Last updated on

Privacy Policy

NenaHub (“NenaHub”, “we”, “us”) is a Tanzanian youth empowerment program that runs school-based public speaking clubs and an AI-powered speaking coach (“NenaCoach”) for students. This policy explains what information we collect across our websites and apps, how we use it, who we share it with, and the choices you have. It applies to:

  • nenahub.cc — our marketing site.
  • coach.nenahub.cc — the NenaCoach web app where users practice with scenarios and upload speaking videos for analysis.
  • api.nenahub.cc — the backend that performs the video and audio analysis.

We try to collect as little personal information as we can, and we never sell it.

Who is responsible for your data

NenaHub, based in Arusha, Tanzania, is the data controller for the information described in this policy. If you have any questions or want to exercise your rights, contact us at hello@nenahub.cc.

Information we collect

On the marketing site (nenahub.cc)

The marketing site is static and does not require an account. We do not run analytics or advertising trackers on it. Our hosting provider (Vercel) may automatically log standard request information (such as IP address, user-agent, and the page requested) for service operation and security.

On NenaCoach (coach.nenahub.cc)

Authentication for NenaCoach is provided by Clerk. Clerk holds your sign-in credentials and manages your session — we do not see or store your password. When you sign in, we store a profile record in our own database keyed to your Clerk user identifier. That profile contains:

  • The identifier Clerk gives you for your account.
  • Your name, email address, and profile photo URL as supplied by Clerk.
  • The first time you signed in, the most recent time you signed in, and a counter for how many times you have signed in.
  • A flag indicating whether you are signed in or using a shared anonymous “guest” account.

If you use NenaCoach without signing in, your activity is attributed to a single shared anonymous guest record and is not tied to you personally.

When you use the role-play conversation feature, we additionally store:

  • The scenarios you start and the role you played.
  • The messages you and the AI character exchanged during each conversation, with timestamps.
  • Which goals and target words you completed in each conversation.
  • The written AI evaluation, score, and suggestions produced at the end of each conversation.

This is what populates the “Conversations” and “Evaluations” lists on your profile.

On the speech-coach feature (videos and audio)

When you upload a speaking video to NenaCoach, the file is sent to our backend at api.nenahub.cc. The backend then:

  • Saves the video to a temporary file on the server.
  • Runs pose, gesture, and eye-contact detection on the video using MediaPipe, which runs on our own server.
  • Transcribes your speech using OpenAI Whisper, which runs locally on our server — your audio is not sent to OpenAI.
  • Extracts acoustic features (speech rate, pauses, volume, pitch) using Librosa, which runs on our own server.
  • Sends the numeric scores and the text transcript (not the video itself) to Google’s Gemini API to generate written feedback.
  • Sends a short summary of the feedback to Google’s Text-to-Speech (gTTS) service to produce a spoken-feedback audio clip.

Once the analysis run finishes, the uploaded video file is deleted from the server in the same request. We do not store the video, and we do not currently persist the resulting scores, transcript, or written feedback on the backend either — those are returned to your browser and shown to you there. The synthesised audio file produced by gTTS is stored on our backend so the player on the page can fetch it, and is retained there until it is rotated out as part of routine cleanup.

How we use this information

  • To let you sign in to NenaCoach (through Clerk) and to attribute your role-play conversations and evaluations to the correct profile.
  • To produce your speaking analysis when you upload a video: scores, timeline, transcription, written feedback, and spoken feedback.
  • To let you revisit your past role-play conversations and evaluations from your profile.
  • To understand how the program and the coach are being used so we can improve them. Where we use practice data for this, we work with aggregated, non-identifying information wherever possible.
  • To keep the service running and to investigate abuse, errors, or security incidents.

We do not train any AI models ourselves on your conversations, recordings, or evaluations. The third-party AI services we call (Google Gemini, Google gTTS, DeepSeek) process the inputs we send them under their own commercial terms, which you can review on their websites; we do not authorise them to use your content to train their models on our behalf.

We do not sell your personal information to anyone.

Who we share information with

We use a small number of trusted service providers to run NenaHub. Each acts as a processor (or independent controller, where applicable) on the basis of its own published terms:

  • Clerk — authentication and account management for coach.nenahub.cc.
  • Vercel — hosting for nenahub.cc and coach.nenahub.cc.
  • Hetzner — hosting for the video-analysis backend at api.nenahub.cc.
  • Sanity — content management for the scenarios, goals, and lesson content shown in the app. Sanity stores program content, not your personal data.
  • Google (Gemini API and Text-to-Speech) — generating written feedback from your scores and transcript, and producing spoken-feedback audio.
  • DeepSeek — language model used to power the AI role-play character in the conversation feature.

We may also disclose information if we are legally required to (for example, in response to a valid request from a competent authority) or where reasonably necessary to protect the safety of our users and our service.

How long we keep it

  • Uploaded videos — deleted from our backend as soon as the analysis run finishes (typically within a couple of minutes).
  • Speech-coach scores, transcript, and written feedback — not persisted on our backend; they are returned to your browser and live there in your session.
  • Spoken-feedback audio (gTTS output) — stored on our backend so the audio player can stream it, and rotated out as part of routine cleanup.
  • Profile information, role-play conversations, and evaluations — kept for as long as your NenaCoach account is active. You can delete your account, and the data linked to it, at any time from the “Danger zone” on your profile page.
  • Server logs — kept for a short period for debugging and security, then rotated out.

Your rights

Under Tanzania’s Personal Data Protection Act, 2022, and comparable laws elsewhere, you have the right to:

  • Ask what personal data we hold about you.
  • Ask us to correct information that is wrong.
  • Ask us to delete your account and the data linked to it. You can do this yourself from the profile page, or email us.
  • Object to or restrict certain uses of your information.
  • Lodge a complaint with the Personal Data Protection Commission in Tanzania if you believe we have mishandled your data.

The fastest way to reach us about any of this is hello@nenahub.cc.

Students and minors

NenaHub works with secondary school students, many of whom are under 18. For the school-based program:

  • Where students participate through their school, we coordinate with the school and, where appropriate, seek parental or guardian permission before recording or publishing anything that identifies a student.
  • Photos and video clips of students taken at club events are used for NenaHub’s own program updates and materials. We will remove a student’s likeness on request from the student, a parent or guardian, or the school.
  • If you believe a child has signed up to NenaCoach and you would like their account removed, email us and we will handle it.

Security

We use HTTPS across our sites and APIs, scope access to our servers tightly, and rely on reputable providers for authentication and hosting. No system is perfectly secure, but we will notify affected users if we become aware of a breach that puts their information at material risk.

International transfers

Several of our providers (notably Clerk, Vercel, Sanity, Google, and DeepSeek) operate outside Tanzania. By using NenaHub, you understand that your information may be processed in those countries under those providers’ privacy and security commitments.

Cookies

The marketing site does not set cookies for tracking. On coach.nenahub.cc, Clerk sets cookies that are necessary to keep you signed in. We do not use advertising or analytics cookies.

Changes to this policy

If we make material changes, we will update the date at the top of this page and, where appropriate, notify signed-in users from inside the app.

Contact

NenaHub · Arusha, Tanzania · hello@nenahub.cc