We use essential cookies to sign you in and remember your settings. With your permission we also use analytics cookies to understand how the site is used. See our privacy policy or fine-tune this anytime at cookie settings.

Privacy Policy

Last updated: June 2026.

Who we are

ClassNotes (classnotes.com.ng) is an online learning platform for Nigerian primary and secondary curricula. This policy explains what personal data we collect, why, how long we keep it, and the controls you have. It is written to comply with the Nigeria Data Protection Regulation (NDPR) and follows good practice from comparable regulations such as the GDPR.

What we collect

  • Account data — name, email address, phone number, gender, location (country/state/city), and an optional profile photo.
  • Learning data — courses you enrol in, lessons you read, test attempts and scores, certificates earned, and messages you exchange on the platform (including conversations with Kobi, our AI tutor).
  • Purchase data — orders, amounts, and the payment method outcome. Card details are processed by our payment providers (Paystack, Flutterwave); we never see or store your full card number — at most a masked reference (brand and last four digits) when you opt to save a card for renewals.
  • Technical data — IP address at login, device/browser information in error reports, and cookies described in our cookie notice (manage them at /cookie-settings).

Why we use it

  • To provide the service: your account, purchases, lesson access, progress, certificates, and support.
  • To process payments and prevent fraud (with our payment providers).
  • To send service messages — order confirmations, magic sign-in links, and reminders you can switch off.
  • To improve the platform — anonymous, aggregate analytics (only with your cookie consent).
  • To keep the service reliable and secure — error monitoring and rate limiting.

Third parties we share data with

We share only what each provider needs to do its job: Paystack and Flutterwave (payments), Google Analytics (usage statistics, consent-gated), OneSignal (push notifications, only if you enable them), Anthropic (processes the messages you send to Kobi, our AI tutor), and our error-monitoring service. We do not sell your personal data to anyone.

Children

Many of our learners are minors. Accounts for children should be created or approved by a parent or guardian, and our parent tools let guardians supervise a child's use of Kobi. We collect no more data from child accounts than from any other account, and we never use children's data for advertising.

How long we keep it

Your data stays while your account is active. If you delete your account, it is deactivated immediately and your personal details are permanently anonymized after a 30-day grace period (during which you can ask support to restore it). Order records are retained without your identity for financial record-keeping. Full details are in our published data-retention policy.

Your rights

  • Access / portability — download everything we hold about you from your dashboard (Account → Download my data).
  • Correction — edit your profile at any time from your dashboard.
  • Deletion — delete your account from your dashboard (Account → Delete account). 30-day grace, then permanent anonymization.
  • Consent — withdraw cookie consent at /cookie-settings; unsubscribe links are in every non-essential email.
  • Complaints — you may complain to the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data.

Security

Passwords are stored hashed, traffic is encrypted with TLS, payment credentials live with our PCI-DSS-compliant payment providers, and access to production data is restricted and logged.

Contact

Questions or requests about your data: use the contact form and we will respond within 30 days.