Privacy Policy

1. What we collect

We collect only what the platform needs to work.

• Account details: your name, email address, password (stored only as a salted hash), and optional profile information you choose to add.
• Learning activity: courses you enrol in, lesson progress, quiz and exam answers, assignment submissions, and certificates earned.
• AI conversations: the messages you send to the tutor and its replies, so you can return to them and so we can improve safety.
• Payment records: the order, the method you chose, and the proof of payment you upload. We never see or store card numbers.
• Technical data: IP address, browser type and pages visited, used for security, rate limiting and diagnosing faults.

2. Why we use it

To provide the service: showing your progress, marking your work, issuing certificates and processing payments.

To keep the platform safe: detecting abuse, enforcing rate limits and investigating security incidents.

To improve teaching: understanding, in aggregate, which topics learners struggle with most.

To communicate: transactional email about your account, and — only if you opt in — occasional product updates.

3. Who we share it with

We do not sell your personal data. We share it only with processors that make the service work: our hosting and database provider, our email provider, our file storage provider, and the AI provider configured for the tutor.

AI providers receive the content of your tutor messages in order to generate a reply. We do not send them your name, email address or payment details.

We disclose data to authorities only where we are legally required to.

4. How long we keep it

Account and learning records are kept while your account is open. If you close it, we delete or anonymise personal data within 90 days, except records we must retain for accounting or legal reasons.

Certificates remain verifiable after account closure, because their purpose is to be checkable by third parties. They show the certificate holder's name and the course completed, nothing more.

5. Your rights

You can access, correct, export or delete your personal data from Settings, or by emailing privacy@skaibothub.com. We respond within 30 days.

You can turn off any non-essential email from Settings → Notifications.

6. Security

Passwords are hashed with bcrypt. Sessions are signed and stored in secure, HTTP-only cookies. Administrative actions are recorded in an audit log. Access to production data is limited to staff who need it.

No system is perfectly secure. If a breach affects you, we will notify you and the relevant authority as required by law.

7. Children

Skaibot Hub is used by secondary-school students. Where a school creates accounts for pupils, the school is responsible for obtaining any parental consent required. Parents may contact us to review or delete a child's data.

8. Contact

Data controller: Skaibot Hub Education Ltd, Lagos, Nigeria. Email privacy@skaibothub.com with any question or complaint about how we handle your data.