Privacy Policy

We may collect account information, learning goals, language preferences, lesson progress, quiz results, tutor interactions, device and session details, organization membership information, and other data needed to operate the platform.

You can create your account or sign in with Google instead of a password. If you do, Google shares your name, email address and Google account identifier with us, and we use them only to create your account or sign you in. We do not receive your Google password, contacts, Drive files or any other information from your Google account.

When you use Communities, we process community names, descriptions, topics, rules and visibility; memberships, roles, notification choices and read status; messages, replies, quotations, edits, reactions and timestamps; join requests; direct-invite email addresses and invite-link activity; blocks, removals, bans and ban reasons; and reports, report details, reporter and reported-user identifiers, and moderation records.

When you purchase or change a paid plan, we may receive and store limited billing information including transaction references, previous and requested plans, billing intervals, effective dates, proration amounts, payment status, payment-provider plan and subscription identifiers, refunds, and provider errors. Full payment-card details are entered directly with the payment provider and are never stored by AdaptLearn.

Unless you disable analytics in cookie preferences, PostHog Session Replay may reconstruct page navigation, clicks, visible page state, and related browser or device details so we can diagnose problems and improve the product. Session Replay is not a live screen share or conventional video recording. Form inputs are masked, and password fields are expressly excluded from capture.

We use personal data to authenticate users, personalize learning, deliver Communities and realtime messaging, process subscriptions, support team and community administration, prevent unauthorized access, investigate reports and abuse, enforce platform rules, provide support, improve product quality, and comply with legal or regulatory obligations.

Notification categories may be enabled as account preferences, but AdaptLearn cannot deliver device or browser push notifications unless you separately grant permission through your browser or operating system. You can change notification categories in AdaptLearn and revoke device permission at any time.

Community names, descriptions, topics, rules, public-or-private status, and member counts may be visible in the directory to signed-in users, including when a community is private. Messages and membership lists are available only to active members authorized to enter that community. Other members can see message authorship, content, replies, quotations, reactions, and relevant timestamps.

Community owners, admins, and moderators can view member information needed to manage membership and may remove messages, change roles, remove or ban members, and review join requests. Reports may be reviewed by authorized AdaptLearn personnel. Report details and the email addresses of involved users may also pass through restricted operational-notification providers so the safety team can respond; reports are not sent only to the community’s own moderators.

Blocking another user records the relationship needed to hide their content and prevent interaction. A reported user may not be told the reporter’s identity except where required by law, necessary for procedural fairness, or authorized by the reporter.

Certain profile and learning-context fields may be used to generate personalized lessons, tutor responses, assessments, and progress recommendations. We work to minimize unnecessary token usage and retain operational control over caching, access restrictions, and auditability.

When you talk to your tutor by voice, your recording is sent to our speech provider to be turned into text and is not stored by AdaptLearn once that is done. You see the words before you send them, and the message you send is kept like any typed message. If you choose to hear replies aloud, the reply text is sent to our speech provider to be read out; the audio is kept briefly in temporary memory so it can be replayed, and is never added to your account. A learner under 13 can only use voice after a parent or guardian turns it on, and that choice is recorded.

We process data only for defined product, security, billing, support, and compliance purposes. We aim to collect what is necessary for those functions and avoid retaining unnecessary personal data beyond operational and legal needs.

Communities are not directed to children under 13. Where a child or other person who cannot independently authorize processing is permitted to use AdaptLearn, the responsible parent, guardian, school, or institution must provide any authorization required by applicable law. Contact support@atadaptlearn.co if you believe a child has used Communities without required authorization.

We may use infrastructure, payment, email, analytics, AI, realtime communications, error monitoring, push notification, operational notification, or support service providers that process data on our behalf. Analytics providers may include Google Analytics, Cloudflare Web Analytics, and PostHog, and in the Android app, Google Analytics for Firebase. If you choose to sign in with Google, Google provides that sign in step under its own privacy policy and tells us only the details described in section 1. Error monitoring is provided by Sentry, and push notifications to the mobile app are delivered through Expo, Firebase Cloud Messaging and the Apple Push Notification service, as described in section 16. Analytics is enabled by default and can be disabled at any time through cookie preferences. We require providers to support appropriate confidentiality, security, and contractual controls consistent with the service they perform. Payment card details are typically collected and processed by the payment provider directly, not by AdaptLearn, and the provider is responsible for the card-payment environment and the compliance controls that apply to it, including PCI-DSS where relevant.

Because AdaptLearn may serve users across multiple countries, personal data may be processed in jurisdictions different from the user’s own. Where required, we use contractual, technical, and organizational safeguards intended to support lawful cross-border handling.

We apply access controls, logging, rate limiting, payment verification, private-community access checks, and security protections designed to reduce unauthorized access or misuse.

• Community message bodies and associated message records are ordinarily retained for up to 180 days.
• When a message is deleted by its author or a moderator, its body is removed from normal display, while limited structural and moderation metadata may remain until the ordinary retention period ends.
• When an owner schedules community deletion, the community ordinarily remains available for a 72-hour grace period and is then deleted with its memberships, messages, reactions, invites, and join requests.
• When an account is deleted, the text of messages it wrote is removed and each message is shown as deleted, so replies from other members still make sense. Community ownership may transfer to another member.
• Reports, ban records, security logs, billing-change history, and transaction records are retained for as long as reasonably necessary to investigate safety issues, prevent repeat abuse or fraud, resolve disputes, meet tax, accounting, and legal obligations, and demonstrate actions taken. They are deleted or de-identified when those purposes no longer apply.

Depending on your jurisdiction, you may have rights relating to access, correction, deletion, portability, restriction, objection, or complaint. You can download your data, delete your account, review your privacy choices and sign out other devices yourself in the privacy center. For anything else, email privacy@atadaptlearn.co with the subject “Privacy request” and describe the request. We may ask for information needed to verify your identity and protect your account before acting on it. We will respond within the period required by applicable law.

Deleting a message, leaving a community, deleting a community, and deleting an account have different effects. A privacy request does not automatically require deletion of information that AdaptLearn must retain for legal claims, security, fraud prevention, the rights of other users, or another lawful purpose, but we will explain any applicable limitation.

AdaptLearn is operated by Adaptlearn Technologies Ltd., a company in Lagos, Nigeria, and handles personal data in line with the Nigeria Data Protection Act 2023 (NDPA) and, where it applies to you, the European Union and United Kingdom General Data Protection Regulation. We rely on these lawful bases:

• Contract. Creating and securing your account, building your learning path, lessons, practice and tutor answers, certificates, team and school seats, and taking payment for a plan you choose.
• Consent. Optional marketing email, analytics and marketing cookies, being contacted about a case study, and, for school learners under 13, the agreement of a parent or guardian. You can withdraw consent at any time in the privacy center or the cookie preferences, and withdrawing does not affect what happened before.
• Legitimate interests. Keeping AdaptLearn secure (sign in protection, new device alerts, abuse prevention), fixing errors, and improving the product, balanced against your rights and expectations.
• Legal obligation. Keeping payment and tax records, responding to lawful requests, and notifying regulators of personal data breaches.

Under the NDPA you have the right to be informed, to access your data, to have it corrected, to have it erased, to restrict or object to processing, to receive your data in a portable format, to not be subject to decisions based solely on automated processing that significantly affect you, and to withdraw consent. You can also complain to the Nigeria Data Protection Commission (NDPC).

• Copy of your data. In the privacy center, ask for a download. We prepare a file with your data in JSON and CSV and email you when it is ready. The link works for 24 hours and you can ask once a day.
• Deleting your account. In the privacy center on the web, or in the app under You, Settings, Privacy and security, confirm with your password. Your account is deleted after 14 days, and you can cancel until then from the link we email you. If you cannot sign in, ask for deletion on our account deletion page. Accounts that own a team or school need to hand it over first. Accounts a school created for its learners are removed by the school or at a parent or guardian's request to privacy@atadaptlearn.co.
• Signing in with Google. You can remove AdaptLearn's access in your Google account settings at any time. You can also set a password for your AdaptLearn account with the forgot password link on the sign in page, so you can sign in without Google.
• Privacy choices. Marketing email, cookies and case study contact can be turned on or off in the privacy center, and each change is recorded with the date and policy version.
• Anything else. Email privacy@atadaptlearn.co. We may ask you to confirm your identity first and respond within the time the law allows.

Our Data Protection Officer can be reached at privacy@atadaptlearn.co. If a personal data breach is likely to put your rights and freedoms at risk, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it and tell the people affected without undue delay, in plain language, with what happened and what they can do.

Some of our service providers process data outside Nigeria. We transfer personal data abroad only where the NDPA allows it: to countries with adequate protection, or with appropriate safeguards such as binding contractual terms with each provider, as described in our Data Processing Addendum, or on another basis the NDPA recognises.

AdaptLearn is not directed to children under 13 outside schools. When a school enrols a learner under 13, the learner's account stays limited (no communities, no public profile or leaderboard name, no marketing email) until a parent or guardian agrees through the link we send them. That agreement is recorded, and the parent or guardian can withdraw it or ask for the account to be deleted by emailing privacy@atadaptlearn.co.

The AdaptLearn app on Google Play is for people aged 13 and over. Learners under 13 use AdaptLearn on the web, with the protections described above.

The AdaptLearn mobile app uses the same account and the same data as the website, handled as this policy describes. The app also handles the following, each only for the purpose given.

• Crash diagnostics. When the app crashes or runs into an error, it sends a report to Sentry, our error monitoring provider, so we can find and fix the problem. A report contains technical details such as the device model, operating system and app version, the screen in use, the steps that led to the error, and your account ID. Reports are set up to leave out your name and email address, and web addresses in them are stripped of their query details.
• Push notifications. If you allow notifications, the app receives a push token for your device from Expo, which delivers notifications through Firebase Cloud Messaging on Android and the Apple Push Notification service on iOS. We store the token with your account only to send the notifications you have chosen. It is removed when you sign out on that device, when the delivery service reports it is no longer valid, or when your account is deleted. You can turn notifications off in the app or in your device settings at any time.
• App usage analytics. The Android app reports how it is used, such as which screens are opened, signing up, signing in, finishing onboarding and finishing a lesson, to our own analytics and to Google Analytics for Firebase. Google uses this to measure how many people who install the app after seeing an AdaptLearn advert go on to use it, and to help us show our adverts to people likely to find the app useful. The events Google receives carry only short labels and counts, never your name, email address, goals, messages or anything you write. Along with them, Google receives your device's advertising ID and an app instance ID. You can stop this at any time by turning off Usage data in the app's settings, which stops both our analytics and Google Analytics for Firebase on that device. You can also reset or delete your advertising ID in your device's Google settings. Google Analytics for Firebase is never turned on for learners under 13 or for learners who sign in with a school or family code.
• Calendar entries you choose to add. When you add a study session to your calendar, the app opens your device's own event form so you can check the details and pick a calendar before anything is saved. The event is saved on your device by your calendar app. AdaptLearn does not read your calendar and does not receive your calendar entries.
• Microphone audio for the voice tutor. The app asks for microphone access only when you choose to talk to your tutor by voice. Your recording is handled as described in section 4: it is sent to our speech provider to be turned into text and is not stored by AdaptLearn once that is done. You can withdraw microphone access in your device settings at any time.
• Staying signed in. The app keeps your sign in session in your device's secure storage so you do not have to sign in every time. Signing out removes it.

To delete your account in the app, go to You, Settings, Privacy and security, Delete account. Our account deletion page explains every way to delete your account, including when you cannot sign in.