Privacy Policy

This policy explains how Learning Playground (“we”, “us”) collects and uses personal data. We are the data controller. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and applicable regulations.

1. Data we collect

• Account & profile — name, email, role (student, parent, tutor, creator), and a student's learning level.
• Family links — connections between a parent/guardian and a student, and between a tutor and a student.
• Learning activity — quizzes taken, answers, scores, progress, and assignments.
• Live classes — chat messages, whiteboard activity, attendance, and — where enabled — session recordings.
• Payments — plan and transaction references. Card processing is handled by Paystack; we do not store full card numbers.
• Technical — sign-in sessions and basic security/diagnostic data.

2. Children's data

The Platform is used by students who may be minors. We rely on the consent and involvement of a parent or guardian for a minor's use. A linked parent/guardian and an assigned tutor may see that student's learning activity so they can support their education. We do not knowingly use children's data for advertising.

3. How we use data and our lawful basis

• To provide the Platform and deliver learning — performance of a contract.
• To process payments and grant access — contract and legal obligation.
• To keep users safe (moderation of chat and live classes, especially for minors) — legitimate interest and the protection of children.
• To operate a minor's account — consent of the parent/guardian.
• To improve and secure the service and meet legal duties.

4. Who we share data with

We share personal data only as needed to run the Platform, with processors bound to protect it:

• Supabase — database, authentication, and hosting.
• Paystack — payment processing.
• LiveKit — live audio/video for classes.
• Parents/guardians and tutors — access to their linked student's learning activity.

We do not sell personal data. We may disclose data where required by law.

5. International transfer

Our infrastructure is hosted in Canada (Supabase, Central Canada region), and some processors operate outside Nigeria. Where personal data is transferred abroad, we take steps required by the NDPA to ensure it remains adequately protected.

6. How long we keep data

We keep personal data only as long as needed for the purposes above or as the law requires. Live-class recordings are retained for a limited period and then automatically deleted. Account and learning records are kept while your account is active and for a reasonable period afterwards.

7. Your rights

Subject to law, you may:

• access the personal data we hold about you;
• correct inaccurate data;
• request deletion of your data;
• object to or restrict certain processing;
• request a copy of your data in a portable format;
• withdraw consent at any time (this does not affect processing already carried out).

For a minor, a parent/guardian may exercise these rights. To make a request, contact us at [email protected].

8. Security

We protect data with access controls enforced at the database level (row-level security), encrypted secrets, and least-privilege access. No system is perfectly secure, but we work to protect your data and will notify you and the relevant authority of a breach where the law requires.

9. Cookies and sessions

We use cookies strictly to keep you signed in and to keep the Platform secure. We do not use third-party advertising cookies.

10. Changes and contact

We may update this policy and will notify you of material changes. Contact our privacy team at [email protected] (Learning Playground). You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).