Privacy Policy
This policy explains what information Dzidzo Pro and campusvienoula.com collect from students, parents, and educators who use the app, why we collect it, and the choices you have.
At a glance
- We collect your account details (name, email, nickname, and optionally your school), your course and quiz progress, purchase/subscription receipts for paid courses, and basic device/crash data so we can fix bugs.
- Payments and subscriptions are handled entirely by Google Play — Dzidzo Pro and campusvienoula.com never see your card number.
- Fingerprint/Face ID login never leaves your device — it's checked by your phone's own secure hardware, not sent to us.
- Course videos are streamed and, where protected, DRM-secured through Bitmovin, which validates your device to authorize playback.
- Dzidzo Pro is used by primary and secondary school students. Where a user is a minor, we expect a parent or guardian to have reviewed this policy and supervised account creation.
- We use Google Firebase for push notifications and crash reports, and RevoPush (CodePush) to deliver app updates. See the full list in Section 5.
01 Who we are
Dzidzo Pro is a mobile learning app, and Campus Vienoula (campusvienoula.com) is the online school platform it connects to, offering courses to primary and secondary students in Zimbabwe. Both are operated by Vienoula Incorporated (Pvt) Ltd ("Vienoula," "we," "us," or "our"), which is the data controller responsible for the information described in this policy. Campus Vienoula runs on a LearnPress-powered learning platform hosted on Microsoft Azure infrastructure in the South Africa North region.
02 Information we collect
Account & profile information
When you register, we collect your name, email address, and a username/nickname. You can optionally add a short biography and a profile photo, which you choose from your camera or photo library — we only access these when you actively tap "Upload." If you sign in with Google instead, we receive the same name and email from your Google account. You can also optionally add your school, searched from our Zimbabwe school directory or entered manually if it isn't listed, which we collect so we can build school-based features, such as leaderboards, in the future.
Learning & course activity
We record which courses you enroll in, your lesson and quiz progress, quiz scores, and course completion status, so your progress is saved across sessions and devices.
Purchase & subscription information
Most paid courses are sold as auto-renewing monthly subscriptions, purchased through Google Play's billing system (a small number of legacy courses remain one-time purchases). We receive a purchase or subscription receipt/token from Google to verify your entitlement to a course, and Google separately notifies us when a subscription's status changes (for example, renewed, cancelled, or expired) so we can keep your access up to date — we do not collect or store your card number, expiry date, or CVV; those are handled entirely by Google Play.
Device & diagnostic information
To keep the app reliable, we automatically collect basic technical data when the app crashes or encounters an error: device model, operating system version, app version, and an anonymized crash log with stack trace. This is handled by Google Firebase Crashlytics, described in Section 5. We also send the app version with every request the app makes to our backend, so we can support older app versions and target fixes correctly.
Support & order-issue reports
If you report a problem with an order from within the app, we collect the details you provide (description, and optionally a screenshot) so our support team can investigate.
Language & preferences
We store your chosen app language (English, Shona, or Ndebele) so it persists between sessions.
Instructor applications
If you apply to become an instructor through campusvienoula.com, we collect the phone number and message you provide in that application, in addition to the name and email already on your account.
Date of birth & parent or guardian details
Registration asks for your date of birth. If you tell us you are under 18, we also collect your parent or guardian's email address and phone number, and when they approve your account we record the time and the IP address they approved from. Section 4 explains how these are used and how long they are kept.
03 How we use it
- To run your account — sign you in, show your enrolled courses and progress, and let you pick up where you left off.
- To process purchases — verify Google Play purchase and subscription receipts, unlock the courses you've paid for, and keep your access in step with your subscription status.
- To communicate with you — course updates, lesson and quiz reminders, order status, and support replies, by push notification or in-app.
- To fix problems — crash and error data helps us find and fix bugs before they affect more students.
- To meet legal obligations — such as responding to a lawful request from a regulator.
We do not sell your personal information, and we do not use your data for third-party advertising.
04 Children & parental consent
Registration asks for your date of birth. If you tell us you're under 18, we ask for a parent or guardian's email address and phone number, and we email them an approval request before your account can be used. Your account is created, but you can't log in until they approve it. The request shows your name and email address so they can check it is you, and links to this policy. This is required under Zimbabwe's data protection law, which does not allow us to process a minor's information without a parent or guardian's consent. We also email you at sign-up asking you to nudge them, and again once they approve.
When the parent or guardian approves, we record the time and the IP address they approved from and email them a copy of this consent record. Their phone number is stored encrypted and, together with the approval IP address, is kept only as an audit record of their consent. We never use it to contact them or show it in the app, and we delete both 12 months after they approve the account. If a parent or guardian never approves, we delete the phone number 12 months after we collected it.
Apart from this parent or guardian information, we collect the same limited set of information described in Section 2 regardless of a user's age, and we do not knowingly permit minors to purchase courses without a parent's Google Play account and payment method being involved. A parent or guardian who believes their child has provided us with information beyond what's described here, or who wants to withdraw their consent and have their child's account removed, can contact us using the details in Section 12.
05 Third-party services we use
We rely on a small number of established providers to run the app. Each only receives the data it needs to do its specific job:
| Service | Purpose | Data involved |
|---|---|---|
| Google Firebase Cloud MessagingGoogle LLC | Delivers push notifications (course updates, lesson and quiz reminders, order status) | Device push token |
| Google Firebase CrashlyticsGoogle LLC | Detects and reports app crashes so we can fix them | Device model, OS version, app version, crash stack trace |
| Google Play BillingGoogle LLC | Processes course purchases and subscriptions | Purchase/subscription receipt or token, subscription status change notifications — no card details |
| BitmovinBitmovin GmbH | Streams course videos and enforces DRM protection on protected content | Device/license validation data needed to authorize video playback |
| Google Sign-InGoogle LLC | Lets you sign in with your Google account instead of a password | Google account email and name, and a one-time sign-in token we use to verify it — nothing else from your Google account |
| RevoPush (CodePush)RevoPush | Delivers app updates without requiring a Play Store re-download | App version, deployment identifier |
| campusvienoula.com backendHosted on Microsoft Azure, South Africa North | Stores your account, course, and progress data | Account, course, and progress information described in Section 2 |
06 Biometric login
If you enable fingerprint or Face ID login, your biometric data is processed entirely by your device's own secure hardware (Android Keystore or Apple's Secure Enclave). Your fingerprint or face data never leaves your device and is never sent to Vienoula Incorporated (Pvt) Ltd or any third party. We only receive a confirmation that your device successfully verified you.
07 Storage & security
Your account and course data is stored on our backend, hosted on Microsoft Azure in the South Africa North region. We use industry-standard measures — including encrypted connections (HTTPS) between the app and our servers — to protect your information. No method of transmission or storage is 100% secure, but we work to use commercially reasonable safeguards appropriate to the sensitivity of the data involved.
08 Data retention
We retain your account and course data for as long as your account remains active, so your learning progress isn't lost. If you delete a student account from within the app, the account is frozen and cannot be used to log in while a 72-hour hold runs. During the hold, your parent or guardian (or, if none is on file, you, using your account email) can restore the account from a link we email. When the hold ends, your personal information is removed from our systems, other than records we're required to keep for legal, tax, or accounting purposes (such as purchase records). Orders cannot be refunded once an account is deleted.
While the hold runs we keep the time and IP address of the deletion request, which appear in the emails we send about it; they are removed together with the account. We also keep a deletion log that contains no names or full email addresses — only the date, whether the account was deleted by the user, removed as unverified, or removed by an administrator, whether the user was under 18, and a masked email and username (for example l***@g***.com). Each entry is deleted after 12 months.
A parent or guardian's phone number and approval IP address, collected for under-18s as a consent audit record, are deleted 12 months after they approve the account, or, if they never approve, the phone number is deleted 12 months after we collected it.
09 Your rights & choices
- Access & correction — you can review and update your name, nickname, bio, and profile photo at any time in Settings > General. Your school isn't yet editable from within the app — contact us using the details in Section 12 to have it corrected.
- Deletion — you can delete your account and associated data from Settings. Deletion takes effect after a 72-hour hold during which it can be restored (see Section 8).
- Notifications — you can disable push notifications at any time in your device's system settings.
- Language data — your saved language preference can be changed anytime in Settings > Language.
10 Push notifications
With your permission, we send push notifications for things like course updates, lesson and quiz reminders, and order status changes, delivered via Google Firebase Cloud Messaging. You can turn these off at any time from your device's notification settings without affecting your ability to use the app.
11 Changes to this policy
We may update this policy as the app changes. If we make material changes, we'll update the "Effective" date at the top of this page and, where appropriate, notify you in the app. We encourage you to review this page periodically.
12 Contact us
Questions about this policy, or requests to access, correct, or delete your data, can be sent to Vienoula Incorporated (Pvt) Ltd at dev@vienoula.com.