Rwanda AI Tablet Project

Privacy Policy — Rwanda Tablet Project Analytics Dashboard

Last updated: 16 October 2026

The Rwanda Tablet Project Analytics Dashboard (the "Dashboard") is run by Imara Fund for the Rwanda AI Tablet Project, a programme delivered with Rising Academies and the Rwanda Ministry of Education (MINEDUC). It shows how students in the programme use learning apps on their school tablets.

This policy explains what the Dashboard collects when you sign in, what it shows you, and how that information is protected. It follows the programme's Privacy Values & Practices.

1. Who can use the Dashboard

Only people the programme has approved can see any data. Signing in with Google proves who you are; it does not grant access. After Google confirms your identity, the Dashboard checks your email address against its own list of approved users and refuses anyone who is not on it. Approved users see only the schools or students their role allows:

  • Admin — Imara Fund programme staff; sees everything and manages users.
  • Manager — sees all schools, or the schools granted to them.
  • Viewer — sees only the schools or students granted to them.

2. Information we receive when you sign in with Google

When you choose "Sign in with Google", Google sends the Dashboard a signed statement containing your email address, whether Google has verified that address, and a Google account identifier. We do not request access to your Gmail, Drive, contacts, calendar or any other Google data, and we never receive your Google password.

We use this information only to:

  • check that your email address is on the approved list and decide what you may see;
  • keep you signed in: a session cookie on your browser lasts at most 12 hours and holds your email address and Google account identifier, signed so it cannot be altered;
  • keep a record of administrative actions (for example, adding a user or changing which apps a school receives), stored with the email address of the person who made the change.

We record that a sign-in succeeded or failed, and why it failed, for monitoring. These records do not include your email address. Error reports sent to our monitoring service exclude personal data.

3. Student information shown in the Dashboard

The Dashboard displays programme data collected by the Orchestrator app on school tablets:

  • Roster: student and teacher names, grades, classes and schools, imported from Clever, the sign-in service schools use for these tablets.
  • Usage: when a student signed in and out of a tablet, which learning app they opened, and for how long.
  • Errors: technical problems on the tablet, without any student content.

The Dashboard does not show or store anything a student does inside a learning app (no answers, messages, photos, keystrokes or browsing history), and it does not record location. Use of the offline reading library is anonymous: no student identity is attached to it.

Student information is shown only to approved users, in line with their role, for running the programme: supporting teachers, improving learning, and evaluating the programme. Programme reporting uses aggregated figures wherever possible.

4. Where information is stored and who processes it

Information is stored in Google Cloud in the United States (region us-central1) and is encrypted in transit. The service providers involved are:

  • Google — hosting, database and sign-in;
  • Clever — student sign-in and roster;
  • Sentry — error monitoring, with personal data switched off;
  • PostHog — product analytics about how the tablet app and Dashboard are used.

We do not sell personal information and do not use it for advertising. Sharing personally identifiable student information with any other company requires the written approval of Rising Academies and, at their discretion, MINEDUC.

5. How long we keep information

Your approved-user record is kept while you have access and removed when access ends. Administrative audit records and programme data are kept only while the programme needs them to run and evaluate the tablet programme. Within 12 months of the programme ending, Imara Fund will delete student-level data or de-identify it so it can no longer be linked to a child, unless Rising Academies or MINEDUC ask in writing for it to be kept longer for an approved purpose. Aggregated figures that cannot identify any student may be kept for reporting.

6. Your choices

  • You can sign out at any time; your session also ends on its own after 12 hours.
  • You can ask us to remove your Dashboard access and your approved-user record.
  • Schools, parents or guardians with questions about a student's data can contact the programme team below.

7. Children

Students do not use the Dashboard. It is used only by adults approved by the programme.

8. Changes to this policy

If we change this policy, we will update the date at the top and tell approved users.

9. Contact

Dan Carroll — dcarroll@imarafund.org Kago Kagichiri — kkagichiri@imarafund.org