Privacy notice

What we collect and why

• Account data (name, email or phone) — to run your account (contract).
• Learning data (answers, mastery, mocks) — to personalise practice and readiness (contract).
• Verification data for adult earners (NIN check via Smile Identity, results proof) — to keep learners safe (legitimate interest and legal obligation).
• Payment data — handled by Flutterwave; we store references and amounts, never card numbers.
• Session recordings for minors — audio kept 30 days for safeguarding.

Your rights

You can export or delete your data from Settings → Privacy. Exports are delivered within 24 hours. We respond to data subject requests within the time the NDPA requires and notify breaches within 72 hours.

Processors

Convex (database), Cloudflare (hosting, files, edge security), Flutterwave (payments), AGNES AI and Cloudflare Workers AI (practice drafts), Smile Identity (verification), Resend, Termii and Africa's Talking (messaging), PostHog (product analytics).

Children

Under-18 accounts require a linked guardian whose consent is recorded with time and scope.