Privacy Policy

StudiCross is operated by BSTRADESAFE TECHNOLOGIES LIMITED, a company registered in Nigeria (RC 9511968), registered address [Registered Address]("StudiCross", "we", "us"). We are the data controller for the personal information described in this policy. If you have questions about this policy or how we handle your data, contact us at [[email protected]].

We collect the following categories of personal data:

• Account information: your name, email address, and password (stored as a salted hash — we never store or can see your actual password).
• Academic profile: your education level, class/term or university and program, subjects you're studying, and the priority subject you tell us you're struggling with.
• Learning content: documents you upload (e.g. worksheets, past questions), messages you send in chat with Chilee, practice questions and your self-reported answers, and notes you write.
• Usage data: which features you use and when (e.g. practice sessions, chat exchanges, uploads), so we can show you real progress and study-time statistics — never estimated or fabricated.
• Age and parental consent status: whether you've told us you're under 18, and, if so, your confirmation that a parent or guardian is aware of your use of StudiCross (see Section 6 below for exactly how this works).

We use your data to:

• Create and secure your account, and let you sign in.
• Generate personalized tutoring, practice questions, and daily lessons matched to your real level and real weak spots.
• Show you honest, real progress statistics — never fabricated numbers.
• Respond to support requests and improve StudiCross.
• Meet our legal obligations, including under the Nigeria Data Protection Act 2023.

We don't sell your personal data. We share it only with service providers who help us run StudiCross, under contractual obligations to protect it:

• Anthropic (maker of the Claude AI models) — processes the content of your chat messages, practice requests, and uploaded documents in order to generate Chilee's responses. This involves transferring data outside Nigeria to Anthropic's infrastructure.
• Our database and hosting providers — store your account and academic data on our behalf. This may involve transferring data outside Nigeria.

Where your personal data is transferred outside Nigeria, we take steps to ensure it receives a level of protection consistent with the Nigeria Data Protection Act 2023, including relying on our service providers' contractual data protection commitments.

We keep your account and academic data for as long as your account is active, so your progress history stays accurate and useful. If you delete your account, we delete your personal data within a reasonable period, except where we're required to keep it longer by law.

StudiCross is used by secondary school students, some of whom are under 18. At signup, we ask whether you're 18 or older. If you tell us you're under 18, we ask you to confirm — by ticking a box — that a parent or guardian is aware you're using StudiCross and agrees to this Privacy Policy on your behalf.

We want to be upfront about exactly what this does and doesn't mean: this is a confirmation you give us yourself, in the app. We do not independently contact or verify this directly with your parent or guardian. If you are under 18, please make sure a parent or guardian actually knows you're using StudiCross and has reviewed this policy before you confirm.

Parents or guardians who want to review, correct, or request deletion of their child's data can contact us at [[email protected]].

Under the Nigeria Data Protection Act 2023, you have the right to access the personal data we hold about you, correct it if it's inaccurate, request that we delete it, restrict or object to certain processing, and request a copy of it in a portable format. To exercise any of these rights, contact us at [[email protected]]. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

We use industry-standard measures to protect your data, including password hashing, encrypted connections, and access controls limiting who can see your data. No system is perfectly secure, and we can't guarantee absolute security — but we take reasonable steps to protect your information and will notify you and the NDPC of any data breach affecting you as required by law.

We use a single, essential cookie to keep you signed in. We don't currently use tracking or advertising cookies. If that changes, we'll update this policy and ask for your consent where required.

We may update this policy from time to time. If we make material changes, we'll let you know (e.g. by notice in the app) before they take effect.

Questions, requests, or concerns about your data: [[email protected]]
BSTRADESAFE TECHNOLOGIES LIMITED, [Registered Address]