Privacy Policy

1. Who is responsible for your data

CertPrep is operated by CloudKlass Academy, which acts as the data controller for personal data processed through the platform. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA).

2. What we collect

• Account data: your name, username, email address, and password (stored as a secure hash — we never see your password).
• Study data: the papers and topics you study, your answers, scores, progress, and your conversations with the AI tutor.
• Technical data: basic server logs (IP address, timestamps) kept for security and troubleshooting.

We deliberately collect the minimum needed to run the service — no payment details are collected during early access, and we do not collect sensitive personal data.

3. How we use it

• to provide the service — marking your answers, tracking progress, tutoring;
• to support you when you contact us;
• to improve the platform, using aggregated or de-identified insights; and
• to keep the platform secure.

We do not sell your personal data and we do not use it for third-party advertising.

4. AI processing

When you submit an answer or chat with the tutor, that content is sent to our AI model providers to generate the marking or response. It is transmitted securely, used only to produce your feedback, and is not used by us to train models.

5. Cookies

We use a single essential session cookie to keep you signed in. There are no advertising or cross-site tracking cookies.

6. Storage and retention

Data is stored on secured servers with routine encrypted backups. We keep your data while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except where a legal obligation requires longer retention.

7. Your rights

Under the NDPA you may:

• request a copy of the personal data we hold about you;
• ask us to correct inaccurate data;
• ask us to delete your account and data;
• object to or restrict certain processing; and
• lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been infringed.

To exercise any of these, email support@cloudklass.academy — no forms, no friction.

8. Changes

If this policy changes in any material way, we will announce it in the app or by email before the change takes effect.