Privacy Policy

1. Overview

ONLEWA (“we”, “us”, “ONLEWA”) operates a learn-while-earning platform — the ONLEWA mobile app and the academy.onlewa.co website — where people take courses, earn rewards, build a public talent profile, and connect with employers for jobs and freelance work. This policy explains what personal information we collect across those surfaces, why we collect it, who we share it with, and what choices you have.

The mobile app and the website are built on the same backend and the same account — anything described here applies to both, unless a section says otherwise.

2. Information we collect

We collect information in three ways: what you give us directly, what’s generated by using the platform, and a small amount collected automatically for security.

Account & profile

Learning & earning activity

• Courses you browse, enroll in, and your lesson-by-lesson progress
• Quiz attempts and results
• Certificates issued to you (course title, your name, a verifiable certificate number)
• Wallet balance and the transaction history behind it (course rewards, referral rewards, challenge rewards, contract payments)
• Challenges and gamification activity (streaks, badges)
• Your leaderboard ranking — hidden from other users by default until you opt in to appear

Employer & work activity (if applicable)

• If you apply for employer access: your company name, website, industry, and the message you submit for review
• If you post a job or freelance project: the listing content and every application or proposal you receive
• If you apply to a job or submit a freelance proposal: your application/proposal content, and that it was submitted
• Freelance contracts you’re party to and their status

Technical & security data

• IP address and device/browser user-agent — logged against security-relevant actions (login, registration, payments, job/proposal activity) so we can detect abuse and investigate incidents
• A push-notification token, only if you enable notifications on the mobile app (see §6)

3. How we use it

• To provide the service: run your account, show your courses and progress, process payments, calculate rewards, and display your talent profile
• To communicate with you: email verification, password reset, payment receipts, and — if enabled — push notifications about things that happened on your account
• To keep the platform safe: detect fraud, abuse, and unauthorized access, and enforce our terms
• To improve the product: understand how courses and features are actually used, in aggregate

We do not sell your personal information, and we do not use it to serve third-party advertising.

4. Who we share it with

We share the minimum necessary data with a small number of service providers that make the platform work. We do not share your data with anyone else, except where required by law.

If you use the employer/talent features, information you choose to make public (your talent profile, a job or project listing) is visible to other users of the platform as part of how those features work — that’s not third-party sharing, it’s the platform functioning as designed, and it’s covered above in §2.

5. Payments

Course purchases are processed through CamPay, a mobile money payment processor. When you make a payment, your phone number and the payment amount are sent to CamPay to initiate the transaction. ONLEWA never stores your mobile money PIN or any payment credentials — we only store the record of the transaction itself (amount, status, timestamp) to maintain your purchase history and enrollment.

6. Push notifications

The mobile app can send push notifications for things like a successful payment, a new certificate, being hired for a job, or a new proposal on your project. This is entirely opt-in — if you decline the permission prompt, or disable notifications later, we simply don’t send any, and no token is generated or stored. You can revoke this permission at any time in your device’s system settings.

7. Data retention

• We keep your account data for as long as your account is active.
• Payment and financial transaction records are kept for as long as required for accounting and legal purposes, even after an account is deleted.
• Security logs (IP address, user-agent tied to specific actions) are kept for a limited period for fraud detection and then removed.
• If you delete your account, we remove your profile and personal data, with the exception of records we’re legally required to retain (e.g. completed financial transactions).

8. Your rights & choices

• Access & edit — your name, phone, bio, skills, and avatar are editable directly in your profile at any time.
• Leaderboard visibility — hidden by default; you choose to opt in from your profile settings.
• Notifications — opt in/out at any time via your device’s system permissions.
• Account deletion — contact us (see §12) to request deletion of your account and associated personal data, subject to the retention exceptions in §7.
• Data export — contact us to request a copy of your personal data.

9. Security

Passwords are stored as salted hashes, never in plain text. Sessions use short-lived access tokens with a rotating refresh mechanism that detects token theft. We log security-relevant actions for abuse detection. No method of transmission or storage is 100% secure, but we take reasonable technical and organizational measures to protect your information.

10. Children’s privacy

ONLEWA is not directed at children under 16, and we do not knowingly collect personal information from children under that age. If you believe a child has provided us with personal information, contact us and we will take steps to remove it.

11. Changes to this policy

We may update this policy as the platform changes. If we make material changes, we’ll update the “last updated” date and, where appropriate, notify you directly.

12. Contact us

Questions about this policy or your data — contact: info@onlewa.co