The short version
Students can sign up alone
No parent required to start. A parent can be invited in later, whenever the student chooses.
Access is scoped, not shared wide
Tutors never see your phone number. Parents never see another child's data. Every role sees only what its job requires.
We don't sell your data
Ever. To anyone. We only share what's needed to run the service — named in Section 5.
We never see your card details
Payments go straight to Paystack. Your card or bank number never touches our servers.
1 Who we are & who this covers
VersityEdge Technologies Ltd ("VersityEdge," "we," "us") operates an exam-preparation platform for students preparing for JAMB/UTME, WAEC/NECO/GCE, Post-UTME, and first-year university (100L) work, across our website, mobile apps, and physical study centres.
This policy applies to everyone who uses VersityEdge:
If any term in this policy is unclear, contact us — see Section 14. Using VersityEdge means you've read and accepted this policy. If you don't agree with it, please don't use the platform.
2 Information we collect
2.1 Information you give us
- Account details: full name, phone number, email, date of birth, gender, state of origin, and a password we store only as an irreversible cryptographic hash — never in plain text.
- Parent/guardian details (if invited): name, title, phone, email, and relationship to the student.
- Billing name and email at checkout. We do not collect your card or bank account number — see Section 5.
- Content you create: class chat messages, tutor feedback, forum posts, profile photo, and anything submitted through AI-assisted features like snap-and-solve, including images.
- Anything you send us directly: support tickets, feedback, survey answers.
2.2 Information collected automatically
- Usage data: pages/screens viewed, features used, daily practice activity, mock exam and diagnostic participation, streaks, time on platform, class attendance.
- Device data: device type, OS, app version, IP address, and a push-notification token (used only to deliver notifications you haven't opted out of).
- Live class data: attendance, and — for recorded sessions — audio and/or screen-share recordings of that session.
2.3 Academic and performance data
Diagnostic results, mock exam scores, subject-level answers, readiness metrics, XP, badges, and leaderboard standing, unless you've opted out of the leaderboard (Section 10).
2.4 Information from third parties
- Payment confirmation events from Paystack once a transaction completes.
- Delivery status for SMS/WhatsApp from Termii, and transactional email delivery from Brevo.
2.5 WhatsApp conversations
If you message our WhatsApp support line (for example after tapping a "Click to WhatsApp" ad on Facebook or Instagram, or by saving our number), we process:
- Your WhatsApp phone number and the profile name WhatsApp shows us.
- The content of the messages you send us and the replies we send back.
- If you came from one of our ads, the ad-click identifier Meta attaches to your first message, so we know which ad brought you.
- Details you volunteer in the chat, such as your name, the exam you are preparing for, and the phone number you registered with (used only to look up your VersityEdge account and generate your payment link).
How we use it: only to answer you, help you sign up or pay, and give you the class and group links you asked for. We reply only to people who message us first, and only while the conversation is active. We do not cold-message people, add you to groups without your say-so, or send bulk promotional WhatsApp messages from this line.
You are talking to an automated assistant. Replies on this line are written by an AI assistant (named "Maria") that can look up our public programme and pricing information and generate payment links; it says so in its first message. A member of our team can read the conversation and step in at any time, and will do so for complaints, refunds, account problems, or if you ask for a person.
Stop at any time: reply STOP and we will not message you again; reply START to resume. You can also ask us to delete your conversation (Section 10). WhatsApp itself is operated by Meta, which handles message delivery under its own privacy policy; we do not control what Meta collects.
What we don't do
We do not buy personal data about you from data brokers, and we do not run third-party advertising trackers on VersityEdge.
3 How we use your information
- Create and secure your account, including sending one-time verification codes by SMS and/or email.
- Deliver the core service: daily practice, mock and diagnostic exams, live classes, personalised study recommendations, readiness tracking, and leaderboards.
- Process payments and manage your subscription, tutoring credits, and resource purchases.
- Let a parent/guardian you invite view your academic progress and manage payments, within the scoped access described in Section 7.
- Let tutors, managers, and centre partners run your program, strictly within their scoped access.
- Send service messages (OTPs, class reminders, receipts, progress updates) and — only if you haven't opted out — marketing messages.
- Detect and prevent fraud, abuse, and violations of our Terms of Use.
- Improve the platform through aggregate usage analysis. We do not use your individual performance data to make automated decisions that have a legal or similarly significant effect on you.
- Meet our legal and regulatory obligations.
We do not sell your personal data.
Not to advertisers, not to data brokers, not to anyone — under any circumstance.
4 Our legal basis for processing
Under the Nigeria Data Protection Act 2023 (NDPA), we rely on one or more of the following, depending on the activity:
| Basis | Example |
|---|---|
| Consent | Marketing messages, optional AI-assisted features |
| Performance of a contract | Delivering the service you signed up and paid for |
| Legitimate interest | Fraud prevention, service improvement, platform security |
| Legal obligation | Financial record-keeping, responding to lawful requests |
5 Who we share data with
We share personal data only where necessary to run the service, and only with these named recipients:
| Recipient | Purpose | What's shared |
|---|---|---|
| Paystack | Payment processing | Billing name/email, transaction amount. Card/bank details go directly to Paystack — never through our servers. |
| Termii | SMS delivery (OTP, reminders) | Phone number, message content |
| Brevo | Transactional & marketing email | Email address, name, message content |
| Firebase (Google) | Push notification delivery | Device push token |
| Amazon Web Services (AWS) | Application hosting, database, file storage, backups, and class recordings (hosted in the AWS US region — us-east-1) | All platform data described in Section 2, as needed to run the application |
| Our live-class infrastructure (self-hosted) | Real-time audio/screen-share and recording | Audio stream, screen-share, participant identity — for the session only |
| Our AI provider | Powering AI-assisted study features (e.g. snap-and-solve) | The question/image you submit and our response. Images are used to generate a response and are not retained afterward. |
| AI model providers for our WhatsApp assistant (Cloudflare Workers AI, Groq, and a Kimi model we host on Modal) | Generating replies in WhatsApp conversations | The text of the conversation (recent messages and your latest message) and our system's answer. We do not send these providers your registered phone number or payment details except where you type them into the chat. |
| Meta (WhatsApp / Facebook) | Delivering WhatsApp messages; attributing ad clicks | Messages travel through WhatsApp; Meta provides the ad-click identifier on your first message |
| Our internal team | Operating and supporting the platform | Access strictly scoped per role — see Section 7 |
| Legal / regulatory authorities | Only where legally required | The minimum necessary, only when legally compelled |
None of these recipients may use your data for their own independent marketing.
6 International data transfers
VersityEdge's application and database infrastructure is hosted with Amazon Web Services (AWS) in the United States (us-east-1 region). Other processors listed in Section 5 — including our email, SMS, and analytics providers — may also store or process data outside Nigeria.
Whenever your data is transferred outside Nigeria, we rely on a safeguard recognised under the Nigeria Data Protection Act 2023 (NDPA), including contractual data-protection obligations imposed on our processors (such as AWS's own data processing terms) and, where applicable, your consent. We select processors that maintain internationally recognised security and compliance certifications, and we do not transfer data to any party for a purpose beyond what's described in this policy.
7 Access is scoped by role
We maintain a strict internal Data Access Policy that governs exactly which role can see which data. In summary:
You
Always have full access to your own data, including self-service export and account deletion.
Parent/guardian
Sees academic performance, payment history, and enrollment — never live-class chat, never another child's data beyond leaderboard initials. Access ends the moment the link is removed.
Tutors
See your name and performance in subjects they teach you — never your phone number, email, or your parent's contact details.
Managers & centre partners
Broader operational visibility, strictly scoped to their own program or centre.
Internal staff
Access scoped by department. Sensitive actions (refunds, discounts) are logged and reviewable.
Our complete internal access policy is available on request for verification.
8 Children's data
Many VersityEdge students are minors preparing for secondary or post-secondary exams. A student can independently create and use an account — this reflects the reality that it's the student, not a parent, who is preparing for the exam. A student can invite a parent, guardian, or sponsor to link to their account at any time, to support their preparation and manage payments.
We collect only what Section 2 describes as reasonably necessary to deliver the service, we apply the same role-scoped access from Section 7 regardless of age, and we do not use a minor's data for anything beyond delivering and improving the educational service, subject to applicable law.
Reviewed under NDPA
This approach to independent minor sign-up, combined with the role-scoped access in Section 7 and the invite-based parent/guardian link, has been reviewed and confirmed compliant with the Nigeria Data Protection Act 2023.
9 How long we keep your data
| Data | Retention |
|---|---|
| Analytics / usage event logs | 1 year, then archived or deleted |
| System & delivery logs (webhooks, verification codes) | 1 year |
| WhatsApp conversations (messages, number, profile name) | 12 months after the last message, then deleted. Deleted sooner on request; opted-out contacts keep only the number and a "do not contact" flag so we honour your choice |
| Class recordings | Retained indefinitely; deletable at any time by platform administrators |
| Account data, after a deletion request | Deleted promptly, except as below |
| Financial & class-attendance records | Retained 6 months after a deletion request, for legal/financial compliance, before final deletion |
10 Your rights
Subject to applicable law, you can:
Access
Export your data any time, in-app.
Correct
Fix inaccurate personal data.
Delete
Delete your account in-app, subject to Section 9's retention exceptions.
Object / restrict
Turn off marketing messages and other optional processing.
Withdraw consent
At any time, without affecting past processing.
Complain
To the Nigeria Data Protection Commission (NDPC) or your local authority.
To exercise a right not available directly in-app, contact us — Section 14.
11 Security
We apply safeguards appropriate to the sensitivity of what we hold: encrypted password storage, encrypted transport (TLS/HTTPS) for data in transit, restricted and logged internal access to sensitive data, and we never store raw payment card or bank credentials ourselves.
No system is fully secure. Use a strong, unique password and keep your login details to yourself.
12 Cookies & similar technologies
Our web app uses cookies and browser local storage to keep you signed in, remember your preferences, and understand how the platform is used.
| Type | Purpose |
|---|---|
| Essential (cookies & local storage) | Keep you logged in, maintain your session, remember settings like dark/light mode. The platform will not function correctly without these. |
| Analytics (Google Analytics) | Understand which pages and features are used, and how, so we can improve the platform. Google Analytics may set its own cookies as part of this. |
We do not run third-party advertising, and we do not use cookies to track you across other websites. You can control cookies through your browser settings at any time; blocking essential cookies may prevent you from logging in or using parts of the platform.
13 Changes to this policy
We may update this policy as our practices, features, or the law changes. Material changes will be announced in-app or by email, and we'll update the "Last updated" date at the top of this page. Continuing to use VersityEdge after a change takes effect means you accept the update.
14 Contact us
Questions about this policy, your data, or a request under Section 10? Reach us here:
Registered office
BOI-UI Innovation Hub, University of Ibadan, Ibadan, Nigeria