Privacy Policy
Last updated: 22 October 2026
This policy explains what personal information Travia Cafe ("we", "us") collects when you use traviacafe.com, why we collect it, who we share it with, and the choices you have. We handle personal data in line with Kenya's Data Protection Act, 2019.
What we collect
- Your account: your name, email address and, if you add it, your M-PESA phone number. If you sign up with a password, we store only a scrambled (hashed) version of it, never the password itself.
- If you use "Continue with Google": Google shares your name, email address and a Google account ID with us. We do not receive your Google password or anything else from your Google account.
- Enrolments and payments: the courses and classes you book, the amount, your registration reference, the M-PESA transaction code or receipt, the phone number used, and whether the payment was confirmed. We never see or ask for your M-PESA PIN.
- Sign-in sessions: a cookie that keeps you logged in, and the name of the browser or app you used, so we can limit how many devices are signed in to one account.
- Emails we send you, such as payment confirmations, class links and password resets. We keep a copy so our staff can check what was sent and resend it if needed.
- Class attendance: when a teacher checks you in to an in-person class.
- Technical information: your IP address, used briefly to protect logins from abuse, and the standard logs kept by our hosting provider.
How we use it
- To create and run your account, give you access to the courses you have paid for, and manage class bookings.
- To confirm your payments and send you receipts, one-time codes, class links and updates about your classes.
- To keep accounts secure, for example by limiting failed log-ins and the number of signed-in devices.
- To answer your questions and help when something goes wrong.
We do not sell your personal information, and we do not use it for advertising. We use only essential cookies that keep you signed in; we do not use advertising or tracking cookies.
Google user data
If you choose "Continue with Google", we use your Google name, email address and account ID only to create your Travia Cafe account and sign you in. We do not use this information for any other purpose, we do not share it with anyone except the service providers listed below that run our website, and we never use it for advertising.
Who we share it with
We use trusted service providers to run the website. They handle your information only to provide their service to us:
- Render hosts the website.
- Aiven hosts our database, which holds the account, enrolment and payment information above.
- Backblaze stores our course videos (it does not hold your personal details).
- Brevo sends our emails to you.
- PayHero and Safaricom M-PESA process your payment when you use the M-PESA prompt.
- Google, only if you choose to sign in with Google.
Some of these providers store or process data outside Kenya. We may also disclose information if the law requires it.
How long we keep it
We keep your account information while your account is open. We keep payment and enrolment records for as long as we need them for accounting and legal reasons. Sign-in sessions expire on their own, and password-reset links expire after one hour.
How we protect it
Connections to the website are encrypted (HTTPS), passwords are stored only in hashed form, course videos are kept private and shared only through links that expire, and access to student and payment records is limited to our staff.
Your rights
You can ask us to show you the personal information we hold about you, correct it, or delete your account. You can update your name and phone number yourself under Profile in your dashboard. You also have the right to complain to Kenya's Office of the Data Protection Commissioner.
Changes to this policy
If we change this policy, we will update this page and the date at the top.
Contact us
Questions or requests about your personal information: traviacafe@gmail.com.