.
Google sign-in: if you choose to sign in with Google, we receive a small set of basic profile information from your Google account. This is explained in full in the "Google user data" section below.
Learning activity: the trainings you enrol in, your progress, quiz and assignment answers, the code you write and run, the spreadsheets and documents you work on in Excel and Word exercises, the files you create in virtual lab machines, attendance at classes, and the certificates you earn.
Live classes: your name as shown in the class, and your camera, microphone, chat and screen share while you choose to turn them on. We do not store audio or video unless the instructor records the class; when a class is being recorded, this is shown in the classroom, and the recording is available only to the people in that training.
What you post: reviews, discussion posts, comments, and messages you send to the study assistant.
Instructors: the information in your application to teach and the documents you upload for verification, such as diplomas and their notarisation details. Instructors who teach in person also provide venue addresses.
Payments: the orders you place and their status. Payments are processed by our payment provider; we do not store your mobile money PIN or card details.
Mobile app and notifications: if you use our Android or iOS app and allow notifications, we store a notification token that identifies the app on your phone, the type of phone (Android or iOS), and when it was last used. We use it only to send you notifications. The app asks your phone's permission before using your camera, microphone, photos or files, and uses them only for the feature you opened, such as joining a live class or uploading an assignment.
Technical data: your IP address, device and browser information, and records of sign-ins and security-related actions, which we keep to protect your account.

How we use it

To provide your account, trainings, live classes, labs, assessments and certificates.
To keep your account secure, including the one-time codes we email at sign-in.
To process payments and pay instructors.
To send you emails and push notifications about your account, your trainings, upcoming classes and the notifications you have chosen.
To answer your questions in the study assistant and to help instructors write and grade assessments.
To verify instructors, prevent abuse and meet our legal obligations.

We do not sell your personal data, and we do not use it for third-party advertising.

Google user data

You can create a multilecture account, or sign in to an existing one, with your Google account. This section explains exactly what we receive from Google and what we do with it.

What we access

When you choose "Continue with Google", Google asks your permission to share the following with multilecture. We request only the openid, email and profile permissions, which give us:

your email address, and whether Google has verified it;
your first and last name;
your Google account ID, a number that identifies your Google account.

Google also includes a link to your profile picture and your language setting; we do not save them. We never receive your Google password. We do not request access to, and cannot see, your Gmail, Google Drive, Google Calendar, contacts, YouTube, or any other Google service or data.

How we use it

Email address: to create your account, or to find your existing multilecture account with the same address and link it to Google. Because Google has verified the address, we mark your email as confirmed and do not send you a separate verification code. We also use it to send you account emails, as for any other member.
Name: to fill in your name on your new profile. You can change it at any time.
Google account ID: to recognise you the next time you sign in with Google, even if you change your email address.

We use Google user data only to sign you in and to run your multilecture account. We do not use it for advertising, we do not sell it, and we do not use it to develop, improve or train AI or machine-learning models.

How we store and protect it

Your email address, name and Google account ID are stored in your account record in our database, on servers run by our hosting provider. Data travels over encrypted (HTTPS) connections. Access to the database is limited to the systems that run the platform and the staff who maintain it. We check every sign-in token Google sends us: that Google signed it, that it was issued for multilecture, and that it has not expired. We do not keep the Google sign-in tokens themselves after you are signed in.

Who we share it with

We do not share, transfer or disclose Google user data to anyone, except:

the hosting provider that stores our database, which processes it only on our behalf;
our email provider, which receives your email address only to deliver our emails to you;
where the law requires it, or with your consent.

Your Google account ID and email address are never shown to other members. Your name appears on your profile, your certificates, and next to things you post, as described in "What others can see" below.

How long we keep it, and how to delete it

We keep your Google user data for as long as your multilecture account exists. To delete it:

Delete your account: in the app or on the website, open Profile, choose Delete account and enter the code we email you (see our delete account page). This deletes your account at once, including your email address, name and Google account ID. You can also email us from the address on your account and we will delete it within 30 days. We keep payment records where the law requires it, without your name or contact details.
Disconnect Google only: remove multilecture from your Google account at myaccount.google.com/connections. This stops Google sharing your data with us. To keep using your account without Google, use "Forgot password" on our login page to set a password. You can also ask us to remove the stored Google account ID from your account.

Limited Use

multilecture's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What others can see

Your username and profile appear next to the reviews and discussion posts you write. Instructor profiles are public. Anyone with a certificate's code can check it online, which shows the name on the certificate and the training it was earned for. Your instructors can see your progress and your submissions in their trainings.

Who we share it with

We share data only with the service providers we need to run the platform, and only for that purpose:

Google, when you choose to sign in with Google.
Our payment provider, to process your payments.
Our hosting and storage providers, who store the platform's data and files.
Our email provider, to deliver emails to you.
Google Firebase Cloud Messaging, which delivers push notifications to the mobile app. It receives your phone's notification token and the text of the notification.
Anthropic, which provides the AI behind the study assistant and some assessment tools. Your questions to the assistant, and the lesson content they are about, are sent to it to generate answers.
Our video conferencing server, which hosts live classes and passes your audio and video to the other people in the class.

We may also disclose data when the law requires it, or to protect the rights and safety of our users.

Where your data is stored

Our servers and service providers may be located outside your country. When your data is transferred abroad, we use providers that protect it to the standard this policy describes.

Cookies

We use only the cookies needed to run the site: one keeps you signed in, and one protects forms against forgery. Your browser also remembers display preferences, such as light or dark theme. We do not use advertising cookies or third-party tracking.

How long we keep it

We keep your data for as long as your account is open. A phone's notification token is deleted when you sign out of the app, or when Google tells us the app is no longer installed. Recordings of live classes are deleted automatically after one year, or sooner if the training's organisation sets a shorter period. When you delete your account, we delete your personal data straight away (or within 30 days if you ask us by email). Payment records are kept longer where the law requires it, without your name or contact details. Certificates you earned are deleted with your account and can no longer be verified.

Your choices and rights

You can view and edit your profile at any time in your account settings. You can turn off push notifications in your phone's settings, and change which notifications you receive in your notification settings. You can ask us for a copy of your data, ask us to correct it, or delete your account yourself on our delete account page or in the app (Profile, then Delete account). To make another request, email us from the address on your account; we will reply within 30 days. You may also complain to your local data protection authority; in Rwanda this is the National Cyber Security Authority.

Security

We use encrypted connections, hash passwords, keep private files behind access checks, and email one-time codes at sign-in. No system is perfectly secure, so please keep your password private and tell us if you suspect misuse of your account.

Children

multilecture is not intended for children under 16 without the involvement of a parent, guardian or school.

Changes

If we change this policy, we will update the date above. If the changes are significant, we will tell you by email or on the site before they take effect. In particular, if we change what Google user data we access, or how we use, store or share it, we will update this policy and notify you by email first. Where the change needs it, we will ask for your consent again before using your Google user data in the new way.

Contact

Questions about this page? Email stroomup@gmail.com.