Privacy Policy
Last updated: April 2025 · NDPR & GDPR Compliant
1. Information We Collect
We collect information you provide directly: name, email, phone number, school details, exam targets, and uploaded academic reports. We also collect usage data — questions answered, scores, time per question, and session activity — to power AI personalization. We collect payment information only via our secure payment processor (Paystack/Stripe); we never store card details.
2. How We Use Your Information
We use your information to: deliver personalized CBT batches and study plans; match you with qualified tutors; generate performance reports and analytics; send important platform notifications; improve our AI accuracy; and fulfil subscription and payment obligations. We do not sell your personal data to third parties.
3. AI-Powered Processing
SchoolCBT uses AI systems (Google Vertex AI, Anthropic Claude) to analyse academic reports, generate questions, and produce explanations. Uploaded documents are processed for text extraction only and are not shared with third parties. AI outputs are validated by our Quality Evaluator agent before delivery.
4. Data Sharing
We share data only with: (a) your assigned tutor — limited to performance data necessary for tutoring; (b) Firebase (Google) for authentication; (c) Convex for real-time database storage; (d) Cloudflare for content delivery. All partners are bound by data processing agreements compliant with NDPR and GDPR.
5. Data Retention
Account data is retained for the duration of your subscription plus 12 months. Uploaded documents are deleted after AI processing (within 30 days). You can request deletion of all personal data by contacting us at privacy@schoolcbt.dev.
6. Your Rights
Under the Nigeria Data Protection Regulation (NDPR) you have the right to: access your personal data; correct inaccurate data; request deletion; restrict processing; and data portability. To exercise any right, contact privacy@schoolcbt.dev. We respond within 30 days.
7. Security
We implement industry-standard security: all data in transit is encrypted via TLS 1.3; data at rest is encrypted in Convex and Firebase; access is restricted to authorised personnel only; we conduct regular security reviews. However, no internet transmission is 100% secure and we cannot guarantee absolute security.
8. Cookies & Tracking
SchoolCBT uses functional cookies necessary for authentication and session management. We do not use third-party advertising cookies. You can disable cookies in your browser settings, though this may affect platform functionality.
9. Children's Privacy
Students under 13 must have verifiable parental or guardian consent to register. If we discover we have collected data from a child under 13 without consent, we will delete that data immediately.
10. Contact
For privacy concerns or to exercise your rights: email privacy@schoolcbt.dev. For general enquiries: hello@schoolcbt.dev. SchoolCBT is operated by EwinProject, Lagos, Nigeria.