2.1 Child Protection Policy

Objective:
To ensure the safety and well-being of minors using the Elimu Bora platform.

Policy Statements:

1. Parental or guardian consent is mandatory for all users under 18 years before registration.
2. Children’s data and interactions are treated with the highest level of confidentiality and protection.
3. There are no private messaging features between students. All communication occurs within monitored group settings.
4. Elimu Bora prohibits and actively monitors for cyberbullying, harassment, grooming, or any harmful behavior.

Operational Measures:

• Automatic flagging of inappropriate content using AI moderation tools.
• Regular staff training on child protection and safeguarding.
• Immediate suspension of accounts pending investigation upon receipt of serious complaints.

2.2 Moderation & Reporting Policy

Objective:
To maintain a respectful and positive learning environment through proactive moderation.

Policy Statements:

1. All interactions within the community (comments, likes, posts) are subject to monitoring and moderation.
2. AI moderation tools detect and flag inappropriate language or behavior, which is then reviewed by trained human moderators.
3. Users can report content or behavior directly from the platform using a “Report” feature.

Operational Measures:

• Moderation logs are stored securely for audit purposes.
• A tiered response system (warning, suspension, permanent ban) is implemented for violations.
• Escalation protocols are in place for incidents involving threats, harassment, or potential harm to minors.

2.3 Community Conduct Policy

Objective:
To create a culture of respect, curiosity, and collaboration among users.

Policy Statements:

1. All users must adhere to the Elimu Bora Code of Conduct, which promotes kindness, honesty, and integrity in all communications.
2. Hate speech, discrimination, or inappropriate content is strictly prohibited.
3. Teachers and parents are encouraged to model positive digital citizenship.

Operational Measures:

• Display the Code of Conduct at login and sign-up.
• Require acknowledgment of the Code during registration.
• Track violations and take action per the moderation protocol.

3.1 Data Collection & Usage Policy

Objective:
To collect and process only necessary personal data for educational purposes while maintaining transparency and control.

Policy Statements:

1. Elimu Bora collects only essential data such as name, grade, age, and contact details for parent/guardian and teacher communication.
2. Data collected is used solely to:
   • Personalize learning experiences.
   • Generate academic reports and analytics.
   • Communicate progress to parents or teachers.
3. Data is never shared or sold to third parties without explicit consent.
4. Data processing activities are documented and reviewed regularly for compliance.

Operational Measures:

• Publish a Privacy Notice accessible to all users.
• Maintain an internal Data Inventory Register.
• Assign a Data Protection Officer (DPO) to oversee compliance.

3.2 Data Storage & Security Policy

Objective:
To secure all user data against unauthorized access, loss, or misuse.

Policy Statements:

1. All user data is stored on encrypted servers within secure data centers.
2. System access is restricted using role-based permissions.
3. Admin and teacher accounts must enable Multi-Factor Authentication (MFA).
4. Regular penetration testing and security audits are mandatory every six months.
5. Data retention limits are defined:
   • Student data retained for a maximum of 3 years after account inactivity.
   • Backups securely deleted after 90 days.

Operational Measures:

• Use end-to-end encryption for data in transit (SSL/TLS).
• Maintain a Data Breach Response Plan (reportable within 72 hours).
• Provide staff training on secure data handling.

3.3 Parental Control & Consent Policy

Objective:
To give parents and guardians control over their child’s digital participation and data.

Policy Statements:

1. Parents should verify and approve all child accounts.
2. Parents can control:
   • Visibility and community interaction settings.
   • Access to reports and performance summaries.
   • Data sharing preferences.
3. Parents receive automated weekly reports and early alerts for inactivity or learning decline.

Operational Measures:

• Digital consent verification via email or SMS.
• Parent dashboards with control over settings.

3.4 AI Transparency & Oversight Policy

Objective:
To ensure ethical, explainable, and human-supervised use of AI technologies in education.

Policy Statements:

1. AI recommendations are always subject to teacher review before affecting grading or feedback.
2. The system provides explanations for AI-driven decisions (e.g., why a certain topic was assigned).
3. Users can request to opt out of AI personalization.
4. All AI models are regularly evaluated for bias, fairness, and accuracy.

Operational Measures:

• Maintain AI audit logs for transparency.
• Conduct quarterly reviews of AI content generation quality.
• Train educators on AI interpretation and oversight.

4.1 Accessibility Design Policy

Objective:
To make Elimu Bora usable by everyone, regardless of ability or device.

Policy Statements:

1. The platform follows WCAG 2.1 Level AA accessibility standards.
2. Text-to-speech, adjustable text size, and color contrast options are available.
3. Navigation is designed for screen readers and keyboard-only users.

Operational Measures:

• Conduct annual accessibility audits.
• Include accessibility testing in every release cycle.
• Provide multilingual support and text simplification options.

4.2 Inclusive Content Policy

Objective:
To promote equality and inclusivity in educational materials.

Policy Statements:

1. Learning materials must be free from gender, cultural, or political bias.
2. AI-generated notes are reviewed to ensure neutrality and inclusivity.
3. Support for local languages and varying literacy levels must be maintained.

4.3 Continuous Accessibility Improvement Policy

Objective:
To continuously enhance user accessibility through user feedback and innovation.

Operational Measures:

• Collect accessibility feedback directly in the user portal.
• Schedule annual training for content creators and developers on inclusive design.
• Maintain a public Accessibility Statement outlining progress and commitments.

5.1 Policy Review & Compliance Framework

Objective:
To ensure ongoing compliance with legal, regulatory, and ethical standards.

Policy Statements:

1. All policies are reviewed annually by the Compliance Committee.
2. Compliance aligns with:
   • Kenya’s Data Protection Act (2019)
   • The Children’s Act (2022)
   • GDPR-equivalent standards
3. Maintain full documentation of compliance reports and third-party audits.

5.2 Staff & Partner Confidentiality Policy

Objective:
To ensure all personnel uphold data privacy and integrity.

Policy Statements:

1. All employees, contractors, and partners must sign Non-Disclosure Agreements (NDAs).
2. Access to personal data is granted strictly on a need-to-know basis.
3. Annual training on child safety, data protection, and responsible AI use is mandatory.

6. Enforcement

Violations of this policy may result in disciplinary action, suspension of accounts, or legal reporting in line with applicable laws. Elimu Bora reserves the right to update this policy to address emerging risks, technology changes, or regulatory updates.