1. Who is responsible for your data
Cognitive AI, based in Lagos, Nigeria, is the data controller for personal data processed through cognitiveai.com.ng and the Cognitive AI app. We process personal data in line with the Nigeria Data Protection Act 2023, the Nigeria Data Protection Regulation (NDPR) and guidance from the Nigeria Data Protection Commission (NDPC).
For any privacy question or request, contact our data protection contact at awolowosijuade@gmail.com.
2. Information we collect
Account information: your name, email address, password (stored only in encrypted form), profile photo if you add one, and the exam and level you are preparing for.
Learning activity: CBT sessions, answers, scores, time spent, subjects chosen, flashcards you create, videos watched, Live Tests taken, duel results, streaks, badges and leaderboard positions.
Communications: messages you send in group chats, your conversations with AI assistants such as Daniel and @python, and messages you send to support.
Payment information: when you pay by bank transfer, the payer name, bank name, amount and reference you submit so we can verify the payment. We do not collect or store your card details or banking passwords.
Device and technical information: browser type, device type, approximate time of use, notification tokens if you enable push notifications, and a device identifier used only to make sure each device receives one free trial.
3. Why we use it and our lawful basis
Contract: to create and run your account, deliver CBT practice, AI tutoring, Live Tests and premium features you sign up for, and verify your payments.
Legitimate interests: to keep the platform secure, prevent trial abuse and cheating, moderate community spaces, fix bugs and improve our questions and features. We balance these interests against your rights.
Consent: for optional features such as push notifications and daily study reminders. You can withdraw consent at any time in your notification settings or device settings.
Legal obligation: where we must keep records or respond to lawful requests from authorities.
4. How we use your information
We use your information to show your progress and analytics, recommend topics to study, keep your streak, rank you fairly on leaderboards, match you for duels, show verification badges for premium users, send notifications you have chosen, answer support requests, and let AI assistants reply to you using your name and the recent conversation.
We do not sell your personal data, and we do not use it for third-party advertising.
5. AI processing
When you use an AI feature, the text of your question (and, in group chats, a short window of recent messages) is sent to an AI provider such as Groq or Google Gemini to generate a reply. We send only what is needed to answer. These providers process the data on our behalf and under their own security commitments; we do not permit them to use your personal data to advertise to you.
7. International transfers
Some of our providers store or process data outside Nigeria. Where this happens, we rely on the safeguards permitted by the NDPA, such as adequate protection in the receiving country or contractual commitments, to make sure your data stays protected.
8. How we protect your data
Data is sent over encrypted connections (HTTPS/TLS). Passwords are hashed and never stored in plain text. Access to data is restricted by account-level security rules, so students can only see their own private records, and only authorised administrators can review payments and accounts. No system is perfectly secure, but if a breach affecting your data occurs, we will notify you and the NDPC as required by law.
9. How long we keep data
We keep your account and learning data for as long as your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except records we must keep for legal, accounting or fraud-prevention purposes (for example payment records and trial device records).
10. Your rights
Under the NDPA you have the right to be informed, to access your data, to correct inaccurate data, to request deletion, to restrict or object to certain processing, to data portability, and to withdraw consent at any time. You also have the right to lodge a complaint with the Nigeria Data Protection Commission.
To use any of these rights, email awolowosijuade@gmail.com from the address linked to your account. We will respond within 30 days.
11. Children and young students
Many of our users are secondary school students. If you are under 18, please use Cognitive AI with the knowledge and consent of a parent or guardian. Parents or guardians may contact us to review or delete a child's data.
13. Changes to this policy
We may update this Privacy Policy from time to time. We will change the date at the top of this page and, for significant changes, notify you in the app.