Privacy Policy - Stimuli Audit Lab

Section 01

Who We Are

Stimuli Audit Lab ("Stimuli", "we", "us") operates an interactive audit training platform based in Harare, Zimbabwe. We are responsible for the personal information described in this policy.

Section 02

Information We Collect

We only collect the information needed to run your account and deliver your training.

Account details: Your name, email address, and password. Passwords are stored in hashed form and are never visible to us.
Onboarding profile: Your experience level, current role, practical confidence, goals, and whether you are preparing for the CIA exam.
Learning activity: Task attempts, submitted answers, hint usage, path progress, XP, streaks, badges, and CIA practice sessions.
Payment records: The plan purchased, amount, currency, status, and a Paynow reference. We do not receive or store your card or mobile wallet details.
Technical data: Your IP address, browser type, and session information, used to keep you signed in and protect your account.

Section 03

How We Use Your Information

To create and manage your account and sign you in securely.
To track your progress, evaluate submissions, and give you instant feedback.
To recommend learning paths based on your onboarding profile.
To process payments and manage your subscription access.
To send emails you have opted into, such as streak reminders and weekly digests.
To maintain the security and reliability of the platform.

Section 04

Leaderboards and Certificates

Public leaderboard visibility and public certificates are turned off by default. Your name and results are only shown publicly if you enable these options in your account settings, and you can turn them off at any time.

Section 05

How We Share Information

We do not sell your personal information. We only share it where necessary to operate the platform:

Payment processing: Paynow processes payments on our behalf and receives the details needed to complete your transaction.
Service providers: Hosting and email providers that store data or deliver messages for us under confidentiality obligations.
Legal requirements: Where we are required to by law, regulation, or a valid legal request.

Section 06

Data Retention

We keep your information for as long as your account is active. When you delete your account, your profile, learning activity, and associated records are deleted from our platform.

Section 07

Your Rights

Subject to the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe, you have the right to:

Access the personal information we hold about you.
Correct inaccurate information through your account settings.
Delete your account and associated data from your profile page.
Update your email notification preferences at any time.
Object to or ask us to restrict certain processing by contacting us.

Section 08

Security

We use reasonable technical and organisational measures to protect your information, including hashed passwords and restricting administrative access to authorised staff. No online service can guarantee complete security, so please use a strong, unique password.

Section 09

Cookies

We use essential cookies to keep you signed in, remember your session, and protect forms against cross-site request forgery. We do not use advertising or third-party tracking cookies.

Section 10

Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the date at the top of this page and, where appropriate, notify you by email.