Privacy policy

• We collect the details you give us when you create an account, plus your learning progress and what you have bought.
• We use it to run your account, save your progress, keep track of what you own, and issue certificates.
• We do not sell your data, we do not run advertising, and there are no third-party tracking scripts on this site.
• Passwords are stored as scrypt hashes. Nobody here — including the teacher — can read your password.
• You can ask for a copy of your data, or for your account to be deleted, at any time.

When you create an account: your name, your email address, and a password (stored only as a hash).

As you learn: which lessons you have completed, when you last opened a course, minutes learned per day, your weekly goal and profile details you choose to add (a headline, a track, an experience level).

When you buy a program: which program, the amount, the date and an invoice number. No card number, Mobile Money number or bank detail is ever collected in this build — see the note on payments below.

When you write to us: the name, email address and message you put in the contact form.

Technically: a session cookie that keeps you signed in (see below). Server logs may record the request path, an error message and a timestamp; they are used for diagnosing faults and are not used to build a profile of you.

We set one essential cookie: the session cookie that keeps you signed in. It is httpOnly, signed with a server secret, and it contains a session identifier — not your password, your email or your progress.

There are no advertising cookies, no cross-site tracking pixels and no third-party analytics scripts. The code lab stores your work-in-progress in your own browser (localStorage) so a refresh does not lose it; it is not sent to us.

Account records, progress, purchases, invoices and issued certificates live in a PostgreSQL database. Lesson files and uploaded materials live in object storage or on the server's disk. Both are operated on our behalf by the hosting providers that run this deployment.

The database is reachable only from the application. The certificate verification page deliberately exposes the least information possible: the holder's name, the course, the study hours, the issue date and whether the certificate is still valid. It never shows an email address, an account id, a payment or a password.

Studying does not require a payment. No card or Mobile Money details are collected in order to open a lesson, a file, or the narration.

When a payment gateway is connected (for example Paystack or Flutterwave, which support Ghanaian cards and Mobile Money), the payment details will be collected by that provider on their own secure pages, under their privacy policy. We would only ever receive a confirmation that a payment succeeded, an amount, a reference and the last four digits of a card if you used one.

• You can see your own account, progress, purchases, invoices and certificates.
• The teacher account can see student names, email addresses, programs owned, purchases, progress and certificates, because that is what running a school requires: granting access, helping with a problem and issuing certificates.
• Nobody else can see your account. Another student cannot see your progress.
• We do not share your data with advertisers or data brokers, and we do not sell it. We would only disclose it if a lawful order in Ghana required us to, and we would tell you unless we were legally barred from doing so.

Account data is kept while your account exists. If you ask us to delete your account, the record — including progress, purchases and invoices — is removed from the database. A certificate that was already issued stays verifiable unless you ask for it to be withdrawn, because an employer may still hold a copy; if you would rather it were withdrawn, say so and the verification page will show it as withdrawn.

Contact-form messages are kept until the question is answered, then cleared.

• See your data: most of it is on your account page and your dashboard; you can also export your learning history as CSV from the progress page.
• Correct it: change your name, email, password, profile and weekly goal from the account page.
• Delete it: ask us and we will delete the account record. You can also delete your account yourself from the account page.
• Object or restrict: write to us and tell us which use you object to; we will stop unless there is a legal reason we cannot.
• Complain: if you are not satisfied, contact the Ghana Data Protection Commission.

The platform is intended for people aged 16 and over. If you are younger, please use it with a parent or guardian's permission — and ask them to read this page with you. If we learn that an account was created by a child without that permission, we will delete it on request.

If this policy changes in a way that affects you, the date at the top changes and — for a significant change — we will say so on the dashboard when you next sign in. Continuing to use the platform after a change means you accept the updated policy.