Information Security & Confidentiality Charter

Privacy Policy & Data Protection

How SPECS Motivational & Mentorship Hub protects your identity, reflection answers, growth reports, and payment records under the laws of Kenya.

Effective Date: November 01, 2026•Version: 2.1 (Amended)•ODPC Kenya Compliant

1. Overview & Organizational Commitment

SPECS Motivational & Mentorship Hub (abbreviated as SMMH, herein referred to as "SPECS," "the Organization," "we," "us," or "our") is committed to preserving the fundamental human right to privacy, confidentiality, and data protection for all our participants, subscribers, corporate clients, and public visitors.

Personal growth, emotional repair, domestic reconciliation, and leadership development require genuine vulnerability and total honesty. We recognize that individuals share sensitive aspects of their domestic and vocational circumstances during their studies. Therefore, SPECS enforces strict organizational, technical, and cryptographic firewalls to guarantee that your disclosures remain confidential.

3. Information We Collect

Depending on how you engage with our platform (public visitor, enrolled student, subscriber, bookshop customer, or corporate client), we collect and process the following categories of data:

A. Identity & Contact Records

Full legal name, email address, telephone/WhatsApp contact number, nationality, town of residence, and account password hashes.

B. Academic & Program Selections

Chosen package (1, 2, 3, or 4), program level (Unit, Module, Full Program), delivery mode (Online, In-Person, Hybrid), and selected Fundamental Units.

C. Reflection Submissions

Honest responses submitted to guided reflection prompts regarding personal habits, domestic challenges, financial discipline, and workplace decisions.

D. Transaction Data

M-Pesa transaction reference codes, card payment tokens, billing receipts, and bank deposit verification slips. (We do not store complete raw card PINs or CVVs).

4. Absolute Confidentiality of Reflections & Growth Reports

Sections 4.1, 4.2, and 27 of our organizational specifications establish that Personal Growth & Development Reports and submitted reflection answers are classified as confidential personal records:

Restricted Access Boundaries: Reflection responses are visible strictly to the individual participant and the authorized SPECS counselor and reviewer assigned to formulate that specific report.

Private Dashboard Publishing: Final growth reports and personalized counsels are delivered exclusively into the participant's authenticated personal dashboard. They are never published publicly, indexed by search engines, or distributed via unencrypted broadcast lists.

Protected Digital Media: Signed digital report downloads and PDF summaries are served via access-controlled, time-limited cryptographic tokens. Private report files are never exposed through public image or document URLs.

5. Group Coordinator Firewalls & Member Privacy

Under Sections 6.6 and 8.2 of the SPECS guidelines, families, companies, educational institutions, and public offices may sponsor cohorts of up to 30 members under a single administrative group coordinator. The platform enforces an absolute firewall between group administration and individual counseling:

Strict Non-Disclosure to Sponsoring Coordinators:

A group coordinator, employer HR department, institutional head, or family coordinator shall never be granted access to the individual reflection responses, private weaknesses, or Growth Reports of participating members merely because they facilitated enrollment or paid the group tuition.

Coordinators receive only aggregate operational billing confirmations and high-level seat completion statuses (e.g., "Seat 04: Active / Completed"), ensuring participants can reflect honestly without fear of workplace or domestic repercussions.

6. Human Evaluation vs Automated Decision-Making

Section 35 of the Kenya Data Protection Act grants individuals the right not to be subjected to decisions based solely on automated profiling or AI processing:

  • Prohibition of Bot Grading: SPECS explicitly prohibits the automated generation of personal growth evaluations or mentorship counsels by AI language models.
  • Human Accountability: Every report identifies the human staff member responsible for evaluation and the supervisor who authorized publication.
  • Right to Human Review: If you feel a counsel misunderstood your disclosure, you possess the right to request clarification or reassignment directly through your portal.

7. Payment & Financial Data Security

All payment processing on the SPECS web platform is governed by strict server-side validation and trusted cryptographic gateways:

• M-Pesa Integrations (Daraja API): Transactions initiated via STK Push are authenticated directly on Safaricom's secured telecommunications infrastructure. Entitlements are activated only upon verified cryptographic webhook confirmation.

• Card Payment Gateways: Card processing complies with PCI-DSS Tier 1 standards. Card numbers and security codes never touch or reside on SPECS application servers.

• Bank Transfers: Bank payment slips uploaded for manual reconciliation are archived in encrypted private storage accessible solely to verified Finance Officers.

8. Data Retention & Secure Storage Controls

Participant records, certificates, digital transcripts, and published reports are maintained in high-availability, encrypted cloud databases (PostgreSQL with SSL encryption at rest and in transit).

We retain student academic transcripts and completion records indefinitely to enable verification by the participant or prospective institutions upon request. Reflection drafting notes and administrative revision tickets are purged 24 months following program completion.

9. Your Legal Rights as a Data Subject

Under the Kenya Data Protection Act, 2019, you enjoy the following rights regarding your personal information:

Right to be Informed: Transparent notice of how your data is used (fulfilled by this policy).
Right of Access: The right to view all personal records and reports held in your dashboard.
Right to Rectification: The right to update misleading, incomplete, or outdated profile details.
Right to Erasure ("Right to be Forgotten"): The right to request account deletion, subject to financial record laws.

10. Contact Our Data Protection Desk

If you have questions, complaints, or wish to exercise your statutory rights regarding data privacy, contact the Office of the Chief Executive Officer or our Data Protection Desk:

Organization: SPECS Motivational & Mentorship Hub (SMMH)

Executive Leadership: Friday Kinara (CEO & Founder)

Official Email: specsmentors@gmail.com

Physical Address: Nairobi, Kenya

Supervisory Authority: Office of the Data Protection Commissioner (ODPC), Kenya

If you believe your personal data has been handled in breach of the Kenya Data Protection Act, 2019, you retain the right to lodge a formal complaint with the Office of the Data Protection Commissioner (www.odpc.go.ke).

Ready to Explore Our Educational & Mentorship Programs?

Your growth journey is supported by verified human counselors and protected by comprehensive legal and cryptographic safeguards.