Privacy policy.

Urumuri Académie is an online school passing on Kirundi and Burundian culture to the children and adults of the diaspora in Canada. Every class is live on Zoom: we have no premises and we never meet anyone in person.

Legal name, business number and postal address: to be confirmed.

Privacy officer: to be confirmed.

We collect only what it takes to enrol a student, place them in the right age group, and welcome them to class. This is the complete list.

• The student's full name and their age in years. We never ask for a date of birth.
• For a student under 18: the parent's or guardian's name, email and phone. The parent's email is what signs in.
• For an adult student: their own email and phone.
• Kirundi level, preferred class language, and - if you offer it - the language spoken at home.
• Why you want to learn Kirundi: a free-text field, and an optional one.
• The class times you pick, your time zone, and your display preferences.
• The account password, kept in a scrambled form that nobody, ourselves included, can read.
• Payment history: amount, currency, date sent and status. No card or bank details.
• Attendance: which classes were attended, and what time the student joined.

This site carries no advertising, no audience measurement and no tracking. No Google Analytics, no social-network pixel, no third-party tracker of any kind. That is a deliberate choice, and a verifiable one: the site is only permitted to connect to its own database and its own email service.

We do not sell or rent your information, and we never share it with anyone for marketing.

Every field we ask for does one specific job.

• Create the account, and let one parent manage several children from a single login.
• Place the student in a group that matches their age. That is why age is required: our groups are 5-6, 7-11, 12-17, and 18 and over.
• Talk to you about enrolment, payments and classes.
• Receive and confirm Interac e-Transfer payments.
• Open up the Zoom link at class time, and only while the subscription is active.
• Make course materials available to the students they are meant for.

Our classes start at age 5 and most of our students are minors. The account is created and held by the parent or guardian, never by the child.

In practice: as soon as the age entered is under 18, the form stops asking for the child's email and phone and requires the parent's instead. The child has no login of their own and cannot sign in alone. We therefore hold no direct contact details for any minor.

The parent who creates the account consents, on their child's behalf, to the handling described here. That consent can be withdrawn at any time by writing to us, which ends the enrolment.

We never send marketing messages to a child.

Classes run on Zoom. When you click the link to join, you enter a service operated by Zoom Video Communications, and Zoom's own privacy practices apply from that point.

We send Zoom no student name, email or phone number. We create only the room itself: its title, its time and its length. The name shown during class is the one you type in when you join.

Classes are not recorded. If that ever changes, we will tell parents in advance.

Inside the school, the teacher and the technical administrator can see each student's full record: name, age, parent contact details, level, class times, subscription status and payment history. That is what makes it possible to build the groups and confirm transfers.

A parent sees their own record and each of their children's, and nothing else. That separation is enforced by the database itself, not just by what the screen chooses to show: an interface bug cannot expose another family's record.

Other students and their parents never see your information.

Running an online school takes a handful of outside services. Each one receives only what it needs.

• Our database host: accounts, student records and course materials.
• Our web host: the site you are reading.
• Our email service: the messages we send about payments.
• Zoom: live classrooms.
• Google: the site loads its typefaces from Google Fonts, and our contact address is a Gmail address, so the emails you send us are stored with Google.

The database and course materials are hosted in Canada, in the Canada Central region.

Website hosting, email delivery and Zoom classes all run on services that handle data outside Canada, usually in the United States. Your information may therefore be transferred, stored or accessed outside Canada, where local law applies to it.

We keep a student's record for as long as the account exists, so that learning and payment history carries across from one season to the next.

If you ask us to delete an account, we delete the student's record - and their children's, if it is a parent account - along with the payment, attendance and notification history attached to it.

An account left inactive is deleted 24 months after the last subscription ends.

Quebec law and Canadian federal law give you rights over your information, and over your child's if you are their parent or guardian.

• See the information we hold about you.
• Have it corrected if it is wrong. Name, phone, language and class times are already editable from your profile.
• Ask for it to be deleted, or withdraw your consent.
• Receive a copy of it in a structured, machine-readable format.
• Complain to the Commission d'accès à l'information du Québec if our answer does not satisfy you.

There is not yet a button in the app to delete an account. Write to us and we will handle it by hand, within 30 days, and confirm by email what was deleted.

This site uses no advertising or analytics cookies, which is why you see no consent banner. The only cookies we set are the ones the site cannot work without:

• a session cookie, which keeps you signed in;
• a language cookie, which remembers whether you read the site in French or English;
• a cookie remembering which of your children you are currently viewing, valid for 30 days;
• a temporary 10-minute cookie during a password reset.

All traffic to the site is encrypted, and passwords are stored hashed. Course materials sit in private storage: they open only through a signed link, valid for one hour, generated at the moment you click.

We hold no credit-card or bank-account details at all. Payment is by Interac e-Transfer, outside the platform.

If we change this policy, the date at the top of this page will change with it. If we materially change how we use your information, we will tell you by email.

For any question about this policy, or to see, correct or delete your information, write to us. We reply within 24 to 48 hours.