Privacy Policy

Last updated: [insert date]

Before you rely on this: this policy was drafted to give you a genuine, working starting point that reflects Nigeria's Data Protection Act 2023 (NDPA) and the fact that many users of this service are minors. It is not a substitute for review by a qualified Nigerian lawyer — please have one review this before you rely on it for a real launch, particularly the sections on children's data and your specific business details (contact information, registered company name, etc., shown in brackets below).

1. Who we are

Neslern ("we", "us") provides an AI-assisted mathematics tutoring platform for Nigerian secondary school students. This policy explains what information we collect, why, and what rights you have over it, in line with the Nigeria Data Protection Act 2023 and the regulations of the Nigeria Data Protection Commission (NDPC).

2. Information we collect

Account information: email address, a chosen username, and (for teaching staff) a display name and title.

Usage information: questions you ask, your selected class level and exam board, generated answers, and timestamps of when you asked and were answered.

Payment information: subscription payments are processed by Paystack. We do not see or store your card details — Paystack handles that directly and shares with us only what's needed to activate your subscription (amount paid, plan chosen, and a payment reference).

Voice recordings: if you are a teacher, any voice notes you choose to record are stored to be played back to students.

Job applications: if you apply to teach with us, we collect your name, contact details, a short message, and an optional uploaded resume/CV.

Technical information: basic device and browser information used to keep the service secure and working correctly.

3. Children's data

We recognize that many users of this platform are secondary school students, some of whom are under 18. We collect only what's needed to provide the tutoring service — we do not knowingly collect more personal information from a minor than is necessary. Where a parent or guardian wishes to review, correct, or request deletion of their child's information, they may contact us using the details in Section 8, and we will verify the request before acting on it. If you believe a child has provided us with information without appropriate consent, please contact us so we can address it.

4. How we use your information

To provide step-by-step maths solutions and practice questions; to operate your account and subscription; to improve the quality and accuracy of answers over time (including having qualified teaching staff review and correct AI-generated content); to communicate service updates or respond to support requests; and to meet our legal obligations.

5. Who we share information with

We share information only where necessary to operate the service:

Anthropic (our AI provider) — receives the text/photo of your question to generate a solution. It does not receive your name, email, or payment information.

Supabase — our database and authentication provider, which securely stores your account and usage data.

Paystack — our payment processor, which handles your payment details directly; we never see your card number.

We do not sell your personal information to anyone.

6. How long we keep information

We keep account information for as long as your account is active. Solved questions are kept in our shared question bank (with your identity separated from the question itself) so that future students benefit from previously-answered and teacher-verified questions. You may request deletion of your personal account information at any time — see Section 7.

7. Your rights

Under the NDPA, you (or a parent/guardian acting on behalf of a minor) have the right to:

• Access the personal information we hold about you
• Correct inaccurate information
• Request deletion of your information, subject to any legal obligation we have to retain it
• Object to or restrict certain processing
• Request a copy of your data in a portable format
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your information

To exercise any of these rights, contact us using the details in Section 9.

8. Security

We use industry-standard measures (encrypted connections, access controls, and role-based permissions for staff) to protect your information. No system is perfectly secure, and we encourage you to use a strong, unique password for your account.

9. Cookies

We use essential cookies to keep you signed in and to remember your session. We do not currently use advertising or tracking cookies.

10. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will make reasonable efforts to notify you (for example, through an in-app notification).

11. Contact us

Questions about this policy, or requests relating to your data, can be sent to: [insert contact email].