Privacy Policy

1. Overview

This policy explains what personal data ASKA Academy (the "Platform") collects when you use our website, learning dashboard, and live classes; why we collect it; who we share it with; and what you can ask us to do with it.

We collect what we need to run your training and keep your account secure — nothing more. We do not sell your personal data, and we do not use it for advertising or profiling.

2. Who is responsible

ASKA Academy is the data controller for the personal data described in this policy. That means we decide what is collected and why, and we are accountable for keeping it safe.

If you have a question about your data, or want to exercise any of the rights set out below, contact us using the details here.

Email: academy@aska.ng

3. What we collect

The table below covers everything the Platform stores about you, and where it comes from.

Category	What it includes	Where it comes from
Account details	Your name, email address, password (stored hashed, never in readable form), phone number, profile photo, and time zone.	You, at registration and in your profile settings.
Profile details	Country, state, city, postal code, gender, and a short bio — all optional except country.	You, in your profile settings.
Training records	The cohorts you apply to and enrol in, your attendance at class sessions, and your submitted project work.	Generated as you take part in a cohort.
Payment records	Transaction references, amounts, status, and any payment evidence you upload. Card and bank credentials are handled by our payment providers and never reach our servers.	You and our payment providers.
Affiliate data	Your affiliate code, referral link clicks (IP address and browser user agent), balances, and the bank account details you add for payouts.	You, and visitors who follow your referral link.
Security and activity logs	Sign-ins, password and email changes, and other significant actions — each recorded with the IP address, device type, browser, operating system, and user agent used.	Recorded automatically as you use the Platform.
Connected accounts	If you sign in with Google, Facebook, or X, we store the provider name, your provider account id, and the access tokens needed to keep the connection working.	The provider, with your permission at sign-in.
Communication preferences	Which notifications you have subscribed to or turned off, and any newsletter subscription.	You.

4. Why we collect it, and our legal basis

We only process your data where we have a lawful reason to do so. In practice that means one of the following.

To perform our contract with you — creating your account, confirming your enrolment, delivering classes, recording attendance, issuing certificates, and taking payment.
For our legitimate interests — keeping the Platform secure, investigating abuse, preventing fraudulent enrolments and affiliate abuse, and improving how the service works.
To comply with a legal obligation — keeping financial and tax records for the period the law requires.
With your consent — sending you the newsletter, and any optional notifications you turn on. You can withdraw consent at any time without affecting your training.

5. Who we share it with

We share personal data only with the service providers needed to run the Platform, and only the data each one needs. They act on our instructions and may not use your data for their own purposes.

Payment providers (Paystack and Korapay) — to take payment and confirm it. They receive your name, email, and the transaction details, and are responsible for the card or bank data you enter with them.
Identity providers (Google, Facebook, X) — only if you choose to sign in with them.
Our email provider — to send account emails such as verification codes, password resets, and class reminders.
Hosting and infrastructure providers — who store the Platform's data on our behalf.
Your trainers and our administrators — who can see your name, enrolment, and attendance for the cohorts you are in.
Authorities or advisers — where we are legally required to disclose, or need to establish or defend a legal claim.

6. What other people can see

Live classes are shared spaces. Other people in your cohort can see the name and profile photo you use, anything you say in a session or community channel, and any work you choose to share.

Your email address, payment records, and profile details are never shown to other students.

7. How long we keep it

We keep personal data only as long as we need it for the purpose it was collected, then delete or anonymise it.

Account and profile data — for as long as your account is open.
Training and certificate records — retained after your cohort ends so we can verify a certificate you were issued.
Payment and transaction records — kept for the period required by financial and tax law, even after an account closes.
Security and activity logs — kept for a limited period for security investigation, then removed.
Referral click records — kept only long enough to attribute a referral and check for abuse.

8. How we protect it

Passwords are stored hashed and are never readable by us or recoverable in plain text. Traffic to the Platform is encrypted in transit, access to production data is restricted to the people who need it, and significant account actions are logged.

No system is completely secure. If a breach affects your personal data and puts you at risk, we will tell you and the relevant authority as required by law.

9. Your rights

Depending on where you live, you have some or all of the following rights over your personal data. Most of them you can exercise yourself from your account settings; for the rest, contact us and we will respond within one month.

Access — ask for a copy of the personal data we hold about you.
Correction — update anything inaccurate, directly in your profile settings.
Deletion — ask us to delete your account and data, subject to records we must keep by law.
Restriction and objection — ask us to pause processing, or object to processing based on our legitimate interests.
Portability — receive your data in a portable format.
Withdraw consent — unsubscribe from the newsletter or turn off optional notifications at any time.
Complain — raise a concern with your local data protection authority if you believe we have handled your data wrongly.

10. Children

The Platform is not intended for children under 16. If you are under 16, you need the consent of a parent or guardian to create an account.

If we learn we have collected data from a child without that consent, we will delete it.

11. International transfers

Some of our service providers operate outside your country, so your data may be processed elsewhere. Where that happens, we rely on providers that offer appropriate safeguards for international transfers.

12. Cookies

We use a small number of cookies that are necessary to sign you in and keep the Platform secure. We do not use advertising or third-party analytics cookies.

Our Cookie Policy sets out each cookie, what it does, and how long it lasts.

13. Changes to this policy

We may update this policy as the Platform changes. When we do, we update the "last updated" date at the top of this page, and we will tell enrolled students about any material change.

Continuing to use the Platform after an update means you accept the revised policy.