Legal

Privacy Policy

Last updated: July 25, 2026

Bemnat (“Bemnat,” “we,” “us”) is operated by Transformed 2 Succeed (T2S). At the heart of what we do through Bemnat is Kids Teck Inc, whose mission is what this platform exists to serve. This policy explains what data we collect when you use Bemnat’s website and mobile app, and how we use it. Questions about this policy: emmanuel.n@bemnat.com.

What we collect

Account information. When you sign up, we collect your email address. Sign-in uses a one-time passcode sent to your email (via Supabase Auth) — we don’t store passwords for this flow. If you’re an ambassador or regional partner, we also collect your full name and phone number, used for payout and contact purposes.

Chat content. Messages you send to Bemnat’s AI (Learn or Grow) are sent to our AI provider, Anthropic, to generate a response. We automatically mask obvious payment card numbers in your messages before they’re processed. Chat messages are stored so you can revisit past conversations from your own account.

Payment information. If you subscribe, payment is processed by Stripe (card payments) or by Klasha / CinetPay (mobile money — Orange Money, Airtel Money, M-Pesa, MTN, Vodacom). We do not receive or store your full card number or mobile money PIN — these processors handle that directly. We do receive confirmation that a payment succeeded, the plan you purchased, and, for mobile money, your phone number and mobile network.

Usage data. We track how many AI messages you’ve sent against your plan’s daily/monthly limit, so we can enforce fair-use limits and show you your usage.

Device and log data. Like most web services, our infrastructure (Vercel) logs standard request data (IP address, browser/device information) for security and debugging. For ambassador applications specifically, we log the applicant’s IP address and browser user-agent as part of anti-fraud screening.

Referral data. If you sign up through an ambassador’s or regional partner’s referral link, we record which ambassador or partner referred you, so we can credit their commission.

Location (coarse). We read a country-level signal from your network connection — not GPS or precise location — to localize AI responses to your country’s context, such as local exams or business regulations.

What we don’t do

We do not run advertising trackers or analytics pixels, and we do not sell your data to third parties. We do not use your chat messages to train AI models beyond what our AI provider’s standard API terms specify.

Who we share data with

Supabase (authentication, database, chat history), Anthropic (AI chat processing), Stripe (card payments), Klasha / CinetPay (mobile money), Resend (transactional email), Vercel (hosting), and Twilio / CallMeBot (internal WhatsApp alerts to our own team). We do not sell personal data to anyone.

Your rights

You can request a copy of the personal data we hold about you, request correction of inaccurate data, request deletion of your account and associated data, or change your AI response language at any time in Settings. If you’re located in the EU, UK, or California, these requests correspond to rights you have under GDPR or the CCPA/CPRA respectively — we honor the same request process for everyone regardless of location. To exercise any of these, email emmanuel.n@bemnat.com.

Children’s privacy

Bemnat’s Learn product is used by students, including those under 18. Bemnat is not directed at children under 13, and we do not knowingly collect personal information directly from a child under 13 without a parent or guardian creating and managing the account on the child’s behalf. If you believe a child under 13 has an account they set up without guardian involvement, contact us and we’ll remove it.

Account & data deletion

You can request deletion of your account and all associated personal data — your profile, chat history, and usage records — at any time. To do this:

Email emmanuel.n@bemnat.com from the address on your account with the subject line “Delete my account,” or use the same address to reach us from any device. We’ll confirm your identity, then delete your data within 30 days. Deletion is permanent and can’t be undone. Records we’re legally required to keep (e.g. for tax or fraud-prevention purposes) are retained only as long as the law requires, then deleted.

Data retention

We retain your account and chat history for as long as your account is active. If you delete your account, we delete your personal data within 30 days, except where we’re required to retain records for legal, tax, or fraud-prevention purposes.

International transfers

Our processors (Supabase, Anthropic, Stripe, Vercel) operate infrastructure in multiple countries, which may include transferring your data outside the country you’re in.

Security

We use industry-standard measures — encrypted connections, access controls — to protect your data, but no system is 100% secure.

Changes to this policy

We’ll update the date at the top of this page when this policy changes. For material changes, we’ll notify active users by email.

Contact

Questions about this policy: emmanuel.n@bemnat.com

Privacy Policy — Bemnat