Privacy Policy

1. Introduction

LearnWithChris (“LearnWithChris,” the “Portal,” “we,” “us,” or “our”) operates the website at learnwithchris.app and related learning services (collectively, the “Platform” or “Services”). The Platform is owned and operated by Ctop Digital Solution (RC No. 8676666), a registered business entity in the Federal Republic of Nigeria.

This Privacy Policy explains how we collect, use, disclose, store, and protect personal information when you visit our website, create an account, purchase courses or bundles, participate in community features, join live sessions, or otherwise interact with us. It also describes your rights and how to contact us.

By accessing or using the Services, you acknowledge that you have read, understood, and agreed to this Privacy Policy. If you do not agree, please do not use the Platform.

2. Who Is Responsible for Your Data?

For the purposes of applicable data protection laws, Ctop Digital Solution (trading as LearnWithChris) is the data controller responsible for personal information processed through the Platform.

Contact for all privacy, data, and legal correspondence:
Email: hello@learnwithchris.app
Website: learnwithchris.app/contact
Registered business: Ctop Digital Solution, RC No. 8676666, Federal Republic of Nigeria

All privacy requests, data subject rights requests, and legal notices must be sent to hello@learnwithchris.app from your registered email address. We do not accept legal correspondence through any other channel.

3. Information We Collect

We collect information in the following categories:

3.1 Account and Identity Information

• Full name, display name, and username
• Email address and authentication identifiers
• Date of birth or age confirmation (collected at registration to verify eligibility)
• Password (stored in hashed form; we do not store plain-text passwords)
• Profile photo (avatar), biography fields, goals, and learning preferences
• Account role, plan type (free or pro), and verification status
• Information from third-party sign-in (e.g. Google), such as name, email, and profile image, as permitted by your provider settings

3.2 Learning and Usage Information

• Course and track enrollments, lesson progress, completions, and certificates
• Challenge participation, streaks, and related activity
• Podcast listen history and gated content access
• Dashboard highlights, notifications received, and in-app engagement
• Live session attendance, chat messages, and moderation records

3.3 Community and User-Generated Content

• Posts, comments, reactions, mentions, and reports you submit
• Images or media you upload to community features
• Moderation actions taken on your account or content (e.g. blocks, suspensions)
• Any private or direct messages sent through community features, which are stored securely and retained for moderation and safety purposes

3.4 Payment and Transaction Information

• Order history, item purchased, amount, currency, and payment status
• Transaction reference numbers issued by our payment processor (Paystack)
• Billing name and email address associated with a transaction
• Last four digits of a payment card where returned by Paystack as part of transaction confirmation

We do not store full payment card numbers, CVV codes, or complete card data on our servers. All card processing is handled exclusively by Paystack in accordance with their PCI-DSS security standards. We receive only the transaction metadata described above.

3.5 Communications

• Messages you send via contact forms or support channels
• Email and notification preferences (course updates, community alerts, marketing opt-in or opt-out)
• Records of transactional emails sent through ZeptoMail (Zoho), including signup confirmations, password resets, purchase receipts, and security alerts

3.6 Technical and Device Information

• IP address, browser type, device identifiers, and operating system
• Log data, timestamps, pages viewed, and referring URLs
• Session tokens and cookies or local storage used to keep you signed in
• Push notification subscription data where you enable browser notifications

4. How We Collect Information

We obtain personal information through:

• Direct collection — when you register, update your profile, purchase content, post in the community, or contact us
• Automated collection — through cookies, logs, and similar technologies when you use the Platform (see Section 12)
• Third parties — authentication providers (Google), payment processors (Paystack), and infrastructure partners listed in Section 6.1
• Administrators — where permitted, staff may grant access, issue certificates, or record support actions related to your account

5. How We Use Your Information

We use personal information to:

• Provide, operate, maintain, and improve the Platform and your learning experience
• Create and manage your account and authenticate your identity
• Process payments, fulfill purchases, and grant access to courses, tracks, podcasts, and live content
• Deliver certificates, progress tracking, and personalised dashboard features
• Send service-related communications (security alerts, password resets, purchase confirmations, account notices)
• Send optional notifications and emails according to your preferences
• Facilitate community features, live sessions, and moderation to keep the Platform safe
• Detect, prevent, and address fraud, abuse, security incidents, and violations of our Terms of Use
• Comply with legal obligations and enforce our rights
• Analyse aggregated or de-identified usage data to improve content and product decisions

Legal Bases — Users in Nigeria

Under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation (NDPR), we process personal data on the following bases:

• Consent — where you have given clear, specific, and informed consent (e.g. marketing emails, non-essential cookies)
• Contract — where processing is necessary to deliver the Services you signed up for
• Legal obligation — where we are required to process data to comply with applicable Nigerian law
• Legitimate interests — for fraud prevention, security, and proportionate product improvement, where those interests are not overridden by your rights

Legal Bases — Users in the United Kingdom and European Economic Area

Under the UK GDPR and EU GDPR, we rely on:

• Performance of a contract — providing the Services you signed up for
• Legitimate interests — security, fraud prevention, and proportionate marketing to existing users
• Consent — where required for marketing communications or non-essential cookies
• Legal obligation — to comply with tax, regulatory, or law enforcement requirements

6. How We Share Information

We do not sell your personal information to any third party under any circumstances.

6.1 Service Providers (Processors)

We use trusted third-party providers who process data strictly on our instructions and subject to appropriate contractual safeguards:

Each provider maintains its own privacy and security practices. We encourage you to review their policies where relevant.

6.2 Community Visibility

Information you choose to make public, such as your display name, avatar, posts, and comments, will be visible to other members. Private messages sent through community features are not publicly visible but are stored and may be reviewed by authorised moderators where required for safety or legal compliance.

6.3 Legal and Safety

We may disclose information if required by law, court order, or governmental request from a competent authority, or where we reasonably believe disclosure is necessary to protect the rights, safety, and integrity of users, the public, or LearnWithChris.

6.4 Business Transfers

If Ctop Digital Solution is involved in a merger, acquisition, restructuring, or sale of assets, personal information may be transferred as part of that transaction. We will notify affected users via email or in-app notice and ensure continued protection consistent with this Policy.

7. International Data Transfers

Our service providers may process data in countries other than Nigeria, including the United States and countries within the European Union. Where such transfers occur, we implement appropriate safeguards — including standard contractual clauses or equivalent mechanisms recognised under applicable law — to ensure your personal information receives a level of protection consistent with this Policy and the NDPA 2023.

8. Data Retention

We retain personal information only for as long as necessary to fulfil the purposes described in this Policy, unless a longer period is required by law.

When data is no longer needed and no legal hold applies, we delete or anonymise it in accordance with our internal retention procedures.

9. Security

We implement administrative, technical, and organisational measures to protect personal information, including:

• Encryption in transit (HTTPS/TLS) across all Platform connections
• Row-level security (RLS) on our database layer
• Access controls and role-based permissions on production systems
• Restricted access to secrets, API tokens, and environment variables
• Regular review of third-party integrations and their security postures

No method of transmission or storage is completely secure. You are responsible for maintaining the confidentiality of your password and for using a strong, unique credential for your account. If you suspect unauthorised access to your account, notify us immediately at hello@learnwithchris.app.

10. Your Rights and Choices

Depending on your location, you may have the right to:

• Access — request a copy of personal information we hold about you
• Rectification — correct inaccurate or incomplete information (many fields are editable directly in Account Settings)
• Erasure — request deletion of your account and associated personal data, subject to legal retention obligations
• Restriction — ask us to limit certain processing in specific circumstances
• Portability — receive your data in a structured, commonly used format where technically feasible
• Objection — object to processing based on legitimate interests, including direct marketing
• Withdraw consent — where processing is based on consent, at any time, without affecting the lawfulness of prior processing
• Lodge a complaint — with the relevant supervisory authority in your jurisdiction:
  • Nigeria: National Data Protection Commission (NDPC) at ndpc.gov.ng
  • United Kingdom: Information Commissioner's Office (ICO) at ico.org.uk
  • European Union: Your local EU data protection authority

To exercise any of these rights, email hello@learnwithchris.app from your registered email address. We may need to verify your identity before fulfilling a request. We will respond within 30 days or within the timeframe required by applicable law, whichever is shorter.

Account deletion: Request deletion by emailing hello@learnwithchris.app from your registered email. You can also manage notification preferences under Account Settings in the portal.

11. Marketing and Communications

We may send promotional content about new courses, live sessions, challenges, or offers only where you have opted in at registration or where permitted by applicable law. You can opt out at any time using the unsubscribe link in any marketing email or by updating your notification preferences under Account Settings.

Service-related messages — including password resets, purchase receipts, security alerts, and account notices — are not marketing communications and will continue to be sent for as long as you maintain an active account, as they are necessary for the performance of our contract with you.

12. Cookies and Similar Technologies

We use cookies and local storage to operate core Platform functionality, keep you signed in, and remember your preferences. Our cookie use falls into the following categories:

You can control non-essential cookies through the cookie preferences panel on our Platform or through your browser settings. Disabling essential cookies will prevent certain features from working, including staying logged in.

We do not currently use third-party advertising cookies. If this changes, we will update this section and request fresh consent where required.

13. Live Sessions and Recordings

When you join a live session on LearnWithChris, your display name and participation are visible to the host and other attendees. Some or all live sessions may be recorded for replay access by enrolled learners.

Where a session will be recorded:

• You will be notified clearly before the session begins, either in the session description or via an in-platform notice
• By joining a session marked as recorded, you provide your consent to the recording of your participation, including any chat messages you send during the session
• If you do not wish to be recorded, you may leave the session before it begins without penalty to your course progress

Recordings are stored securely via Cloudflare infrastructure and access is restricted to authorised users and enrolled learners as designated by the host. Recordings are not sold or shared with third parties.

14. Children's Privacy

The Platform is intended for users who are 16 years of age or older. We do not knowingly collect personal information from anyone under 16.

At registration, we require users to confirm they meet the minimum age requirement. If we become aware that a user under 16 has created an account or provided personal information without verifiable parental consent, we will take prompt steps to delete that account and associated data.

If you believe a child under 16 has provided us with personal information, contact us immediately at hello@learnwithchris.app and we will investigate and act promptly.

15. Data Protection Compliance Responsibility

Ctop Digital Solution takes its obligations under the Nigeria Data Protection Act 2023 seriously. All data protection queries, complaints, and compliance matters should be directed to:

Email: hello@learnwithchris.app
Subject line: Data Protection Request

We are committed to responding to all compliance-related correspondence within the timelines prescribed by the NDPA 2023 and applicable regulations.

16. Third-Party Links

The Platform may contain links to third-party websites, social profiles, or external payment pages. We are not responsible for the privacy practices or content of those sites. We encourage you to read their privacy policies before providing any personal information.

17. Governing Law and Jurisdiction

This Privacy Policy is governed by and construed in accordance with the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023 and any regulations made under it.

For users located in the United Kingdom or European Economic Area, nothing in this clause limits your rights to seek remedies before your local supervisory authority or courts under applicable data protection law.

Any disputes arising from or related to this Privacy Policy that cannot be resolved through direct correspondence shall be subject to the jurisdiction of the courts of the Federal Republic of Nigeria.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or the services we offer. When we do:

• The revised version will be posted on this page with an updated “Last updated” date
• For material changes that significantly affect how we use your data, we will notify you by email to your registered address or by in-app notice at least 14 days before the change takes effect
• Continued use of the Services after the effective date of any update constitutes your acceptance of the revised Policy

If you do not agree with any update, you may close your account before the effective date by contacting hello@learnwithchris.app.

19. Contact Us

For all questions, concerns, rights requests, or complaints regarding this Privacy Policy or our data practices:

Primary contact: hello@learnwithchris.app
Website: learnwithchris.app/contact
Registered entity: Ctop Digital Solution, RC No. 8676666, Federal Republic of Nigeria