Privacy Policy

1. Introduction

Nesta Connect Limited ("we", "us", "our") operates MyOgaTutor at www.myogatutor.com. We are committed to protecting your personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and other applicable laws.

This Privacy Policy explains what data we collect, why we collect it, how we use it, and your rights regarding your personal information.

2. Data We Collect

Information you provide:

• Full name and email address when you create an account
• Payment information processed by Paystack (we never store card details)
• Questions and messages you submit in the chat

Information collected automatically:

• Usage data — number of questions asked, subjects selected, language preference
• Device and browser information used to keep the service secure and apply free-access limits fairly
• A pseudonymous first-party device identifier for free-access and abuse prevention
• A server-side keyed hash derived from network information for security and abuse-review signals; the anti-abuse record does not store the raw network address
• Date and time of access

3. How We Use Your Data

• To create and manage your account
• To provide the AI tutoring service
• To process your subscription payments
• To send important account notifications and updates
• To enforce free-access limits fairly across accounts and reduce repeated-account abuse
• To detect, review and prevent fraud, misuse and attempts to evade service limits
• To improve our service and fix technical issues
• To comply with legal obligations

4. Third Parties We Share Data With

We use the following trusted third-party services to operate MyOgaTutor:

• Google Firebase — for user authentication and data storage
• Anthropic — the AI provider that powers our tutoring responses
• Paystack — for secure payment processing
• Vercel — for website hosting and delivery

We do not sell your personal data to any third party. We do not share your data with advertisers.

5. Data Retention

We retain your personal data for as long as your account is active and only for as long as reasonably necessary for the purposes described in this Policy. If you delete your account, we will delete or de-identify personal data within 30 days where reasonably possible, except where retention is required by law or is reasonably necessary for security, fraud prevention, dispute resolution or enforcement of our service terms.

6. Your Rights Under NDPA 2023

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate data
• Deletion — request deletion of your personal data
• Objection — object to certain types of processing
• Portability — request your data in a portable format

To exercise any of these rights, contact us at hello@myogatutor.com. We will respond within 30 days.

7. Cookies

MyOgaTutor uses first-party cookies and similar essential identifiers that are necessary for core service, authentication and security functions. This includes a signed security identifier used to apply the free AI allowance fairly across accounts using the same browser and to help detect repeated-account abuse.

The anti-abuse identifier is not used to read your browsing history or the contents of other websites, and it is not used by MyOgaTutor for advertising profiling.

8. Children's Privacy

MyOgaTutor is designed for students aged 13 and above. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us at hello@myogatutor.com and we will delete the account promptly.

For users aged 13-17, we encourage parental awareness and consent.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. All data is transmitted over encrypted HTTPS connections.

For abuse prevention, MyOgaTutor uses pseudonymous identifiers rather than exposing raw device identifiers in operational reporting. Network-based abuse signals are keyed-hash values and are treated as review signals, not proof that different accounts belong to the same person.

10. Contact Us

For any privacy-related questions or to exercise your rights:

Email: hello@myogatutor.com

Data Controller: Nesta Connect Limited

Nigeria Data Protection Commission (NDPC) complaints can be filed at ndpc.gov.ng