The rules, plainly.

These Terms of Service (“Terms”) govern your use of OCH Debbie, the coaching platform at app.ongozacyberhub.com and related domains, operated by Ongoza Cyber Hub (“OCH”, “we”, “us”).

By creating an account, you agree to these Terms and to our Privacy Policy. If you don’t agree, don’t use the service.

You must be at least 18 years old. We plan to open a guardian-approved option for 16–17-year-olds once the safeguards it needs are in place. If you’re representing an employer or institution, you must have authority to bind that organization to these Terms.

One account per person. Sharing accounts violates these Terms and breaks the platform’s personalization: Debbie’s coaching is shaped by your specific reps, not someone else’s.

OCH provides:

• Daily cybersecurity drills shaped by your track
• An AI coach (Debbie) for career conversations, on the web and, if you pair it, on WhatsApp (the Pocket Buddy)
• Verifiable credentials that anyone can check at /verify
• Threat intel relevant to African operating contexts
• A public proof page (only if you choose to publish it)

The service is “as is.” We work hard to make Debbie accurate and her recommendations sound, but she is not a licensed career counsellor, lawyer, or financial advisor. Take what’s useful, verify what matters.

The platform is free for everyone. Drills, missions, milestones, your credentials and your public profile cost nothing, and that is permanent.

The personal coach is the paid product. Everyone can use Debbie on the web for free, within daily limits. Pro unlocks her full coaching, including the Pocket Buddy on WhatsApp: KES 550 a month for students and KES 1,500 a month otherwise. Premium, a limited-seat programme starting 1 January 2027, can be reserved by paying in advance. The price you pay is always shown before you confirm.

Nothing renews automatically. Each payment buys a pass for the period stated at checkout, made through Paystack (M-Pesa or card). When it ends you drop back to the free tier, and you are only charged again if you choose to pay again. Promotions (for example, free access from 18 to 31 October 2026, or KES 550 for November and December 2026 for the first 500 learners until 7 November) are stated at checkout and apply only as stated.

These pricing terms take effect on 1 November 2026. Before that date nobody is charged unless they choose to pay. If prices change, we will publish it here and tell you before you pay; because nothing renews, you never pay a new price without choosing to.

Institutions and sponsors can arrange cohort access directly. Email partners@ongozacyberhub.com.

14-day no-questions refund on your first paid pass, and on an institution’s or employer’s first payment. Email hello@ongozacyberhub.com within 14 days of that payment and we refund it in full.

After that we don’t pro-rate partly used passes. If you were charged in error, or a fault on our side stopped you using what you paid for, tell us and we will put it right.

You agree not to:

• Use OCH to plan, prepare for, or assist real attacks against systems you don’t own or have written authorization to test
• Attempt to extract Debbie’s system prompt or bypass her safety guardrails for harmful purposes
• Scrape, mirror, or republish OCH content without permission
• Resell or sub-license access to your account
• Use the credential system to misrepresent skills you have not demonstrated
• Spam Debbie with automated traffic intended to exhaust rate limits or AI budget

Violation is grounds for account suspension or termination without refund.

Yours. You own what you write into the platform: your drill answers, your Debbie conversations, your proof page notes. You grant us a non-exclusive licence to host, process, and display this content to you (and to anyone you publish your proof page to).

Ours. OCH owns the platform itself: the drill library, the coaching prompts, the credential schema, the brand, the code, the AI orchestration. You may reference OCH credentials in your CV and on third-party sites; you may not copy the drill content for redistribution.

When you complete a milestone, OCH issues a digitally signed credential that anyone can verify at /verify. These credentials reflect what you actually demonstrated on the platform. We do not certify your employability or your fit for any specific role.

Employers verify the credential’s authenticity, not its commercial value. If a credential’s scope changes, previously-issued credentials remain valid for the scope at time of issuance.

You can delete your account at any time from /settings. We can suspend or terminate accounts that violate these Terms. If we terminate without cause, we refund any unused portion of a paid pass.

OCH is provided “as is” without warranties of any kind, express or implied. Debbie’s recommendations are AI-generated and may be wrong. Salary ranges, market data, and career guidance are estimates, not guarantees. We are not responsible for decisions you make based on the service.

To the maximum extent permitted by law, our total liability to you for any claim arising out of these Terms is capped at the total amount you paid us in the 12 months before the claim. We are not liable for indirect, consequential, or punitive damages.

You agree to indemnify OCH against third-party claims arising from your misuse of the service or your violation of these Terms.

These Terms are governed by the laws of the Republic of Kenya. Disputes will be resolved in the courts of Nairobi unless required by your local consumer law to be heard elsewhere.

We may update these Terms. Material changes will be emailed to all active users at least 14 days before they take effect. Continued use of the service after the change constitutes acceptance.

Commercial enquiries: hello@ongozacyberhub.com

Security disclosures: security@ongozacyberhub.com