Privacy Policy

This Privacy Policy explains how Aradizo Tech Solutions Ltd (RC 9823337) ("we", "us") collects, uses, shares and protects personal data when you use Edentos (the "Service"). We are the data controller for this data under the Nigeria Data Protection Act 2023 (NDPA).

1. Data we collect

Data you give us:

• Account details: your name, email address, phone number and password. Your password is handled by our authentication provider and stored only in encrypted (hashed) form; we never see it.
• Welcome questions: how you heard about Edentos (optional), and whether you want to join the Edentos WhatsApp community.
• Your study activity: answers to practice questions, choices made in mock examinations and the daily challenge, self-assessments, and which topics and papers you study.
• Handwritten scripts: photographs of handwritten answers you upload for marking, the text transcribed from them, and the marks and comments produced.
• Feedback: messages and any screenshots you send us, including reports about a question.
• Payment records: the plan bought, amount, date, payment reference and status. Card details are entered directly with our payment provider; we never receive or store your card number.

Data collected automatically:

• Device information: a random identifier stored in a cookie on each device you sign in from, a description of the device and browser (for example "Chrome on Android"), and when it was first and last used. This enforces the two-device limit and lets you see and remove your devices.
• Study time: how long pages of the Service are open and in use, by activity (reading, practice, exam). The timer pauses when the page is hidden.
• Pages visited: which pages of the website are opened, the website that linked to us (if any), and whether the device is a phone, tablet or computer. We count visitors without cookies, using a code made from your connection details that changes every day, so we cannot follow you from one day to the next or work out your IP address from it. If you are signed in, the page views are linked to your account.
• Technical data: IP address and similar connection data, recorded by our hosting, authentication and security providers to run and protect the Service.

We do not use advertising trackers and we do not sell personal data.

2. Why we use it, and our lawful basis

• To provide the Service under our contract with you (Terms of Service): creating your account, showing your plan's content, marking your scripts, recording your progress, enforcing the device and usage limits, processing payments, and reminding you before your subscription ends.
• For our legitimate interests: keeping the Service secure, preventing account sharing and abuse, fixing faults, and improving content — for example, using anonymous patterns in answers to find questions that are unclear. We do not rely on legitimate interests where your rights override them.
• To meet legal obligations: for example keeping payment records for tax and accounting.
• With your consent: where we ask for it, such as adding your phone number to the Edentos WhatsApp community, or the consent of a parent or guardian for users aged 15 to 17. You can withdraw consent at any time — for the community, by leaving the group or emailing us.

3. Automated marking

When you upload a handwritten script, it is transcribed and marked automatically by an artificial intelligence model against the published suggested solution. The mark helps you practise; it has no legal or similarly significant effect on you, and it is not an official ICAN or ANAN mark. If you think a script was misread, contact us within 14 days of marking, while the photograph still exists, and a person will review it.

4. Who we share data with

We share personal data only with service providers that process it on our behalf, under contract, to run the Service:

• Cloud database and storage provider — database, sign-in and file storage. Data involved: all account, activity and payment records; script photographs; feedback screenshots. Location: European Union (Sweden).
• Cloud hosting provider — hosts the Edentos application. Data involved: data passing through the application while it runs. Location: European Union (Netherlands).
• Payment processor — payment processing. Data involved: name, email, amount; card or bank details you enter at checkout. Location: Nigeria.
• Artificial intelligence service provider — transcribing and marking handwritten scripts. Data involved: script photographs and transcripts (no name or email is sent). Location: United States.
• Email delivery provider — sending emails (payment confirmations, expiry reminders, replies to feedback). Data involved: name, email address, email content. Location: United States.
• Network security and content delivery provider — network security and storage of summary audio. Data involved: technical connection data. Location: Global.
• Messaging platform (only if you opt in to the WhatsApp community) — hosting the Edentos community group. Data involved: your phone number and anything you post; other members of the group can see your number. Location: Global.

We may also disclose data where the law requires it, to protect the rights or safety of users or the public, or to a successor if the Service is transferred (in which case this Policy continues to apply).

5. Transfers outside Nigeria

Some providers above store or process data outside Nigeria. Where they do, we rely on the safeguards permitted by the NDPA, including the providers' data processing agreements and standard contractual protections, so that your data receives a level of protection equivalent to that required in Nigeria.

6. How long we keep data

When you delete your account, your account, study activity, scripts, devices and subscription history are deleted permanently and immediately, except payment records we must keep by law.

7. Your rights

Under the NDPA you have the right to:

• be told how your data is used (this Policy);
• get a copy of your personal data;
• have inaccurate data corrected;
• have your data deleted — you can delete your account yourself in account settings;
• restrict or object to certain processing;
• receive your data in a portable, commonly used format;
• withdraw consent where we rely on it; and
• complain to the Nigeria Data Protection Commission (NDPC).

To exercise any right, email aradizotechsolutions@gmail.com from the address on your account. We will respond within 30 days. We may need to confirm your identity first. These requests are free.

8. Children

The Service is for people aged 15 and over. Users aged 15 to 17 may use it only with the consent of a parent or guardian. If we learn that we hold data about someone under 15, or about a user aged 15 to 17 without that consent, we will delete it. A parent or guardian can contact us to review or delete their child's data.

9. Security

We protect personal data with measures including encrypted connections (HTTPS), encrypted password storage, private file storage that is reachable only through short-lived signed links, restricted administrator access, and limits on how many devices can use an account. No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will notify the NDPC within 72 hours of becoming aware of it and tell you without undue delay.

10. Cookies and similar technologies

We use only what the Service needs to work:

These are strictly necessary or remember a choice you made, so we do not ask for separate cookie consent. We do not use analytics or advertising cookies; the page-visit counting described in section 1 uses no cookie. If that changes, we will update this Policy and ask for your consent first.

11. Changes to this Policy

We will post any update here with a new date, and tell you by email or on the Service before a significant change takes effect.

12. Contact

Aradizo Tech Solutions Ltd (RC 9823337)

Address: 17/2 Pond Street, Fegge

Email: aradizotechsolutions@gmail.com

You can also contact the Nigeria Data Protection Commission at ndpc.gov.ng.