Privacy Policy

1. Who we are

PromptPaddi is a product of AFRISAGE LTD/GTE, a company registered in Nigeria. We provide a curated AI prompt library for Nigerian school communities — including teachers, parents, consultants, non-teaching staff, home educators, lesson teachers, educator-entrepreneurs and education job seekers.

For data protection enquiries, please contact us at privacy@promptpaddi.com.

2. What data we collect

We collect the minimum data necessary to provide our service:

3. What we do NOT collect

We want to be equally clear about what we do not collect or store:

• We do not store the prompts you copy, adapt or launch to third-party AI platforms.
• We do not collect personal data about your pupils, students or children.
• We do not store your payment card details (Paystack handles this).
• We do not use tracking cookies for advertising purposes.
• We do not sell, rent or trade your personal data to third parties.

4. How we use your data

We use the data we collect for the following purposes:

• To provide the service: authenticating your account, displaying prompts relevant to your audience track, managing your subscription, and saving your favourites and preferences.
• To process payments: managing your subscription through Paystack, including activations, renewals and cancellations.
• To improve the service: understanding which prompts are most viewed, reviewing flagged content, and responding to your feedback.
• To communicate with you: responding to support requests and feedback you submit through the app.

5. Legal basis for processing

Under the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023 (NDPA), we process your personal data on the following bases:

• Consent: You provide consent when you create an account and accept the Data & AI Handling Agreement during registration.
• Contractual necessity: Processing your account and subscription data is necessary to provide the service you have subscribed to.
• Legitimate interest: Analysing aggregated, anonymised usage patterns to improve our prompt library and service quality.

6. Who we share data with

We share your data only with the following third parties, and only to the extent necessary:

We do not share your data with any AI platform. When you launch a prompt to a third-party AI tool (Claude, ChatGPT, Gemini, etc.), that interaction is directly between you and the AI provider — PromptPaddi is not a party to it.

7. Data storage and security

Your data is stored in a PostgreSQL database on our production server. We take the following security measures:

• Passwords are hashed using industry-standard algorithms — we never store plaintext passwords.
• All connections to PromptPaddi are encrypted via HTTPS (TLS/SSL).
• Access to the database is restricted to authorised personnel only.
• Sessions are managed using secure, httpOnly tokens.

8. Data retention

We retain your personal data for as long as your account is active. If you delete your account, we will remove your personal data within 30 days, except where we are required by law to retain certain records.

Anonymised, aggregated usage statistics (e.g. total prompt views per category) may be retained indefinitely as they cannot be linked back to you.

9. Your rights under NDPR/NDPA

As a data subject under Nigerian data protection law, you have the following rights:

• Right of access: You may request a copy of the personal data we hold about you.
• Right to rectification: You may request that we correct inaccurate or incomplete data. You can also update your name and audience track directly in your account settings.
• Right to erasure: You may request that we delete your account and all associated personal data.
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances.
• Right to data portability: You may request your data in a structured, machine-readable format.
• Right to object: You may object to processing based on legitimate interest.
• Right to withdraw consent: You may withdraw your consent at any time by deleting your account or contacting us.

To exercise any of these rights, please email privacy@promptpaddi.com. We will respond within 30 days.

10. Cookies

PromptPaddi uses only essential cookies required for the service to function:

• Session cookie: A secure, httpOnly cookie that keeps you logged in. This is deleted when you log out or when it expires.
• CSRF token: A security cookie that protects against cross-site request forgery attacks.

We do not use advertising cookies, analytics cookies, or third-party tracking cookies.

11. Children

PromptPaddi is for adults aged 18 and over only. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor has created an account, we will delete it and all associated data immediately.

If you believe a minor has registered for PromptPaddi, please contact us at privacy@promptpaddi.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page. Continued use of PromptPaddi after changes are posted constitutes acceptance of the revised policy.

13. Complaints

If you are not satisfied with how we handle your data, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.