Privacy Policy

1. The short version

• We collect what we need to teach you: how you sign in (a WhatsApp number or an email), your name, your exams and subjects, and how you perform on questions.
• We use it to teach you, track your progress, and remind you what to revise.
• Your questions and written answers are sent to an AI provider so it can explain and grade them.
• We never sell your data, and we never share it with advertisers.
• You can ask us to delete everything at any time: send DELETE on WhatsApp, or email privacy@outzider.net.

2. Who is responsible for your data

Outzider is the data controller for the personal data described here. For anything about your data, email privacy@outzider.net or message us on WhatsApp.

3. What we collect

We collect only what the service needs to work.

Information you give us

• How you sign in: your WhatsApp number, your email address, or both. Each one is verified before it is linked to your account.
• Your name: as you enter it during setup.
• Your exams and subjects: the choices you make during setup.
• Your exam date: if you ask us to build a study plan.
• Your questions and answers: messages and voice notes you send on WhatsApp, and answers you type or select on the website or app.

Information created as you study

• Which questions you answered, and whether you got them right.
• Your practice tests, mock exams and scores.
• Your topic strengths and weaknesses, and your revision schedule.
• Your study streaks and activity.
• Your study groups and leaderboard points, if you join one.
• Who referred you, or who you referred. If you joined through a teacher's, school's or centre's partner link or code, we record that partner code.

Information about your use of the service

• Sign-in sessions: a secure cookie that keeps you signed in on a device.
• Message delivery records: when each WhatsApp message we send was delivered or read. Never its content.
• Payment records: the plan you bought, the amount, the date and the payment reference.
• Security and fault data: technical information such as your IP address and error reports, used to stop abuse and fix problems.
• Homepage button counts: how many times each main button on our homepage is pressed each day, kept as totals for up to 120 days. They are not linked to you and use no cookie.

Information we do not collect

• We do not collect or store your card details. Payments go directly to Paystack.
• We do not access your WhatsApp contacts, or any chats other than those with us.
• We do not track you across other websites or apps, and we do not use advertising cookies.

4. Cookies

We use only cookies the service needs to work:

• Sign-in: keeps you signed in. It lasts up to 30 days without use, and no longer than 90 days in total before you sign in again.
• Partner referral: if you open a partner's invite link, it remembers the partner code for up to 30 days so the right partner is credited when you sign up.

5. Who we share it with

We do not sell your data. We share it only with the providers that make the service work, and only what each one needs:

Some of these providers process data outside Nigeria. We rely on their contractual protections for those transfers.

We may also disclose data where the law requires it, or to protect the safety of a user or the public.

6. Why we are allowed to use your data

• To deliver the service you asked for: teaching, testing, tracking progress, taking payment and sending account notices.
• With your consent: revision reminders and daily practice prompts. You can withdraw this at any time by replying STOP.
• Our legitimate interests: keeping the service secure, preventing abuse, and fixing faults.
• Legal obligations: keeping payment records as tax and accounting law requires.

7. Students under 18

Most of our users are secondary school students, and many are under 18. We take that seriously.

• We collect the minimum needed to teach: a name, a way to sign in, and study performance.
• We never ask a student for their home address, photograph, or financial details.
• If you are under 18, use Outzider with a parent or guardian's permission.
• Progress reports reach a parent only through a link the student chooses to generate.
• Partners who referred a student never see the student's name, contact details or study data.
• A centre that gave a student a seat code sees only the student's first name and initial and the date the code was used, so it can match codes to its own register.
• A parent or guardian may ask us to see or delete their child's data. Email privacy@outzider.net, and we will verify and act.

8. If you are an Outzider Partner

Teachers, centres, schools and other partners who join our partner programme give us their name, email, phone number and organisation, and later their bank account details for payouts. We check bank details with the bank through Paystack before saving them, and payouts are sent only to an account in the partner's registered name. We keep partner, commission and payout records for as long as tax and accounting law requires.

9. How long we keep it

• Your profile and progress: until you ask us to delete your account. Students often return for a resit or another exam, so we keep your history ready for you. You can ask us to delete it at any time.
• Sign-in sessions: up to 30 days without use, and 90 days at most.
• Login codes and links: they expire within minutes, and used ones are deleted within an hour.
• Message delivery records: deleted after 90 days.
• Payment and payout records: kept as long as tax and accounting law requires.

When you ask us to delete your account, we remove your personal data and keep only what the law requires us to retain.

10. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

• Ask what data we hold about you, and get a copy.
• Correct anything that is wrong.
• Ask us to delete your data.
• Withdraw consent for reminders at any time.
• Object to how we use your data, or ask us to restrict it.
• Complain to the Nigeria Data Protection Commission.

To use any of these, email privacy@outzider.net or message us on WhatsApp. On WhatsApp, send DELETE to start a deletion request. We will respond within 30 days.

11. Security

Our database denies access by default. Messages from WhatsApp and payment notifications are cryptographically verified before we act on them. Login codes and links are single-use and expire quickly. Sign-in sessions are signed and expire. Partner passwords are stored only as secure hashes. Secrets are never stored in our code.

No system is perfectly secure. If a breach affects you, we will tell you and the regulator as the law requires.

12. AI and automated processing

Explanations, question difficulty, and written-answer grading are produced with AI. These are study aids, not official marks, and they can be wrong.

No decision with legal or similarly significant effect is made about you automatically. If you disagree with a grade, contact us and a person will look at it.

13. Changes

We will update this policy as the service changes. The date at the top shows the current version. We will tell you about significant changes on the website and, where we can, by email or WhatsApp.