Your Privacy,
Our Priority.
We believe your study habits and documents belong to you. This policy explains what we collect, why, how long we keep it, and the choices you have, written for every learner and parent who uses CLEVATE.
1. Information We Collect
We collect information you provide directly: (a) Personal identifiers such as your name, email address, and, if you choose to give it, your phone number; (b) Educational profile data including your education pathway (kids, junior secondary, senior secondary, or one of the international senior-secondary and university pathways), class or level, department, stream, subjects and exam targets; (c) Approximate location data that you provide or that we infer, consisting of your country and, if you set it, your state and area — used to show you the prices, currency and payment method that apply where you are; (d) A time zone identifier, read from your browser and stored so that your streak, daily challenge and weekly reset roll over at your own midnight rather than someone else's; (e) User-generated content such as uploaded PDFs, generated flashcards, notes and AI tutor chat history; (f) Activity data such as quiz attempts, XP, streaks and Arena match results; and (g) Technical data including IP address, browser type and device identifiers collected through essential cookies and local storage. If you join the closed-beta waitlist we store the email address you give us, the exam you are preparing for, and where you told us you heard about us. We do not collect payment card details; payments are handled entirely by our payment processors.
2. Movi Points, Trading & Financial-Like Data
Movi Points (MP) is a closed-loop game currency with no cash value and no withdrawal route. Because MP can be transferred between users, taken on as a loan, and spent in the shop, the data it generates is more sensitive than a normal score, and this section says plainly what that means. We record your MP balance, every transfer you send or receive and the display name of the other party, any loan you take out or issue, your interest and repayment history, your credit score, and every shop purchase. Transfer history therefore reveals a social graph: who you actually play with, and how often. Balances reveal roughly how much time you spend on the platform. Your credit and loan history is the most sensitive record we hold about you. Specifically: other players can see that a transfer or loan happened and can see the display names involved, but they cannot see your balance, your credit score or your full transaction history; we use this data to settle matches, enforce anti-fraud limits and prevent abuse, not to build advertising profiles; we do not sell it, and we do not use it to train public AI models. Credit and loan data is deleted with your account. If you would rather not hold MP at all, the Arena, leaderboards and shop all function without it and nothing in your learning experience is reduced.
3. How We Use Your Data
We use your data to: (a) create and maintain your account and workspace; (b) personalize the learning experience to your pathway, class, department and exam targets; (c) show you prices, a currency and a payment method appropriate to your country, and process subscriptions through the payment processor for your region; (d) generate AI features such as summaries, quizzes and tutoring grounded in your own documents; (e) operate leaderboards, streaks and Arena matchmaking; (f) calculate your day and week boundaries from your time zone; (g) monitor platform security, prevent abuse and enforce rate limits; and (h) send critical system communications and, only where you have opted in, product news. We do not sell your personal data, we do not share it with advertising networks, and we do not use your documents or chats to train public AI models. Where we rely on consent as our lawful basis, you may withdraw it at any time without affecting processing we carried out before you did.
4. Children's Data & Parental Consent
CLEVATE is designed to be safe for younger learners, and we take children's privacy seriously. Accounts in the Kids Learning Club are intended to be created and supervised by a parent or guardian, and the Kids workspace deliberately excludes open-ended competitive features. For learners under 13, a parent or guardian must provide consent for account creation and may manage or delete the child's account through the Parent Portal at any time. We collect the minimum data necessary for a child to learn, we do not knowingly allow children under 13 to create accounts without parental involvement, we do not serve behavioural advertising to any user, and we never sell children's data. If we learn that a child under 13 has created an account without appropriate consent, we will delete the account and its data upon request or on discovery. Contact privacy@clevate.net for any child-data concern.
5. Third Parties We Rely On
We share information only with processors necessary to run CLEVATE: (a) Supabase Inc. for database hosting, authentication and storage; (b) Google Cloud for processing AI requests through the Gemini API; (c) Paystack Payments Limited for subscription payment processing for customers in Nigeria and Ghana; and (d) Stripe Inc. for subscription payment processing for customers elsewhere. Each is bound by contractual confidentiality and security obligations. The payment processors receive the minimum needed to take a payment — your email, the amount and a reference — and we receive only confirmation that a payment succeeded, never your full card details. We may also disclose information where required by Nigerian law, the law of your own country where it applies to you, or to protect the rights and safety of our users. Our current list of subprocessors is available on request.
6. AI Processing of Your Documents
Documents you upload are stored privately and associated with your account only. When you use AI features, relevant text from your documents is sent to our AI provider solely to answer your request. Your documents are not used to train public models, are not shared with other users unless you explicitly publish them, and remain accessible only to you (and to authorized administrators strictly for support). Kid-facing AI features run through additional content-safety filters that hold unsafe requests before they reach the model.
7. Cookies, Analytics & Local Storage
We use a small set of first-party mechanisms described in detail in our Cookie Policy: essential authentication cookies (required for sign-in), and local storage keys that remember preferences such as theme, guide progress and low-data mode. We operate first-party, aggregate analytics about feature usage (page views and events) so we can improve the product; this analytics is not sold or shared with advertising networks and contains no document contents or chat transcripts. See the Cookie Policy for the full inventory.
8. Data Retention & Account Deletion
We keep your personal data while your account is active. You can delete your own account at any time from Profile settings; deletion removes your documents, chats, flashcards, arena history and profile record from primary databases within 30 days, except records we must retain for legal, tax or financial auditing — for example payment references held by Paystack or Stripe, which we are required to keep for accounting. Parents may request deletion of a child's account via the Parent Portal or by contacting us. Any refund position on an active subscription is handled case by case under the refund terms in our Terms of Service.
9. How We Protect Your Data
Data is encrypted in transit (TLS) and at rest by our infrastructure providers. Access to production data is restricted to authorized personnel using least-privilege access. Row-level security ensures users can read only their own private records. We apply input validation, rate limiting and abuse detection across the platform. No system is perfectly secure, but we design defensively and will notify affected users of any confirmed breach involving their personal data as required by law.
10. International Users and Data Transfers
CLEVATE is operated from Nigeria and uses global infrastructure providers, so your data is processed in data centres outside Nigeria — those of Supabase, Google Cloud, and our payment processors. We rely on the transfer safeguards those providers put in place, including the EU Standard Contractual Clauses and equivalent arrangements where they apply to you. Your data is not sold, and it is not shared with advertising networks. We do not use your uploaded documents or chat transcripts to train public AI models. If you are in the European Economic Area, the United Kingdom or Switzerland, you have the right to lodge a complaint with your local supervisory authority in addition to the rights listed below; we would rather you told us first, at privacy@clevate.net, so we can try to fix it.
11. Your Privacy Rights
Under the Nigeria Data Protection Act (NDPA) you have the right to: (a) access a copy of your data; (b) rectify inaccurate information; (c) object to certain processing; (d) withdraw consent for optional communications; (e) request erasure; and (f) lodge a complaint with the Nigeria Data Protection Commission. If you are in the EEA, the UK or Switzerland, you additionally have the rights provided by the GDPR and the UK GDPR, including data portability, the right not to be subject to solely automated decision-making, and the right to complain to your local supervisory authority. To exercise any right, contact privacy@clevate.net. We respond within 30 days, or within one month where the GDPR applies. We do not charge for this, and we will not treat you differently for exercising a right.
12. Changes to This Policy
We may update this policy as the product evolves. Material changes will be announced in-app or by email before they take effect, and the revision date below will change. Continuing to use CLEVATE after a change takes effect means you accept the updated policy.
Data Protection Office
Have a specific concern, need a data export, or want to exercise a right? Contact our data protection team.
Email: privacy@clevate.net