Privacy Policy

1. Who we are

Schoogle is operated by Consulaw Tech Services Ltd, a private limited company incorporated in Nigeria with the Corporate Affairs Commission (RC 9374036). Our registered address is 12, Onikoyi Street, Aguda, Surulere, Lagos. References to "Schoogle", "we", "us", or "our" in this policy refer to Consulaw Tech Services Ltd.

We operate the platform at schoogleng.com and any associated mobile applications (collectively, the "Service"). This Privacy Policy explains how we collect, use, share, and protect information about you when you use the Service.

2. Information we collect

2a. Information you give us

• Account registration data (name, email address, password)
• Profile information (role, school name, state, class level, profile photo)
• Learners: date of birth, and for under-18s the email address of the parent or guardian who approves the account
• Payment information processed securely by Paystack - we never store card details
• Content you submit (AI Tutor questions and uploaded files, notes, test answers, library uploads)
• Messages you send to tutors or students, and posts and replies in Community, which other students can see with your name
• Live lessons: audio and video travel directly between participants (or through our relay server when a direct connection is not possible). We do not record sessions; we keep who attended, for how long, and the credits billed
• Communications you send us (support emails, feedback forms)
• Tutors only: bank account details (bank name, account number, account name) used solely to process earnings withdrawals via Paystack

2b. Information collected automatically

• Log data (IP address, browser type, pages visited, time of visit)
• Device information (device type, operating system)
• Learning activity (lessons completed, test scores, streak data, session duration)
• AI usage data (token counts per request, model used, endpoint called) used to calculate credit costs and detect abuse - this data is never used to train AI models
• Tutor earnings and payout data (session amounts, platform fees, withdrawal requests)
• Cookies and similar tracking technologies (see Section 7)

3. How we use your information

We use the information we collect to:

• Provide, operate, and improve the Service
• Personalise your learning experience and AI tutor responses
• Process payments, manage subscriptions, and calculate AI credit costs
• Process tutor earnings, apply platform fees, and facilitate bank withdrawals
• Send you product updates, progress reports, and account notifications
• Respond to your support requests
• Detect, investigate, and prevent fraudulent or illegal activity
• Comply with our legal obligations under Nigerian law, including the NDPR and FIRS tax reporting requirements
• Produce aggregate, anonymised analytics about platform usage

We do not sell your personal data to third parties. We do not use your data to train external AI models without your explicit consent.

4. Legal basis for processing

We process your personal data on the following grounds:

• Contract performance - to deliver the Service you signed up for
• Legitimate interests - to improve the Service, prevent fraud, and conduct analytics
• Consent - for optional marketing communications (you may withdraw at any time)
• Legal obligation - where required by Nigerian law or regulation

5. Sharing your information

We share personal data only in the following circumstances:

• Service providers - companies that run parts of the Service for us and may only use the data to do so: Supabase (database, sign-in and file storage), Vercel (hosting), Paystack (payments and tutor payouts), Resend (email), Upstash (rate limiting), Cloudflare (bot protection and site analytics), Google (Google sign-in and, if you accept analytics cookies, Google Analytics) and DigitalOcean (the relay server for live video)
• AI providers - to answer AI Tutor and Teaching Assistant requests, the question and the relevant context (and any file you upload) are sent to DeepSeek, with Anthropic as a fallback, and question text is sent to Hugging Face to search the curriculum. We send only what the request needs, not your name or email. These providers process the request to return an answer
• Schools - if your account is associated with a school institution plan, the school administrator can view your progress data within the platform.
• Tutors - if you connect with a tutor on Schoogle, that tutor can see your name, the subjects and progress you share with them, your quiz results for their quizzes, and your messages and sessions with them.
• Legal requirements - we may disclose data where required by Nigerian law, court order, or to protect the rights and safety of our users.
• Business transfer - if Schoogle is acquired or merged, your data may be transferred as part of that transaction. We will notify you in advance.

Most of these providers store or process data outside Nigeria: in the European Union and the United States, and for DeepSeek, in China. Where data leaves Nigeria we rely on the provider's contractual safeguards and send only what each service needs, as the Nigeria Data Protection Act requires.

We never sell your personal data or use it for advertising.

6. Data retention

We keep your personal data while your account is open. When you delete your account (from your settings), your profile and the data linked to it are deleted straight away, apart from records of payments and tutor earnings, which we must keep for tax and financial record-keeping for up to 6 years. Copies of deleted data can remain in our encrypted backups for up to 30 days until those backups expire. Aggregate statistics that cannot identify you may be kept longer.

7. Cookies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how the Service is used. You can control cookies through your browser settings. Disabling cookies may affect some features of the Service.

We use strictly necessary cookies (keeping you signed in, security checks) and functional cookies (your display preferences) for everyone. Analytics cookies (Google Analytics) are only set if you choose Accept analytics in the cookie banner, and you can change your mind by clearing your cookies. We do not use advertising cookies.

8. Children's privacy

Schoogle is designed for secondary school students, most of whom are under 18. Under the Nigeria Data Protection Act 2023, anyone under 18 is a child and their data needs a parent's or guardian's consent. Learners who sign up themselves give their date of birth; if they are under 18 we email the parent or guardian they name, and the account cannot be used until that parent approves it. If the parent declines, the account and its data are deleted. Where a school enrols its students, the school is responsible for obtaining the parents' consent.

If you believe we hold a child's data without a parent's consent, please contact us immediately at privacy@schoogleng.com.

9. Your rights

Under the Nigerian Data Protection Regulation (NDPR) and applicable law, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate personal data
• Request deletion of your personal data ("right to be forgotten")
• Object to processing based on legitimate interests
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, email privacy@schoogleng.com. We will respond within 30 days.

10. Security

We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a prominent notice on the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the revised policy.

12. Contact us

For any privacy-related questions or requests, contact our Data Protection Officer: