Privacy Policy

Last updated: November 16, 2025

Your privacy is important to us. This policy explains how we collect, use, protect, and share your personal information when you use Sabitek.

256-bit

Encryption

GDPR

Compliant

Zero

Data Selling

Full

Control

Our Commitment to Your Privacy

Sabitek (operated by Tek4All Digital Inclusion Initiative) is committed to protecting your personal information. We collect only what we need, use it responsibly, and give you full control over your data. We never sell your personal information to third parties.

1. Information We Collect

1.1 Information You Provide

Account Information

  • • Full name
  • • Email address
  • • Password (encrypted)
  • • Profile photo (optional)
  • • Role (learner/instructor/admin)

Educational Data

  • • Course enrollments
  • • Progress and completion data
  • • Quiz responses and scores
  • • Certificates earned
  • • Learning preferences

Content You Create

  • • Course materials (instructors)
  • • Comments and discussions
  • • Reviews and ratings
  • • Support messages

Payment Information

  • • Billing address
  • • Transaction history
  • • Payment method (via secure processor)
  • • Instructor payout details

1.2 Automatically Collected Information

Technical Data

  • IP address and location
  • Device type and browser
  • Operating system
  • Pages visited and time spent
  • Referral sources
  • Session duration

1.3 AI-Enhanced Features

Our AI features (SabiQuiz, SabiAdvisor) may process:

  • Course content for quiz generation
  • Your queries to our AI career advisor
  • Learning patterns for personalized recommendations

Note: AI processing is done securely and your data is not used to train external AI models without consent.

2. How We Use Your Information

2.1 Platform Operations

  • Provide access to courses and learning materials
  • Track your progress and issue certificates
  • Process payments and manage subscriptions
  • Facilitate instructor-student interactions
  • Send course-related notifications

2.2 Personalization and Improvement

  • Recommend courses based on your interests
  • Customize your learning experience
  • Analyze usage patterns to improve platform features
  • Generate AI-powered quizzes and learning aids
  • Provide career guidance through SabiAdvisor

2.3 Communication

We may contact you for:

  • ✉️ Account updates and security alerts
  • 📚 New courses and learning opportunities
  • 🎓 Certificate availability notifications
  • 💬 Responses to your support inquiries
  • 📊 Platform updates and feature announcements
  • 🎯 Promotional offers (you can opt-out)

2.4 Legal and Safety

  • Comply with legal obligations and court orders
  • Enforce our Terms and Conditions
  • Prevent fraud and unauthorized access
  • Protect user safety and platform security
  • Resolve disputes and investigate violations

3. How We Share Your Information

🚫 We Never Sell Your Personal Data

Your personal information is not for sale. We do not sell, rent, or trade your data to third parties for their marketing purposes.

3.1 Service Providers

We share data with trusted service providers who help us operate the platform:

Supabase

Database hosting and authentication

AI Services

OpenAI, Gemini, DeepSeek for AI features

Payment Processors

Secure payment handling (PCI DSS compliant)

Email Services

Resend for transactional emails

Note: All service providers are contractually bound to protect your data and use it only for specified purposes.

3.2 Public Information

Certain information is publicly visible:

  • Your profile name and photo (if provided)
  • Course reviews and ratings you publish
  • Public comments and forum posts
  • Instructor profile information
  • Certificates with verification codes

3.3 Legal Requirements

We may disclose information when required by law or to:

  • Comply with legal process or government requests
  • Enforce our Terms and Conditions
  • Protect rights, property, or safety of Sabitek or others
  • Prevent fraud or security threats

4. Data Security

4.1 Security Measures

Encryption

  • • SSL/TLS for data in transit
  • • AES-256 for data at rest
  • • Encrypted password storage
  • • Secure API communications

Access Controls

  • • Multi-factor authentication available
  • • Role-based access permissions
  • • Regular security audits
  • • Automated threat detection

Data Protection

  • • Regular backups
  • • Redundant storage systems
  • • Data loss prevention
  • • Disaster recovery plans

Monitoring

  • • 24/7 security monitoring
  • • Intrusion detection systems
  • • Anomaly detection
  • • Incident response team

4.2 Your Responsibility

While we implement strong security measures, you also play a role in protecting your account:

  • ✓ Use a strong, unique password
  • ✓ Enable two-factor authentication
  • ✓ Don't share your login credentials
  • ✓ Log out from shared devices
  • ✓ Report suspicious activity immediately

4.3 Data Breach Notification

In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours via email and provide details about the incident, affected data, and steps we're taking to address it.

5. Your Privacy Rights

You have the following rights regarding your personal data:

🔍 Right to Access

Request a copy of all personal data we hold about you. We'll provide this in a readable format within 30 days.

✏️ Right to Rectification

Correct any inaccurate or incomplete personal information in your account settings or by contacting us.

🗑️ Right to Deletion

Request deletion of your personal data. We'll comply unless we have legal grounds to retain it.

📦 Right to Data Portability

Receive your data in a structured, commonly used format and transfer it to another service.

⛔ Right to Object

Object to processing of your data for marketing purposes or based on legitimate interests.

⏸️ Right to Restrict

Request that we limit how we use your data while you dispute its accuracy or lawfulness.

5.1 How to Exercise Your Rights

Contact us to exercise your rights:

Email: impact@tekforall.org

Subject: Privacy Rights Request

Response Time: Within 30 days

Please include your account email and specify which right you wish to exercise. We may verify your identity before processing requests.

6. Cookies and Tracking

We use cookies and similar technologies to improve your experience, analyze usage, and deliver personalized content.

6.1 Types of Cookies

Essential Cookies (Required)

Necessary for platform functionality: authentication, security, and basic features. These cannot be disabled.

Functional Cookies (Optional)

Remember your preferences, language settings, and customizations to enhance your experience.

Analytics Cookies (Optional)

Help us understand how you use the platform so we can improve it. We use anonymized data where possible.

Marketing Cookies (Optional)

Used to deliver relevant course recommendations and promotional content. You can opt-out anytime.

6.2 Managing Cookies

You can control cookies through:

  • Our cookie preferences center (accessible from your account settings)
  • Your browser settings (may affect site functionality)
  • Third-party opt-out tools for analytics providers

7. Children's Privacy

Age Requirement: 13 Years or Older

Sabitek is intended for users aged 13 and above. Users under 13 require parental or guardian consent and supervision.

  • • We do not knowingly collect data from children under 13 without consent
  • • Parents can request access to or deletion of their child's data
  • • We limit data collection for users aged 13-18
  • • Educational institutions must obtain proper consent before enrolling minors

If you believe we have inadvertently collected information from a child under 13 without proper consent, please contact us immediately at privacy@sabitek.schooland we will delete the information promptly.

8. International Data Transfers

Sabitek is based in Nigeria, but we serve learners globally. Your data may be processed in different countries where our service providers operate.

Data Protection Safeguards

  • • We use EU-approved Standard Contractual Clauses for data transfers
  • • Service providers are required to maintain GDPR-equivalent protections
  • • Data is encrypted during transfer and storage
  • • We conduct regular compliance audits of third-party processors

Primary Data Locations: Nigeria (primary), United States (cloud hosting), European Union (select services). All transfers comply with applicable data protection laws.

9. Data Retention

We retain your data for as long as necessary to:

  • Provide our services and maintain your account
  • Comply with legal obligations (e.g., tax records for 7 years)
  • Resolve disputes and enforce agreements
  • Prevent fraud and maintain security

Retention Periods:

  • Active accounts: Retained while account is active
  • Closed accounts: Deleted within 90 days (some data retained for legal compliance)
  • Course progress: Retained for 3 years after last activity
  • Certificates: Retained permanently for verification
  • Transaction records: 7 years (legal requirement)

10. Third-Party Links

Our platform may contain links to third-party websites, including course resources and external tools. We are not responsible for the privacy practices of these sites. We encourage you to review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be notified via email and platform notification. Continued use of Sabitek after changes constitutes acceptance of the updated policy.

Last major update: November 16, 2025

12. Contact Us

Questions or concerns about your privacy?

Privacy Officer: impact@tekforall.org

General Support:

Data Protection Officer:

Address: Tek4All Initiative, Abuja, FCT, Nigeria

Website: https://sabitek.school

We aim to respond to all privacy inquiries within 48 hours.