1. Who We Are (Data Controller)

Kashogie Primus Limited ("Kashogie", "we", "us") is the operator and data controller of the Kashogie educational platform (kashogie.com). If you have any privacy question or request, you can reach us through the Contact page or the email below — see section 10.

2. Data We Collect

Depending on how you use Kashogie, we collect:

• Registration data — your first name, last name, email address, account type (parent, teacher, or student), and password (stored only as a cryptographic hash).
• Profile data — parent and teacher profiles; teacher subjects, rates, availability, and public location (city/local area, state, country — full street addresses are never displayed publicly); teacher verification documents; and teacher payout details.
• Children’s data — child profiles created and controlled by parents: the child’s name, school grade level, and the email used to invite them as a student user. See section 4 for the protections that apply.
• Usage data — the features you use, quizzes and quiz scores, assignments and submissions, learning progress and streaks, and blog engagement.
• Session data — sessions booked and delivered, attendance and duration, session reports and parent confirmations, evaluations, and materials shared during sessions.
• Payment data — booking and subscription charges, wallet balances, referral and payout records, and transaction history. Payments are processed by our payment providers; we never collect or store your card details.
• Communications — messages between parents, teachers, and our support team, including optional image attachments. As described in our Terms, chats may be monitored for safety and fraud prevention.
• Device and technical data — cookies and local storage that keep you signed in and remember preferences (such as your light/dark theme), your approximate location derived from your IP address (used to suggest tutors near you), and standard security logs.

3. How We Use Your Data

• Creating and managing your account and role, and linking invited students to their parent-managed profiles.
• Matching, booking, and coordinating tutoring sessions — scheduling, reminders, delivery tracking, and session confirmations.
• Processing payments, subscriptions, refunds, and teacher payouts through our payment providers, and keeping records of those transactions.
• Verifying teacher identity before tutors are listed as verified, and administering payouts to the details teachers provide.
• Sending transactional messages such as booking confirmations, session reminders, receipts, and service notices.
• Providing support, and keeping the service safe — preventing fraud, abuse, and policy violations (including chat monitoring as described in the Terms).
• Improving Kashogie — understanding feature usage so we can make better product decisions.

4. Children’s Data — Special Protections

Kashogie is designed so that children participate through parent-managed profiles. We rely on a parent’s consent as the lawful basis for a child’s data: a parent creates and controls the child’s profile, and a student under 18 gains access only through the parent-issued invitation flow, consistent with the NDPR’s requirements for children’s data. We do not knowingly collect personal information directly from children outside of parent-managed profiles, and we do not use children’s data for behavioural advertising.

Parents can review, correct, or request deletion of their child’s data at any time from the Parent Dashboard or by contacting us. If you believe a child’s information has been collected without parental involvement, contact us and we will remove it.

5. Data Sharing with Third Parties

We share personal information only as needed to run the service, with:

• Payment processors — Base44 Payments, Paystack, and Flutterwave — which handle checkouts, subscriptions, and payouts under their own privacy policies. We store only the resulting transaction records.
• Our virtual classroom provider (JaaS/Jitsi), which receives the meeting identifiers and participant display names needed to host live classes.
• AI service providers, which receive math problems and content submitted to the AI Math Solver and AI-assisted features so they can be processed.
• Email delivery, cloud file storage (Cloudflare R2), and IP-based location lookup providers used for nearby-tutor suggestions.
• The other participants of a booking — for example, a teacher you book sees your name and the session details, and parents/students see the teacher’s public profile information.
• Law enforcement or regulators where disclosure is required by law.

6. Data Retention

We keep personal data while your account is active, and for as long afterwards as we need it to operate the service and comply with the law. If you delete your account, we remove your profile data; booking, session, and financial records may be retained where we are required to keep them (for example, tax and accounting obligations), and we anonymize or de-identify retained records wherever possible. Analytics data is kept only as long as it serves the purpose it was collected for.

7. Your Rights Under the NDPR

Nigerian data protection law gives you rights over your personal data. You can:

• Request access to the personal data we hold about you.
• Request correction of inaccurate or incomplete data — most of it you can update yourself from your Profile Settings.
• Request deletion of your data, subject to the retention obligations described in section 6.
• Withdraw consent for processing that relies on it — for example, by deleting your account or adjusting notification settings.
• Lodge a complaint with the Nigerian Data Protection Commission (NDPC) if you believe your rights have been infringed.

8. Cookies and Tracking

Kashogie uses cookies to keep you signed in and local storage to remember your preferences (such as your theme and currency choice). We use analytics to understand aggregate feature usage. If and when advertising (such as Google AdSense) is enabled on the site, advertising partners may use cookies to serve and measure ads, including personalized ads; you can manage personalized advertising through your browser or the advertising provider’s own settings. You can clear or block cookies in your browser settings, though doing so may sign you out or reset your preferences.

9. Security Measures

We apply reasonable technical and organizational safeguards to protect personal data: encryption in transit (HTTPS), strict per-role and per-record access controls (sensitive records such as verification documents, payout details, and payment ledgers are locked to their owners and our administrators), session-verified server-side processing for privileged actions, and security monitoring and logs. No method of transmission or storage over the internet is completely secure, however, and we cannot guarantee absolute security. If a security incident ever affects your data, we will notify affected users as required by law.

10. Contact for Privacy Requests

To exercise any of the rights in section 7, or to ask anything about this policy, contact us through the Contact page or the email below. We may need to verify your identity before acting on a request, and we respond within a reasonable period. The data controller is Kashogie Primus Limited.