Privacy Policy

1. Who is responsible for your data

CertPrep is operated by CloudKlass Academy, which acts as the data controller for personal data processed through the platform. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

2. What we collect

• Account data: your name, username, email address, and password (stored as a secure hash — we never see your password).
• Study data: the papers and topics you study, your answers, scores, progress, and your conversations with the AI tutor.
• Technical data: basic server logs (IP address, timestamps) kept for security and troubleshooting.
• Payment data: when you buy paper access we process checkout via Flutterwave (card, bank transfer, or USSD). We store transaction references, amounts, papers unlocked, and issue a company receipt email. We do not store full card numbers.
• Marketing attribution (optional): if you arrive from an ad or campaign link, we may store first-touch UTM parameters or click IDs (for example gclid) with your account so we can measure which campaigns work. This is not sold to third parties.

We deliberately collect the minimum needed to run the service and do not collect sensitive personal data beyond what you provide for study and billing.

3. How we use it

• to provide the service — marking your answers, tracking progress, tutoring;
• to process payments, unlock papers, and send receipts;
• to support you when you contact us;
• to improve the platform, using aggregated or de-identified insights;
• to measure advertising effectiveness (for example Google Analytics 4 and Google Ads conversion events such as sign-up and purchase) when analytics tags are enabled; and
• to keep the platform secure.

We do not sell your personal data. Analytics and ads tools may process event data under their own terms as our processors when those tags are active.

4. AI processing

When you submit an answer or chat with the tutor, that content is sent to our AI model providers to generate the marking or response. It is transmitted securely, used only to produce your feedback, and is not used by us to train models.

5. Cookies

We use an essential session cookie to keep you signed in. When analytics or ads measurement is enabled, Google may also set cookies used for aggregated measurement and conversion tracking. There are no advertising or cross-site tracking cookies.

6. Storage and retention

Data is stored on secured servers with routine encrypted backups. We keep your data while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except where a legal obligation requires longer retention.

7. Your rights

Under the NDPA you may:

• request a copy of the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your account and data;
• object to or restrict certain processing; and
• lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.

To exercise any of these, email support@cloudklass.academy — no forms, no friction.

8. Changes

If this policy changes in any material way, we will announce it in the app or by email before the change takes effect.