OGraphLearn Privacy Policy

Effective date: 25 July 2026

Last updated: 25 July 2026

1. Introduction

This Privacy Policy explains how OGraphLearn (“OGraphLearn”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects personal information when users access our educational and computer-based testing platform.

OGraphLearn is intended for learners aged 9 years and above, as well as parents, guardians, teachers, schools, administrators, and other authorised users.

By using OGraphLearn, you acknowledge the practices described in this Privacy Policy.

2. Information We Collect

Depending on how OGraphLearn is used, we may collect the following information.

Account and profile information

• Name, email address, and telephone number where provided.
• Password in securely hashed form.
• Account role, such as student, parent, teacher, school administrator, or platform administrator.
• Class, arm, school, examination category, and learning preferences.
• Parent–student or school–student connection information.
• Account and subscription status.

Educational and activity information

• Subjects, topics, syllabuses, and examinations selected.
• Questions attempted, answers submitted, scores, results, completion times, and attempt history.
• Strengths, weak topics, recommendations, and progress information.
• Quizzes created, saved, submitted, or shared.
• AI-generated practice sessions and explanations.
• Reports concerning inaccurate or inappropriate questions.
• Permitted teacher, parent, or school interactions.

Payment and subscription information

We may collect the subscription plan, payment amount and currency, transaction reference, payment status, verification result, subscription dates, automatic-renewal status, and refund or payment-support requests.

Payments may be processed by Paystack or another disclosed payment processor. OGraphLearn does not need to store complete card details. Payment processors handle payment information under their own privacy and security practices.

Device and technical information

We may collect IP address, browser and device type, operating system, login and security events, session identifiers, pages and features used, dates and times of activity, and error, performance, or diagnostic information.

Communications

We may collect information submitted through support requests, feedback, question reports, account and payment enquiries, school or parent communications, WhatsApp contact options where enabled, and administrative announcements or messages.

3. Information About Children

OGraphLearn is designed to support learners aged 9 years and above.

A parent, guardian, school, or administrator should only create, connect to, subscribe for, or manage a child’s account where legally authorised.

Parents commonly purchase subscriptions for children. During family subscription checkout, we may ask the subscriber to confirm that they are the learner’s parent or legal guardian, or are otherwise authorised to manage the subscription.

We aim to collect only the information reasonably necessary to create and maintain a learner’s account, provide educational exercises and results, personalise recommendations, manage authorised connections, provide subscriptions and support, protect learners, and prevent misuse.

Children should not submit unnecessary personal, confidential, financial, medical, or location information in answers, AI prompts, quizzes, messages, or support requests.

Where required by applicable law, we may request additional parent, guardian, or school involvement before processing a child’s information.

4. How We Use Personal Information

We may use personal information to:

• Create, authenticate, and manage accounts.
• Provide tests, topic-based practice, and full-syllabus practice.
• Generate AI-assisted questions, explanations, grading, and recommendations.
• Record attempts, answers, scores, and progress.
• Identify strengths and weak topics and recommend learning activities.
• Enable authorised parent, teacher, and school participation.
• Process and verify payments, subscriptions, renewals, and refunds.
• Apply free and paid usage limits.
• Detect fraudulent, abusive, duplicate, or manipulated activity.
• Moderate questions, quizzes, messages, and user-generated content.
• Investigate reported errors, privacy issues, and safety concerns.
• Improve platform reliability, accessibility, and educational quality.
• Communicate service, security, subscription, and policy updates.
• Meet legal, regulatory, accounting, and security obligations.

5. Lawful Bases for Processing

Depending on the circumstances, we process personal information because it is necessary to provide the service or fulfil a subscription agreement; the user has given valid consent; it is required by law; it protects a person’s vital interests; or we have a legitimate interest in operating, securing, improving, and preventing misuse of OGraphLearn without improperly overriding the user’s rights.

Where processing depends on consent, consent should be a clear affirmative action. Users may withdraw consent, although withdrawal does not invalidate processing that lawfully occurred beforehand.

6. AI-Assisted Features and Recommendations

OGraphLearn may use artificial-intelligence providers to assist with practice questions, explanations, open-ended grading, weak-topic analysis, study recommendations, similar-question generation, and content-quality checks.

Information sent to an AI provider should be limited to what is reasonably necessary for the requested feature. Users should not enter names, telephone numbers, addresses, passwords, financial information, medical information, or other unnecessary personal information into AI prompts or answers.

AI output may contain errors. Recommendations and automated grading are educational aids and should not be treated as official examination results or professional advice.

Where an automated decision significantly affects a user, the user may contact us to request clarification or appropriate human review.

7. Parent, Teacher, and School Access

Authorised parents, guardians, teachers, schools, or administrators may be able to access limited information connected to their role, including student profile information, subjects and classes, practice activity, results, progress, subscription status, and connection status.

Access depends on applicable permissions, connection approvals, school relationships, and account roles. A parent or school connection does not automatically permit unrestricted access to all learner information.

8. Payments and Automatic Renewal

Paystack or another disclosed payment processor may process payment and recurring-payment information.

OGraphLearn may receive transaction references, payment status, payment-method summaries, authorisation information, and fraud-prevention results. We generally do not receive or store complete card numbers.

Where automatic renewal is enabled, the payment processor may retain a payment authorisation or token to process future renewal charges. Users will be informed of renewal terms during checkout and may cancel future renewals using the available account or support process.

Payment processors process information under their respective privacy policies.

9. When We Share Information

We may share necessary information with providers that support hosting, databases, authentication, security, email, messaging, artificial intelligence, payments, error monitoring, analytics, past questions, educational content, and professional compliance services.

These providers should receive only information reasonably necessary for their services and must handle it under applicable contractual and legal requirements.

We may also disclose information with the user’s direction or consent; to an authorised parent, guardian, teacher, or school; to investigate fraud, abuse, safety, or security incidents; to comply with lawful requests; to establish or defend legal claims; or during a merger, acquisition, restructuring, or service transfer subject to appropriate safeguards.

We do not sell children’s personal information.

10. Public and User-Generated Content

Users may be able to create quizzes, questions, messages, reports, or other content. Content submitted for public publication may be reviewed by an administrator and may become visible to other users after approval.

Users should not include unnecessary personal information in public quizzes, question text, answers, explanations, titles, or messages.

We may review, restrict, reject, anonymise, or remove content that violates platform rules, privacy rights, intellectual-property rights, or applicable law.

11. Data Retention

We retain personal information only for as long as reasonably necessary to provide the service, maintain educational records, process payments, resolve disputes, prevent fraud, and comply with legal obligations.

• Account information may be retained while an account is active.
• Educational results and attempts may be retained to provide progress tracking.
• Payment records may be retained for accounting, fraud prevention, disputes, and legal compliance.
• Security logs may be retained for a period appropriate to investigating misuse.
• Support records may be retained until an enquiry is resolved and for a reasonable follow-up period.
• Public or shared content may remain available until removed, withdrawn, or no longer required.

When information is no longer required, we may delete, anonymise, or securely isolate it, subject to legal and technical limitations.

12. International Data Transfers

Some service providers may process or store information outside Nigeria. Where personal information is transferred internationally, we will take reasonable steps to use a legally recognised transfer mechanism and appropriate contractual, organisational, and technical safeguards.

13. Security

We use reasonable administrative, technical, and organisational safeguards designed to protect personal information from unauthorised access, accidental loss, improper alteration, unlawful disclosure, misuse, or destruction.

Safeguards may include access controls, authentication, password hashing, role-based permissions, payment verification, logging, monitoring, and secure communications.

No online service can guarantee absolute security. Users should protect passwords, avoid sharing account or connection codes, and notify us promptly about suspected unauthorised access.

14. Cookies and Similar Technologies

OGraphLearn may use cookies or similar technologies necessary to maintain login sessions, remember preferences, protect accounts, prevent fraud, and measure or improve platform performance.

Where non-essential analytics or advertising technologies are introduced, we will provide any notice or choice required by applicable law.

15. Privacy Rights

Subject to applicable law, users may have the right to:

• Be informed about the processing of their information.
• Request access to their information.
• Correct inaccurate or incomplete information.
• Request deletion where legally applicable.
• Restrict or object to certain processing.
• Withdraw consent.
• Request data portability where applicable.
• Challenge certain automated decisions and request human intervention.
• Lodge a complaint with the Nigeria Data Protection Commission.

To submit a privacy request, contact learning@ographstudio.com. We may need to verify the requester’s identity and authority. A person requesting information about a child may need to demonstrate appropriate authority.

Some requests may be limited where retention or processing is required by law, necessary to protect another person, or subject to another lawful exemption.

16. Account Closure

Users may request account closure by contacting learning@ographstudio.com.

Closing an account may remove access to the platform. Certain information may be retained where necessary for payment and accounting obligations, fraud and security investigations, legal claims, regulatory compliance, or records of consent and authorised account management.

Where possible, information retained after closure will be restricted to the purpose requiring its retention.

17. Data Breaches

If a personal-data breach occurs, we will investigate it, take reasonable steps to limit harm, and notify affected users or the appropriate authority where required by law.

Users should promptly report suspected unauthorised access or privacy incidents.

18. Third-Party Links and Services

OGraphLearn may link to external services or educational resources. We do not control the privacy practices of independent third parties. Users should review the privacy notice of an external service before providing information.

19. Changes to This Policy

We may update this Privacy Policy to reflect product, legal, security, or operational changes. Material changes may be communicated through the website, dashboard, email, or another appropriate channel.

The effective and last-updated dates show when the current version applies.

20. Complaints

Please contact us first so we can investigate and attempt to resolve a privacy concern.

Users also have the right to submit a complaint to the Nigeria Data Protection Commission, the authority responsible for administering and enforcing Nigeria’s data-protection framework.

21. Contact

OGraphLearn

Privacy and support email: learning@ographstudio.com

Telephone: +2348124588161