Legal · Privacy
This policy outlines how we collect, use, and protect your data in compliance with Kenya's Data Protection Act, 2019.
We collect the following information when students register or use the app:
We use your information to:
We request camera access for two core functions:
Camera images are stored securely and used solely for these purposes. We do not record or store continuous camera footage. Users can manage permissions through their device settings.
YoungBrain is designed to protect student information while enabling students to access legitimate career, education and development opportunities.
YoungBrain does not sell, rent or trade students' personal information to employers, advertisers, data brokers or other third parties.
Student information is not treated as a commercial database that third parties can purchase or obtain for their own marketing purposes.
YoungBrain does not share students' personal data with third parties for advertising, targeted advertising or third-party marketing purposes.
Companies cannot obtain student contact databases from YoungBrain for advertising or unsolicited marketing campaigns.
Where YoungBrain displays opportunities, programmes, scholarships, certifications, events or other content from participating organisations, this does not mean that the organisation has been given access to YoungBrain's student database.
Employers and other participating organisations are not permitted to download or export YoungBrain's student database or student personal information.
Access to student information is provided through controlled functionality within the YoungBrain and MyResource ecosystem and is limited according to the organisation's role, permissions and legitimate purpose.
The ability to view information within the platform does not give an organisation ownership of that information or the right to copy, extract, build external databases from, redistribute or use the information for unrelated purposes.
Where a student applies for a job, internship, scholarship, programme or another opportunity, relevant information may become accessible to the organisation responsible for that opportunity where necessary to process the student's application.
Such access is limited to the legitimate purpose for which the information is provided.
Participating organisations must not use student information obtained through YoungBrain for unrelated advertising, marketing, profiling, resale or unauthorised recruitment activities.
YoungBrain seeks to give students appropriate control over how their career information is used within the platform.
A student's presence on YoungBrain does not constitute permission for every participating company to contact, market to or independently collect information about that student.
Where student information needs to be disclosed to another organisation outside the ordinary functionality of the platform, YoungBrain will ensure that there is an appropriate lawful basis for doing so and, where required, obtain the student's consent.
YoungBrain uses role-based access controls and other technical and organisational safeguards to restrict access to student information.
Universities, employers and other authorised users are provided only with access appropriate to their role and the services they are authorised to use.
Attempts to scrape, systematically copy, download, extract or misuse student information may result in suspension or termination of access to the YoungBrain ecosystem.
YoungBrain may use authorised technology and service providers where necessary to operate, secure, maintain or support the platform.
Where such providers process personal data on our behalf, their access is limited to the services they provide and is subject to appropriate confidentiality, security and data-protection requirements.
We do not authorise service providers to use student personal data for their own advertising or marketing purposes.
YoungBrain may disclose information where disclosure is required by applicable law, a lawful regulatory request, court order or other legally enforceable obligation.
Any such disclosure will be limited to the information reasonably required by the applicable legal obligation.
YoungBrain retains personal data only for as long as it is reasonably necessary for the purpose for which the information was collected, to provide our services, maintain legitimate academic, career and development records, comply with legal and regulatory requirements, resolve disputes, prevent fraud or misuse, maintain platform security, and protect students, universities, employers and other users of the YoungBrain ecosystem.
We periodically review the personal data we hold. When personal data is no longer required for its original purpose and there is no legal, contractual, regulatory or other lawful reason for continued retention, we will securely delete, erase, anonymise or pseudonymise the information.
Unless a longer retention period is required or permitted by law, university requirements, an ongoing investigation, dispute, security requirement or another legitimate obligation, YoungBrain applies the following standard retention periods:
Information associated with an active YoungBrain account may be retained for the duration of the student's use of YoungBrain and while the account remains active. This may include:
Some information may form part of a student's longer-term verified career or development record. Where appropriate, students will be informed when information is intended to remain part of such a record.
Information relating to applications for jobs, internships, scholarships, certifications, programmes, competitions or other opportunities may be retained in accordance with the standard retention periods above.
Certain records may be retained for longer where necessary to maintain an accurate history of participation, university recommendations, internship completion, university-approved activities or employment outcomes, or where another lawful retention requirement applies.
Certain information may be provided, verified, approved or created by a participating university. This may include academic information, recommendations, internship evaluations, participation records and other university-managed information.
Where the university is the data controller for particular information, the retention and deletion of that information may also be governed by the university's policies, academic record requirements and applicable legal obligations.
YoungBrain will not delete a university-controlled record where the participating university is legally or institutionally required to retain that information, unless deletion is authorised or required under applicable law.
Records relating to completed certifications, assessments, internships, student activities and other career-development achievements may be retained as part of the student's career profile where they continue to provide evidence of the student's qualifications, skills, experience or development.
Where continued identification of the student is no longer necessary, information may instead be anonymised and retained for statistical, research, service-improvement or employability-analysis purposes.
Messages sent to YoungBrain support, complaints, consent records and other administrative communications may be retained in accordance with the retention periods above where necessary for customer support, security, dispute resolution, regulatory compliance or the establishment, exercise or defence of legal claims.
YoungBrain may retain security logs, authentication records, audit trails and technical records for the periods specified above.
These records may be used to protect YoungBrain and its users, investigate suspicious activity, prevent fraud and unauthorised access, maintain system security and demonstrate compliance with applicable requirements.
Where a security incident, investigation or legal matter is ongoing, relevant records may be retained for longer where reasonably necessary.
Students may request closure of their YoungBrain account or deletion of their personal data, subject to applicable law and any lawful reason requiring YoungBrain or a participating institution to retain particular information.
When an account-deletion request is approved, the account will first be disabled and removed from normal platform access. Personal data associated with the account will then be deleted or anonymised from active YoungBrain systems within 30 days, subject to the exceptions described in this Policy.
Closing an account does not necessarily result in the immediate deletion of every record. Certain information may need to be retained where:
Once the applicable retention requirement expires, the information will be securely deleted, erased, anonymised or pseudonymised as appropriate.
Personal data deleted from active YoungBrain systems may remain temporarily within secure system backups.
Backup copies are protected against ordinary operational use and are deleted or overwritten through YoungBrain's normal backup and disaster-recovery cycle, ordinarily within 90 days after deletion from active systems.
If restoration from a backup becomes necessary, YoungBrain will take reasonable measures to ensure that previously approved deletion requests continue to be respected following restoration.
YoungBrain may retain information that has been irreversibly anonymised so that it can no longer reasonably be linked to an identifiable student.
Such anonymised information may be retained for statistical analysis, graduate and employability trends, research, reporting, security analysis and improvement of YoungBrain and related services.
Because properly anonymised information no longer identifies an individual, it may be retained indefinitely.
YoungBrain maintains and periodically reviews its data-retention practices and retention schedules.
We assess whether retained personal data remains necessary, accurate and appropriately protected. When the applicable retention period expires, or information is no longer necessary for a lawful purpose, appropriate deletion, anonymisation, pseudonymisation or other secure disposal measures will be applied.
YoungBrain may update its retention periods where necessary to reflect changes in legal, regulatory, university, security or operational requirements.
The retention periods described above may be extended where retention is required or permitted by applicable law, regulatory requirements, legal proceedings, investigations, contractual obligations or the establishment, exercise or defence of legal claims.
YoungBrain's data-retention practices are designed to comply with the Kenya Data Protection Act, 2019, applicable data-protection regulations and other legal requirements governing the processing and retention of personal data.
We implement industry-standard encryption and access controls to protect your information from unauthorized access or misuse.
You have the right to:
We do not show third-party ads or use external analytics services. Any usage tracking is internal and anonymized for performance monitoring.
This Privacy Policy is accessible within the app's settings and on our app store listing. We may update this policy from time to time. Any material changes will be communicated via in-app messages or email.
If you have any questions regarding your privacy, contact us at info@youngbrain.co.ke.
ERP Tohama LTD · Nairobi, Kenya
If you have any questions regarding your privacy, contact our team.
info@youngbrain.co.keERP Tohama LTD · Britam Towers, Nairobi · Tel +254 745 990 770
This policy is also accessible inside the app's settings and on our app store listings.
