Privacy Policy

Last Updated: November 26, 2024

1. Introduction

This Privacy Policy explains how NounStudy ("we," "us," or "our"), registered and operating under the laws of the Federal Republic of Nigeria, collects, uses, processes, and protects your personal information across our two platforms: our primary mobile application and our web platform. The mobile application provides comprehensive access to our AI-powered educational features, while the web platform serves for account and subscription management purposes.

We are committed to protecting your privacy and ensuring the security of your personal information. Our operations fully comply with the Nigeria Data Protection Act (NDPA) and its principles regarding the collection, processing, and storage of personal data. This policy applies to all users of NounStudy, who must be registered students of the National Open University of Nigeria (NOUN) and at least 16 years of age.

2. Information We Collect

We collect several types of information across both our mobile and web platforms. The personal information we collect includes your full name, email address, phone number, current academic information, programme of study, and account credentials. Your programme selection, which is permanent and determines your access to specific course materials, is collected during registration.

Through our mobile application, we collect academic information including your interactions with study materials, test results, performance data, generated AI summaries, and mock test responses. This data is essential for providing our AI-enhanced study tools and maintaining academic integrity.

Our service automatically collects usage data from both platforms, including log data, device information, IP address, browser or application version, features used, and access timestamps. For payment processing through our web platform, we collect payment method details, transaction history, and billing address information.

3. How We Use Your Information

Your information enables us to provide our educational services while maintaining high standards of academic integrity. We use your data to manage your account across both platforms, control access to programme-specific materials, generate AI-enhanced study materials, and create personalized mock tests. All use of your academic data complies with NOUN's academic policies and Nigerian education laws.

We process your personal data to personalize your study experience, improve our AI algorithms, and ensure that your access to materials aligns with your registered NOUN programme. Payment information is used solely for processing subscription payments and handling refunds through our secure payment partner, Paystack.

4. Data Storage and Security

We implement industry-standard security measures to protect your data across both our mobile and web platforms. All sensitive data is encrypted, and we maintain strict access controls to prevent unauthorized sharing of account credentials or academic materials. We use OAuth 2.0 authentication protocol to ensure secure authentication between our web platform and mobile application, protecting your login credentials while enabling seamless access across platforms. Our security measures comply with Nigerian data protection standards and educational regulations.

Your personal data is retained only as long as necessary to provide our services or as required by Nigerian law. Academic data is maintained throughout your active subscription, while account and payment information is retained as required by Nigerian financial regulations. Upon account termination, your data is handled according to our data deletion protocols and Nigerian data protection requirements.

5. Your Rights Under the NDPA

As a user protected by the Nigeria Data Protection Act, you have comprehensive rights regarding your personal data. These include the right to access your data across both platforms, correct any inaccuracies, and request data deletion. However, certain academic integrity records may be retained as required by educational regulations or Nigerian law.

6. Academic Integrity and Data Processing

We process and store academic performance data in a manner that upholds NOUN's academic integrity standards. This includes maintaining records of study material access, practice test attempts, and performance analytics. This data is used to prevent examination malpractice and ensure legitimate use of our service.

7. Platform-Specific Privacy Considerations

Our mobile application and web platform handle your data differently based on their distinct purposes. The mobile application processes and stores your academic interactions, study patterns, and performance data to provide AI-enhanced study features. The web platform primarily handles account information and payment processing data, with limited academic data access.

For secure authentication, we use OAuth to enable seamless and secure sign-in between our web platform and mobile application. When you sign in to the mobile app, you'll be redirected to authenticate through our web platform. This OAuth process ensures secure transfer of authentication credentials without exposing your password to the mobile application. During this process, we collect and process authentication tokens, device identifiers, and login timestamps to maintain security and prevent unauthorized access.

8. Children's Privacy

Our service is available for users aged 16 and above who are registered NOUN students. For users aged 16-17 in Nigeria, we require parent or guardian consent in compliance with local laws. We implement special data handling procedures for minors, including enhanced privacy protections and parental control options.

9. Changes to Privacy Policy

We will notify you of any significant changes to this privacy policy via email or through both our mobile and web platforms at least 30 days before the changes take effect. Such notifications will be sent to your registered email address and displayed prominently within both platforms.

10. Contact Information

For privacy-related inquiries or to exercise your data protection rights, you can reach our Data Protection Officer at [email protected]. For general support, contact us at [email protected] through either platform. We handle all privacy concerns through a structured process that complies with Nigerian data protection laws.