Your data, your call.

1. What we collect

• Account information: email address, name, university and level (optional), and password (stored as a one-way hash).
• Course materials you upload: PDFs, documents, images, audio recordings, notes and any other files you choose to add to your workspace.
• Learning activity: lessons you generate, quizzes you take, chats with the AI tutor, progress and mastery metrics.
• Payment metadata: subscription plan, billing status and transaction references. Card and mobile-money details are handled by Paystack — we never see or store them.
• Device / usage data: IP address, browser type, device type, and basic analytics needed to keep the service reliable and secure.

2. How we use your data

• To run the service: authenticate you, generate lessons and quizzes from your materials, and show your progress.
• To ground AI features on your uploads only. We do not use your course materials, chats or activity to train AI models — ours or anyone else's.
• To send transactional emails (account, billing, exam reminders you opt into).
• To detect abuse, fraud and security incidents.
• To improve the product in aggregate, anonymised ways (e.g. “X% of quizzes have 5 questions”).

3. Retention

We keep your course materials and account data for as long as your account is active. When you delete your account, we delete your uploaded materials, chat history and learning activity within 30 days. Limited records required for tax, billing or legal reasons (such as payment receipts) may be retained for up to six (6) years as required by Ghanaian law.

4. Third parties we share with

We share the minimum data needed with the following service providers:

• Anthropic and OpenAI — for AI processing (lesson generation, tutor replies, quiz creation). Providers are bound by contract not to use your inputs or outputs to train their models.
• Elastic Email — for transactional email delivery (verification, receipts, password reset).
• Paystack — for payment processing in cedis. Paystack handles card and mobile-money details under their own privacy policy.
• Cloud infrastructure providers hosting our servers and encrypted file storage.

We do not sell your personal data and we do not share it with advertisers.

5. Your rights

Under the Data Protection Act, 2012 you have the right to:

• Access the personal data we hold about you.
• Correct data that is inaccurate or incomplete.
• Delete your account and all associated uploads at any time from Settings.
• Export your data in a machine-readable format.
• Object to or restrict certain processing.
• Lodge a complaint with the Data Protection Commission of Ghana.

To exercise any of these rights, email privacy@suaponai.com.

6. Cookies & local storage

We use essential cookies and browser local storage to keep you signed in, remember your preferences (e.g. dark mode) and support offline study via our PWA service worker. We do not use tracking or advertising cookies. You can clear cookies and local storage from your browser at any time; doing so will sign you out.

7. Security

Connections to Suapon AI are encrypted in transit (TLS). Passwords are hashed. Uploaded files are stored on encrypted storage and access is limited to your account. No system is perfectly secure, but we work hard to protect your data and will notify affected users of any breach in line with Ghanaian law.

8. Children

Suapon AI is intended for users aged 18 and above, or users aged 13–17 with verifiable parental or guardian consent. We do not knowingly collect data from children under 13.

9. Changes to this policy

If we make material changes to this policy, we'll notify you by email or an in-app banner before the changes take effect.

10. Contact

Data protection questions: privacy@suaponai.com
FAAB Systems Ghana Limited · Accra, Ghana.