Privacy Policy
Last updated 7 September 2026 · ACBAT2101, Uganda Martyrs University
This policy explains what personal data the ACBAT2101 course platform collects about you, why it is collected, who can see it, and what you can ask us to do with it. It is written to be read, not to be skimmed past — if anything here is unclear, write to rbazigu@umu.ac.ug and ask.
1. Who is responsible for your data
The platform is operated by Bazigu Rodgers, Lecturer in Artificial Intelligence, Machine Learning & Blockchain, in his capacity as course instructor for ACBAT2101 at Uganda Martyrs University, Faculty of Science, Department of Computer Science and Information Systems. For the purposes of the Uganda Data Protection and Privacy Act, 2019 he is the data controller for the records described below.
- Contact for all data matters: rbazigu@umu.ac.ug
- Postal: Faculty of Science, Department of Computer Science and Information Systems, Uganda Martyrs University, Uganda
Where your academic record forms part of the University’s official student record, the University is a controller in its own right and its own institutional policies apply alongside this one.
2. What we collect
Everything on this platform falls into one of four groups.
2.1 Account and identity data
- Your full name
- Your email address
- Your student registration number
- A password, stored only as a salted cryptographic hash — never in readable form
- Your campus and enrolment status
2.2 Academic data generated as you study
- Assignment, lab notebook, and capstone submissions, including any files you upload
- Quiz attempts, answers, and scores
- Marks, grades, written feedback, and your computed final mark
- Module progress, attendance records, and certificates issued
- Discussion posts and replies you write
- Course evaluation responses
2.3 Technical data
- A first-party session cookie that keeps you signed in. This is strictly necessary — the platform cannot work without it, and it is not used for advertising.
- Your cookie and analytics choices, stored in your browser’s local storage on your own device.
- If you consent: an anonymous page-view record (page path, coarse device type, referring site, timestamp). It contains no IP address, no cookie identifier, no device fingerprint, and nothing that links a view back to you. Decline and nothing is recorded.
2.4 What we never collect
We do not collect payment card numbers, national ID numbers, biometric data, health data, or location data, and we do not run third-party advertising or cross-site tracking of any kind on this platform.
3. Why we use it, and on what legal basis
| Purpose | Data used | Basis |
|---|---|---|
| Giving you access to the course and its materials | Account data | Performance of our agreement with you |
| Marking your work and maintaining your academic record | Academic data | Legitimate academic interest of the University |
| Emailing you about deadlines, results, and announcements | Name, email | Performance of our agreement with you |
| Issuing transcripts and certificates | Account and academic data | Legitimate academic interest |
| Understanding which pages students actually use | Anonymous page views | Your consent |
| Detecting abuse of the registration form | Submission timing and form metadata | Legitimate interest in platform security |
We do not sell your data, we do not share it with advertisers, and we do not use it to train machine-learning models.
4. Who else sees it
- Your instructor and authorised teaching staff see your academic record. This is the point of the platform.
- Other students see only what you deliberately publish: your discussion posts, and your display name on any leaderboard. Marks and feedback are private to you.
- Base44 hosts the application and its database on our behalf, as a data processor under contract.
- Our email provider delivers course notifications on our behalf, as a processor.
- Uganda Martyrs University receives final marks and academic outcomes as part of its official student records.
- Third-party tools you choose to open, such as Google Colab when you launch a lab notebook, operate under their own privacy policies. We do not send them your account data; opening them is your choice.
Our hosting and email processors may store data on servers outside Uganda. Where that happens, transfers rely on the processor’s contractual safeguards, and the data remains subject to this policy.
5. How long we keep it
- Academic records (marks, submissions, certificates) — retained for the period required by University academic regulations, as they evidence your qualification.
- Account data — for as long as your account is active, then removed or anonymised once your academic record no longer depends on it.
- Discussion posts — for the lifetime of the course cohort.
- Anonymous page views — 12 months, then deleted.
- Registration enquiries that never became accounts — 12 months.
6. Your rights
Under the Data Protection and Privacy Act, 2019 you may ask us to:
- Show you the personal data we hold about you
- Correct anything inaccurate — a misspelt name, a wrong registration number
- Delete data we no longer have a lawful reason to keep
- Stop a particular use of your data, or restrict it while a dispute is resolved
- Give you a copy of the data you supplied, in a portable format
- Withdraw your analytics consent at any time, without affecting your access to the course
Email rbazigu@umu.ac.ug from your registered address and we will respond within 30 days. One limit worth stating plainly: we cannot delete a mark or a submission that forms part of your official academic record while that record is still required, because it is evidence of your assessment. Everything else is negotiable.
If you believe we have handled your data badly and we have not put it right, you may complain to the Personal Data Protection Office of Uganda. Students in the European Economic Area or the United Kingdom retain their equivalent GDPR rights and may complain to their national supervisory authority.
7. Security
All traffic to the platform is encrypted in transit with HTTPS, and any request arriving over plain HTTP is upgraded automatically. Passwords are hashed, never stored in readable form, and never visible to your instructor. Access to student records is restricted by role — a student account cannot read another student’s marks. Administrative pages are gated server-side, not merely hidden in the interface. No system is perfect; if we discover a breach affecting your data, we will tell you and the relevant authority promptly.
8. Cookies and local storage
We use one strictly necessary session cookie to keep you signed in. We use your browser’s local storage to remember your cookie choice and interface preferences — that data never leaves your device. We set no advertising or cross-site tracking cookies. Analytics are cookieless and run only if you accept them in the banner. See the Terms of Use for the rules governing your use of the course itself.
9. Children
This is a university-level course intended for enrolled students. We do not knowingly collect data from anyone under 18 outside of University enrolment. If you believe a child has registered, contact us and we will remove the account.
10. Changes to this policy
If we change how we handle your data in a way that matters, we will update the date at the top of this page and announce the change on the course announcements page before it takes effect. Continuing to use the platform after that means you accept the revised policy.
11. Contact
Bazigu Rodgers · Lecturer in Artificial Intelligence, Machine Learning & Blockchain
Faculty of Science, Department of Computer Science and Information Systems
Uganda Martyrs University
rbazigu@umu.ac.ug