Privacy Policy & NDPR Compliance

1. Introduction

SmartKid Tutor ("we", "us", or "our") is committed to protecting the privacy and personal data of our users, especially children. This policy explains how we handle information in compliance with the Nigeria Data Protection Regulation (NDPR).

2. Data We Collect

• Parental Information: Name, email address, and account credentials.
• Child Information: Name, age, and WhatsApp phone number.
• Educational Data: Conversations between the child and the AI tutor, including subjects studied and progress markers.

3. Purpose of Processing

We process this data solely to provide a personalized Socratic tutoring experience for your child and to allow you, the parent, to monitor their educational progress.

4. Parental Consent

In accordance with NDPR, we require explicit parental consent before collecting or processing any data related to a child. By registering your child on our platform, you are providing this consent.

5. Data Retention & Deletion

We retain educational data (conversations and activity logs) for a period of 365 days to provide continuity in learning. Data older than this period is automatically and securely deleted. You may also request the immediate deletion of your child's data at any time by contacting our support team or deleting the child's profile from your dashboard.

6. Security

We implement robust technical and organizational measures to ensure a level of security appropriate to the risk, protecting data against unauthorized access or disclosure.

7. Third-Party Artificial Intelligence (AI) Services & Data Sharing

To deliver our interactive, conversational AI voice and text tutoring experience (Ada), SmartKid Tutor integrates with trusted third-party artificial intelligence infrastructure provided by OpenAI, L.L.C.

• Data Transmitted to Third-Party AI: When a student submits a question, practices a lesson, or speaks in Voice Mode, their academic input (text queries, homework photos, curriculum topic, grade/class level, and audio recordings) is securely transmitted to OpenAI solely to generate real-time educational responses.
• Identity & Privacy Protection: We do not transmit full names, parental contact credentials, or biometric identifiers to third-party AI models.
• Equivalent Data Protection & Non-Training Commitment: OpenAI is contractually bound to provide equal or higher data protection standards consistent with the Nigeria Data Protection Regulation (NDPR) and the Children's Online Privacy Protection Act (COPPA). In accordance with our enterprise API terms, data transmitted to OpenAI is encrypted in transit and at rest and is never used to train or improve third-party AI foundation models.
• Parental Control: Parents have full authority to review, export, or purge their child's AI tutoring logs at any time from the parent dashboard or by emailing our Data Protection Officer.