Privacy policy
Last updated 27 October 2026
This policy explains what information PadiLearn collects when you use the PadiLearn app and this website, why we collect it, who we share it with, and the choices you have. It is written to meet Google Play’s requirements and the Nigeria Data Protection Act 2023 (NDPA).
If anything here is unclear, email us at hello@padilearn.com.
Who we are
PadiLearn is an online learning app where teachers publish video courses and students enrol in them or buy them. It is operated by Groundwork Tech Ltd, a company registered in Nigeria. In this policy “PadiLearn”, “we” and “us” mean Groundwork Tech Ltd, which decides how your data is used (the data controller). You can reach us at hello@padilearn.com.
What we collect
| What | Examples | Why we need it |
|---|---|---|
| Account details | Your name, email address, password (stored hashed, never readable by us), and whether you’re a student or a teacher | To create your account and sign you in |
| Account identifiers | The ID our systems give your account | To link your courses, progress and comments to you |
| Profile photo (optional) | A photo you upload | To show on your profile |
| Bio (teachers, optional) | A few sentences about yourself that you write, up to 300 characters | To show students who is teaching a course |
| Courses you create (teachers) | Videos, thumbnails, titles, descriptions, categories, prices | To host your course and show it to students |
| Things you post | Comments, course ratings, reports about content | To run course discussions, show ratings, and review reports |
| Learning activity | Courses you enrol in, your lesson progress, and how far into each lesson you have watched | To show your courses, let you resume where you stopped, and tell when you have finished a course |
| Certificates | For each course you finish and ask a certificate for: your name as it was then, the course, its teacher, the date and the certificate ID | To show your certificate and let anyone you give the link to check it |
| Payout details (teachers only) | Bank name, account number, account name, and the payouts we have sent you | To pay you what your courses earn |
| Purchase records | What was bought, when, the amount and the payment reference | To give you access to what you paid for, and for our financial records |
| Crash and error reports | What went wrong in the app, your phone model and Android version, and your account ID | To find and fix bugs |
We do not collect your location, contacts, phone number, or device identifiers for advertising. The app shows no ads, and we do not sell your information.
The app stores some data on your phone, such as a list of your ongoing courses so they still appear when you’re offline. It is removed if you uninstall the app or clear its data. The web app at app.padilearn.com keeps you signed in using your browser’s storage; signing out or clearing your browser data removes it.
This website and the web app use no advertising or analytics cookies and no tracking scripts. When you pay, you do so on Paystack’s checkout page, which Paystack runs under its own privacy policy.
Why we use it (legal basis)
- To provide the service you signed up for (performance of a contract): your account, courses, enrolments, progress, comments and, where relevant, payouts and purchases.
- To keep PadiLearn safe (legitimate interests): reviewing reported content, preventing abuse, and fixing problems.
- To meet legal obligations: keeping financial records for as long as the law requires.
We only email you about your account, such as password resets and important service messages. We will ask for your consent before sending marketing emails.
Who can see your information
- Other PadiLearn users can see your name and profile photo, courses you publish, and comments and ratings you post. If you are a teacher, signed-in users can also see your bio and the month you joined, on a profile page that lists your courses with their ratings and student numbers. Students’ enrolments are visible to the teacher of that course. Your email address is not shown to other users.
- Anyone with the link to one of your certificates can see what is printed on it: your name, the course, its teacher and the date. Certificate pages are kept out of search engines; who gets the link is up to you.
- Service providers who process data for us under contract:
- Supabase hosts our database, accounts and file storage.
- Cloudflare hosts this website.
- Resend sends account emails such as sign-up confirmations and password resets.
- Sentry receives crash and error reports from the app, linked to your account ID but not your name or email, so we can find and fix bugs.
- Paystack processes card and bank payments, and checks the name on a teacher’s bank account before we save it. We never see or store your full card details.
- Authorities, where the law requires us to share information.
We don’t share your information with anyone else.
Where your data is stored
Our service providers may store and process data on servers outside Nigeria. When that happens we rely on the safeguards the NDPA allows, such as the providers’ contractual data protection commitments. All data is encrypted in transit (HTTPS).
How long we keep it
- While your account exists, we keep the data above so the app works.
- When you delete your account, we delete your profile (including your bio), photo, enrolments, progress, certificates, ratings, comments, payout details, notifications and any courses you created, including their videos. Links to your certificates stop working.
- We keep some records after deletion:
- Purchase records are kept for our financial and tax records, with your account link removed.
- Reports you made about content are kept so we can finish reviewing them.
- A record of an account we deleted. If we delete an account ourselves, because you asked us to by email or because it broke our terms, we keep a note of which account it was (its email address and name), when, and why. This is so we can show that a request was carried out and answer for the decision.
- Backups held by our hosting provider may keep deleted data for a short period until they are overwritten.
See Delete your account for how to do it.
Your rights
Under the NDPA you have the right to:
- ask for a copy of the personal data we hold about you;
- correct data that is wrong (you can edit most of it in the app);
- have your data deleted;
- object to, or ask us to restrict, how we use your data;
- receive your data in a common, machine-readable format;
- withdraw consent where we rely on it.
Email hello@padilearn.com from the address on your account to use any of these rights. We’ll reply within 30 days. If you’re not happy with how we handle your data, you can complain to the Nigeria Data Protection Commission (NDPC).
Children
PadiLearn is intended for users aged 18 and over. Younger users may only use it with the permission and supervision of a parent or guardian. If you believe a child has given us personal data without that permission, contact us and we will delete it.
Security
Passwords are hashed, connections are encrypted, and access to our database is limited by per-user security rules. No system is perfectly secure. If a breach puts your information at risk, we will tell you and the NDPC as the law requires.
Changes to this policy
When we change this policy we’ll update the date at the top. If a change significantly affects how we use your data, we’ll tell you in the app or by email before it takes effect.