Last updated: 12 October 2026. This Privacy Policy explains what personal information Kainuwa Academy (Kainuwa Digital Africa Ltd, CAC 8594441, "Kainuwa", "we", "us") collects when you use our website, mobile app and services, why we collect it, and the choices you have. We handle personal data in line with the Nigeria Data Protection Act 2023 (NDPA).
1. What we collect
- Account details: name, username, email address, phone number, password (stored only in scrambled form), country, state and city, profile photo and cover photo, and the language you choose.
- Sign-in with Google: if you use it, we receive your name, email address and Google account identifier from Google. We never see your Google password.
- Learning data: enrolments, lesson progress, video progress, quiz attempts and scores, assignments you submit, reviews, certificates, badges and wishlist.
- Payment records: what you bought, the amount, the date, the payment reference and the gateway used (Paystack or Flutterwave). Your card, bank and USSD details are entered on the gateway's page and are never stored by us.
- KAIDA Points wallet: your points balance and the transactions on it.
- Shop orders: delivery name, address and phone number for physical products.
- Payout details: if you are an instructor or affiliate, the bank account details you add for withdrawals and the withdrawal requests you make.
- Things you write or upload: messages, support tickets, forum posts, questions and answers, reports about content, course materials and images. Pictures you upload are compressed to save space, and location data hidden inside photos is removed.
- AI assistant chats: the questions you ask our AI assistant and its replies.
- Technical data: IP address, browser and device type, app version, a push-notification token (mobile app), and a sign-in token that keeps you logged in on the app.
- Referral data: if you arrive through an affiliate link, we record which affiliate and which course the link was for.
- Organisation data: if you join an organisation plan, the organisation owner can see your name, email and course progress.
2. How we use your information
- To create and run your account and give you access to what you bought.
- To process payments, deliver orders, issue certificates and keep financial records.
- To send service messages (verification codes, receipts, security alerts, course updates, support replies).
- To send promotions and news. You can opt out at any time using the link in the email or by contacting us.
- To pay instructors and affiliates what they have earned.
- To keep the platform safe: preventing fraud, spam and abuse, limiting repeated login attempts, reviewing reported content and investigating security incidents.
- To improve our courses, app and AI assistant.
- To meet legal and regulatory duties.
3. Our lawful bases
We process your data because: you agreed (for example to promotional emails or the camera and notification permissions in the app); it is needed to carry out our contract with you (your account, purchases and certificates); we have a legitimate interest in keeping the service secure and improving it; or the law requires it. Where we rely on your consent, you can withdraw it at any time.
4. Cookies and similar technology
- Session cookie: keeps you signed in for up to 24 hours. It is essential and is only sent over a secure connection.
- Referral cookie: if you open an affiliate link, a small cookie remembers it for 30 days so the affiliate can be credited if you buy that course.
- App storage and caching: the website can work offline and the mobile app stores your sign-in token on your device. Signing out removes the token from our server.
You can block cookies in your browser, but you will not be able to sign in without the session cookie.
5. Who we share your data with
We do not sell your personal data. We share it only as follows:
- Payment gateways (Paystack and Flutterwave) to take and confirm payments.
- Service providers that host our servers, send our emails and push notifications (including Google Firebase), and verify Google sign-in.
- AI providers: when you use the AI assistant, your message is sent to the AI service we have connected so it can answer. Please do not put passwords, card numbers or other secrets into the assistant.
- Instructors of courses you take can see your name, progress, quiz and assignment results, and the messages and questions you send them.
- Organisation owners can see the learning progress of members they enrolled.
- Affiliates are told only that a sale from their link happened and the commission earned.
- Authorities and advisers where the law requires it, to protect our rights, or to our professional advisers under confidentiality.
- A buyer or successor if our business is ever merged or sold, with the same protection for your data.
6. Transfers outside Nigeria
Some of our providers (for example Google, AI services and email services) process data on servers outside Nigeria. When that happens we use providers that apply appropriate safeguards, as the NDPA requires.
7. How long we keep your data
We keep account and learning data while your account is active. Financial records are kept for as long as Nigerian law and tax rules require. Support tickets and security logs are kept for a limited period needed for safety and dispute handling. When you delete your account, we remove or anonymise your data as described in our Account Deletion Policy.
8. How we protect your data
We use encrypted connections, hashed passwords and tokens, access checks on every sensitive page, limits on repeated sign-in attempts, review of uploaded content, and regular security checks. No system is perfectly secure, so please use a strong password and keep it private. If a breach affects your rights, we will notify you and the regulator as the law requires.
9. Your rights
Under the NDPA you may ask us to: give you a copy of your data; correct it; delete it; restrict or object to some uses; give it to you in a portable format; and withdraw consent. You can edit most details in your profile. For anything else, write to academy@kainuwa.africa. We reply within 30 days. You also have the right to complain to the Nigeria Data Protection Commission.
10. Children
You must be at least 16 to register. We do not knowingly collect data from children under 16. If we learn that we hold data of someone younger than 16, we will delete the account and its data.
11. Changes to this policy
We may update this policy when our services change. The date at the top shows the latest version. If a change is significant, we will tell you by email or a notice on the platform.
12. Contact us
Kainuwa Digital Africa Ltd, 01 Behind LGA Secretariat, Gombi, Adamawa State, Nigeria.
Email: academy@kainuwa.africa