Privacy policy

1. Who we are

AeroLearn Technologies Ltd. (“AeroLearn”, “we”, “our”, “us”) operates the AeroLearn learning platform at aerolearn.name.ng and the AeroLearn desktop app. We are the data controller for the personal information described in this policy.

Registered address: 5 Bello Folawiyo, Ketu, Lagos, Nigeria. Privacy contact: support@aerolearn.name.ng.

The platform is built for Nigerian secondary school students in JSS1 through SS3 preparing for WAEC, NECO and JAMB. If you are under 18, please read this policy with a parent or guardian before you create an account.

2. Information we collect

You give us this information directly:

• Account details — your name, email address, class level (JSS1–SS3) and school name.
• Password — only if you sign up with email. It is hashed by our authentication provider; we never see or store the plain text. If you sign in with Google, we hold no password for you at all.
• Subject choices — the subjects you select during onboarding.
• Learning activity — the lessons you open, answers you submit, quiz and mock-exam scores, XP, streaks, Aero Coins, notes and flashcards you create, and your timetable.
• Uploads — payment receipts for Pro verification, and any homework photo, document or voice note you send to the AI tutor.
• Community posts and messages — anything you write in the community section or send in chat.
• Support correspondence — what you tell us when you contact us.

We collect this automatically when you use the platform:

• Device type, operating system and browser
• IP address, and the country it resolves to
• Pages opened, features used and timestamps
• Error and crash diagnostics

We do not collect precise location, contacts, camera roll, microphone or SMS data. Nothing on the platform tracks you across other websites.

3. Signing in with Google

AeroLearn offers “Sign in with Google” as an alternative to an email and password. If you use it, Google asks for your consent and then sends us a limited set of information about your Google Account.

The scopes we request, and nothing more:

• openid — confirms that you are the holder of the Google Account and gives us a stable, non-reusable account identifier.
• userinfo.email — your Google Account email address and whether Google has verified it. We use it as the identity of your AeroLearn account and to send you account-related email.
• userinfo.profile — your display name and profile picture URL, used to fill in your AeroLearn profile and to show your avatar on leaderboards and community posts.

We do not request access to Gmail, Google Drive, Contacts, Calendar, Photos, Classroom or any other Google service, and we do not request any scope that Google classifies as sensitive or restricted. Signing in with Google gives AeroLearn no ability to read, send or modify anything in your Google Account.

Limited Use. AeroLearn’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically, data received from Google APIs is used only to provide and improve the features you signed in for; it is not transferred to anyone except as needed to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you; it is never sold, never used for advertising, ad targeting or building advertising profiles; and no human at AeroLearn reads it except where you have given permission for a specific support request, where it is necessary for security, or where the law requires it.

Taking it back. You can disconnect AeroLearn from your Google Account at any time at myaccount.google.com/permissions. Disconnecting stops any future sign-in; it does not by itself delete the AeroLearn account, so email us as well if you want the account and its data removed — see section 10.

4. How we use your information

We use what we collect to:

• Create and secure your account, and keep you signed in
• Serve the lessons, past questions and mock exams for your class and subjects
• Track your progress, and work out which topics are costing you marks
• Run streaks, XP, Aero Coins and leaderboards
• Verify the receipt you upload for a Pro subscription
• Answer your questions in the AI tutor and grade practice essays
• Send you account and service email — see section 6
• Detect and prevent fraud, cheating and abuse
• Diagnose faults and improve the platform

Why we ask for your school name. So leaderboards rank you alongside classmates rather than strangers, so the material matches the exam board your school sits, and so we can see in aggregate which schools the platform serves well. Your school name is never sold, and we do not report your individual results to your school.

We do not use your data to build advertising profiles, and we do not run third-party advertising on the platform.

5. AI features and what reaches them

The AI tutor, essay grader, flashcard generator, quiz generator and timetable builder work by sending your request to Groq, an inference provider, which runs the model and returns the answer.

What is sent is limited to what the feature needs:

• The question or message you typed
• The lesson or question you are working on, so the answer is about the right topic
• The essay text you submitted for grading
• For a photo or voice note, the file itself — a voice note is transcribed first, and the transcript is what the model sees

Your name, email address and school are not included in these requests, and no data from your Google sign-in is sent to Groq. We do not use your conversations to train any model, and our agreement with Groq does not permit them to either. Treat AI answers as study help rather than fact: they can be wrong, and they are not a substitute for your teacher.

6. Who processes your data for us

We do not sell, rent or trade your personal information. We share it only with the processors below, each of which handles it under contract, on our instructions, and only for the purpose named:

• Supabase — authentication, the database that holds your account and learning records, and file storage for receipts and uploads.
• Vercel — hosting and content delivery for the website and API.
• Groq — AI inference for the features in section 5.
• Resend — sending transactional email (verification, password reset, receipts, study reminders).
• Cloudinary — storing and serving images you upload.
• Google — only if you choose Sign in with Google, and only as described in section 3.

Beyond those, we disclose personal information only where Nigerian law or valid legal process requires it, where it is necessary to protect someone’s safety, or where a merger or acquisition takes place — in which case we will tell you before your data moves.

Some of these providers operate outside Nigeria, so your data may be stored or processed abroad, including in the European Union and the United States. Where that happens we rely on the provider’s standard contractual protections to keep the same level of protection this policy describes.

7. Storage and security

Your account and learning data are held in a Postgres database managed by Supabase, with row-level security policies that scope every read and write to the account that owns the row. Encryption is applied in transit (HTTPS/TLS) and at rest.

Payment receipts go into a private storage bucket that is not publicly readable; an administrator opens one through a short-lived signed link created for that purpose. Passwords are stored only as hashes. Administrative access is limited to the AeroLearn staff who need it.

We do not store card numbers or bank account details. Pro subscriptions are verified by a person reviewing the receipt you upload.

No system is perfectly secure. If a breach ever affects your personal data, we will notify you and the Nigeria Data Protection Commission as the Nigeria Data Protection Act 2023 requires.

8. How long we keep it

• Account and learning records — for as long as your account is open, so your progress is still there when you come back.
• After you ask us to delete the account — removed from live systems within 30 days, and from encrypted backups within a further 90 days.
• Dormant free accounts — deleted after 24 months with no sign-in. We email you first.
• Payment receipts — 6 years, because Nigerian tax and company law require us to keep records of transactions.
• AI tutor conversations — 12 months, so you can look back at an explanation, then deleted.
• Technical logs — 90 days.
• Support email — 24 months after the request is closed.

9. Cookies

We use a small number of cookies, and none of them are for advertising. The essential ones keep you signed in between visits; without them you would have to log in on every page. Our cookie policy lists each one and what it does.

10. Your rights, and how to use them

Under the Nigeria Data Protection Act 2023 you have the right to:

• Ask what personal data we hold about you, and get a copy of it
• Have data that is wrong corrected
• Have your account and its data deleted
• Object to, or ask us to restrict, a particular use
• Withdraw consent you previously gave, without affecting what came before
• Complain to the Nigeria Data Protection Commission

To use any of these, email support@aerolearn.name.ng from the address on your account. We reply within 30 days. There is no charge, and asking will never affect your access to the platform.

Deleting your account. Email us with “delete my account” and we will remove the account, your learning records, your uploads and your community posts on the timetable in section 8. Deletion is permanent — progress, XP, streaks and Aero Coins cannot be restored afterwards. Receipts are the one exception: we must keep those for the statutory period above, detached from your profile.

11. Students under 18

The platform is intended for students aged 13 and above. We do not knowingly create accounts for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has an account, email us and we will delete it and the data attached to it.

If you are between 13 and 17, please go through this policy with a parent or guardian before signing up. A parent or guardian may contact us at any time to see what we hold about their child, correct it, or have it deleted. We do not show third-party advertising to any user, and we do not profile students for marketing.

12. Changes to this policy

We update this policy when what we do with data changes. The date at the top always reflects the current version. If a change materially affects your rights, we will tell you in the app and by email before it takes effect, rather than relying on you to notice.

13. Contact us

• Privacy, data access and deletion requests: support@aerolearn.name.ng
• Post: AeroLearn Technologies Ltd., 5 Bello Folawiyo, Ketu, Lagos, Nigeria

If you are not satisfied with how we have handled a request, you can complain to the Nigeria Data Protection Commission.