Privacy Policy

KlasPoint is a platform that tutorial centres, lecturers and tutors ("centres") use to run their classes, take fees and teach students online. KlasPoint is operated by Binatec Agency ("we", "us"). This policy explains what personal data we handle, why, who we share it with and the choices you have.

1. The data we collect

We collect only what the service needs. Depending on how you use it, that can include:

• Account details: your email address and password (stored only in hashed form by our authentication provider). If you sign in with Google, we receive your name, email address and profile picture from Google.
• Profile details a centre holds about you: your display name and phone number for that centre.
• Centre details: business name, logo, colours, website content, support email, and payout details. For payouts we keep the bank, account name and the last four digits of the account number; the full account number is passed to our payment provider and is not stored by us.
• Learning records: classes joined, attendance and check-ins, lesson progress, exam and quiz attempts and answers, assignment submissions and grades, points, levels and leaderboard positions.
• Payment records: what was paid, when, for which plan, the amount, the platform fee and the transaction status. Card and bank details are entered on our payment provider's checkout and never reach us.
• WhatsApp assistant: if you link your WhatsApp number, the number and the messages exchanged with the assistant.
• Messages you send through a centre's contact form: your name, email, phone number and message.
• Device and security data: a random device identifier and your browser type, used when a centre turns on one-device-per-student protection, and records of device changes. IP addresses are processed to deliver the service, prevent abuse and limit repeated sign-in attempts.
• Files and content centres upload: study materials, images, lessons, questions and announcements.

2. How we use it, and our legal basis

• To provide the service you signed up for — your account, your centre's classes, payments and records (performance of a contract).
• To process payments and pay centres through our payment provider (performance of a contract, and legal obligations for financial records).
• To keep the platform secure: preventing account sharing where a centre enables it, stopping fraud and abuse, and investigating incidents (legitimate interests).
• To run the AI features you or your centre choose to use, such as the study assistant, the business copilot and question generation (performance of a contract).
• To send service messages, such as sign-up confirmation, password resets and important changes (performance of a contract).
• To comply with the law and respond to lawful requests (legal obligation).
• Where we rely on your consent — for example optional marketing — you can withdraw it at any time.

We do not sell personal data. We do not use student learning records to advertise to students.

3. Who we share it with

We share personal data only with the providers that make the service work, each under contract and only for that purpose:

• Supabase — database, sign-in and file storage.
• Flutterwave — payment checkout, transaction verification and settlement to centres.
• Anthropic — the AI model behind the study assistant, business copilot and question generation. It receives the questions asked and the records needed to answer them.
• Meta (WhatsApp Business Platform) — delivering WhatsApp assistant messages.
• Google — sign-in with Google, if you use it; and advertising on free lecturer accounts (see section 7).
• Our cloud hosting provider — running the application servers.

Within a centre, staff see the records their role allows (for example, teachers do not see fees or payouts). Classmates can see your display name and points on class leaderboards. We may also disclose data where the law requires it, to protect the rights and safety of users, or as part of a merger or sale of the business, in which case this policy will continue to apply.

4. International transfers

Some of our providers store or process data outside Nigeria. Where that happens we rely on the safeguards permitted by the Nigeria Data Protection Act 2023, such as contractual protections with the provider, and we choose providers with strong security practices.

5. How long we keep it

• Account data: for as long as your account is active, and deleted or anonymised after you ask us to close it, unless we need to keep something for a legal reason.
• Centre records: for as long as the centre uses the service. When a centre closes its account, its records are deleted, except payment records.
• Payment records: for as long as Nigerian tax and financial record-keeping law requires.
• Security records: only as long as needed to protect the service and investigate incidents.

6. Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

• give you a copy of your personal data;
• correct data that is inaccurate or incomplete;
• delete your data, or restrict how we use it;
• move your data to another service in a commonly used format;
• stop processing based on our legitimate interests, or withdraw consent you have given.

Email hello@klaspoint.com from the address on your account. We may need to confirm your identity first, and we aim to respond within 30 days. If your request concerns records a centre controls, we will pass it to the centre or help them act on it. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

7. Cookies and advertising

We use a small number of cookies to keep you signed in, remember settings and protect accounts; see our Cookie Policy for the full list. Free lecturer accounts are supported by advertising: their student portals and dashboards may show Google ads, and Google may use cookies to serve and measure them. Ads are never shown to paying centres or their students.

8. Students under 18

Many students on KlasPoint are adults, but some are under 18. A centre that enrols students under 18 is responsible for obtaining the consent of a parent or guardian where the law requires it. If you are under 18, please make sure a parent or guardian knows you are using KlasPoint. A parent or guardian who believes we hold a child's data without proper consent can contact us and we will act on it.

9. Security

We protect data with database-level separation between centres, role-based access, verified payments, encrypted connections and account protections. Our Security page describes these controls. No system is perfectly secure; if we become aware of a breach that affects you, we will notify you and the regulator as the law requires.

10. Changes to this policy

We will update this page when our practices change and revise the date at the top. If a change is significant, we will tell account holders by email or in the app before it takes effect.

11. Contact us

Questions or requests about privacy: Binatec Agency, Lagos, Nigeria. Email: hello@klaspoint.com.