Privacy Policy

Welcome to Learn and Study Forum ("LSF", "we", "us", or "our"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains what data we collect, how we use it, and the choices you have regarding your information when you use our platform.

This policy applies to all users of the LSF platform, including students, tutors, news correspondents, and administrators. By creating an account or continuing to use the platform, you agree to this policy in full.

We collect two categories of data: information you provide directly, and data generated automatically by your use of the platform.

Every piece of data we collect is used only for the following purposes:

• To create and maintain your student profile, including your display name, avatar, and institution.
• To authenticate you securely and provide access to your account across devices.
• To record, display, and calculate your quiz history, average scores, and earned achievements.
• To personalise your experience — such as pre-filling your name on the booking form.
• To send transactional emails only (e.g., email verification, password reset). We do not send marketing emails.
• To identify role-based access for tutors, admins, and news correspondents.
• To improve platform performance using anonymised, aggregate analytics.

Your data is stored on Supabase, a trusted, SOC 2 Type II compliant database infrastructure hosted on secure servers. Supabase encrypts all data at rest and in transit using industry-standard TLS/SSL protocols.

• Passwords are never stored in plain text — they are hashed using bcrypt via Supabase Auth.
• Profile photos are stored in Supabase Storage with access controlled per-user.
• Database tables use Row-Level Security (RLS) so users can only access their own records.
• All communication between your browser and our servers is encrypted via HTTPS.

We do not sell, rent, trade, or otherwise share your personal data with third parties for commercial purposes — ever.

The only third-party services that may process your data are:

• Supabase — database, authentication, and file storage provider.
• Google — only if you choose to sign in via Google OAuth.
• Vercel Speed Insights — anonymised performance analytics; no personal data shared.

LSF uses browser storage to improve your experience. We do not use advertising or third-party tracking cookies.

• Supabase Auth Session — a secure session token stored in localStorage to keep you logged in. Cleared on sign-out.
• Theme Preference — stores your dark/light mode choice locally. No personal data.
• Saved Bookmarks — your bookmarked items are stored in localStorage on your device only.
• Active Tab State — remembers which profile tab you last used. Stored locally.

Under the Nigeria Data Protection Regulation (NDPR) and general data protection principles, you have the following rights regarding your personal data:

To exercise any of these rights, contact us via WhatsApp (details in Section 10). We will respond within 7 business days.

LSF is designed to serve students of all ages, including those under 18 who are preparing for JAMB and secondary school examinations.

If you are under 18, you should review this policy with a parent or guardian before creating an account. By registering, you confirm that your parent or guardian has consented to your use of the platform and the collection of your data as described in this policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal obligations. When we make material changes, we will:

• Update the "Last updated" date at the top of this page.
• Where reasonably possible, notify registered users via an in-app notification.

We encourage you to review this page periodically. Continued use of the platform after any update constitutes acceptance of the revised policy.