Intern Helper · Privacy policy

Last updated 4 November 2026

Who we are

Intern Helper is developed and published by Morris Nderitu Muturi, in Kenya ("we"). We are the data controller for the personal data described here. To reach us, use the contact details on the Intern Helper website.

This policy covers the Intern Helper website and its apps, including the offline app. We follow the Kenya Data Protection Act, 2019.

What we collect, and why

Your account: your name, email address and password (stored only in scrambled, hashed form that we can’t read). We use them to sign you in, keep your plan attached to you on any device, and contact you about your account.

Your payments: the M-Pesa phone number you pay from, the plan, the amount, the date and the payment reference. We use them to process the payment, unlock your plan, handle refunds and keep the financial records the law requires.

Your plan: which plan you have and when it ends.

Referrals: if you joined through a friend’s link, we record that, so we can pay their commission. If you share your own link, we record the payments of people who joined through it, to pay you.

Crash reports: if the website hits an error, it sends us the error message, the page it happened on and your browser type, so we can fix it. These reports contain no name, email or account.

Visitor statistics: we may count page visits with Cloudflare Web Analytics, which uses no cookies and doesn’t identify you.

We don’t collect your location, contacts, photos or device identifiers, and we don’t use advertising or tracking cookies. The website stores your sign-in and your progress in your browser; these are needed for it to work, so no cookie banner is required.

What stays on your device

Your study progress (cases run, exam scores, questions marked for review, rotation dates and settings) is saved only in your browser or app on your device. It isn’t sent to us.

Once you have a plan, the full library is saved on your device too, so it loads quickly. Signing out removes it.

Who processes your data for us

Supabase stores accounts, plans and payment records on secure servers, encrypted in transit and at rest.

IntaSend processes M-Pesa payments. When you pay, your phone number and the amount go to IntaSend and Safaricom to complete the payment, under their own privacy policies.

Our website host (Cloudflare) serves the website’s files. It sees standard technical information (such as your IP address) for security and delivery.

We never sell your data, and we share it with no one else unless the law requires it.

How long we keep it

Account details: for as long as you have an account. If you ask us to delete it, we delete your account within 30 days.

Payment records: for up to 7 years, because Kenyan tax law requires financial records to be kept. After your account is deleted, they are kept without your name, only as long as the law requires.

Your rights

Under the Data Protection Act you can ask to see the data we hold about you, correct it, delete it, or object to how we use it. To do any of these, use the contact details on the Intern Helper website from the email on your account. We reply within 14 days.

You can also complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).

Security

Connections are encrypted (HTTPS). Each account can read only its own records; plans are granted only by our server after the payment provider confirms payment. No method is perfectly secure, but we use the protections the industry relies on and review them as we grow.

Age

Intern Helper is made for clinical medicine students, graduates and interns aged 18 and over. It isn’t directed at children, and we don’t knowingly collect data from anyone under 18.

Teaching cases

Every patient in the cases is fictional, built from textbooks and clinical protocols. No real patient’s details are used.

Changes to this policy

If we change how we use your data, we will update this policy first and tell you on the website. The date at the top shows when it last changed.