Privacy Policy

1. Who is responsible for your data

Cogdemy, operated by Hartlysams (Nigeria), is the data controller for the personal data described here. For NDPR-specific rights and contacts, see our NDPR statement.

2. What we collect

• Account data, name, email, password (stored hashed via our auth provider), and profile details you add.
• Enrolment & learning data, courses you enrol in, lesson progress, quiz and assignment results, notes, bookmarks, reviews, and questions.
• Payment data, order records and status. Card details are entered on and processed by Paystack; we do not store full card numbers.
• Usage & device data, pages viewed, video watch progress, approximate device/browser info, and log data used to keep the service secure.
• Communications, messages you send us, and (if you opt in) a WhatsApp number for course notifications.

3. How we use it

• To create your account, deliver courses, track progress, and issue certificates.
• To process payments and provide receipts and support.
• To send transactional email (e.g. receipts, graded assignments, replies) and, where you opt in, WhatsApp notifications.
• To secure the platform, prevent abuse, and comply with legal obligations.
• To improve our courses and the platform.

4. Lawful basis

We process data to perform our contract with you (providing courses you enrol in), on the basis of your consent (e.g. WhatsApp notifications), to meet legal obligations, and for our legitimate interests in running and securing the platform.

5. Who we share it with

We share data only with providers that help us run Cogdemy, under appropriate safeguards:

• Supabase, authentication and account records.
• Paystack, payment processing.
• Bunny, secure video delivery and playback analytics.
• Resend, transactional email delivery.
• WhatsApp / messaging partner, only if you opt in to WhatsApp notifications.
• Meta and TikTok, to measure the effectiveness of our advertising. When you buy a course we send a “purchase” event that may include a hashed (irreversible) copy of your email plus advertising cookie identifiers, so the platforms can attribute the sale to an ad. We share only what is needed for measurement.

We do not sell your personal data.

6. International transfers

Some providers process data outside Nigeria. Where that happens, we rely on those providers' safeguards and applicable data-protection terms to protect your data.

7. Retention

We keep your data for as long as your account is active and as needed to provide the service, meet legal and accounting obligations, and resolve disputes. You can ask us to delete your account (see rights below).

8. Security

We use encryption in transit, tokenised video access, parameterised database access, and access controls to protect your data. No system is perfectly secure, but we work to protect it and to respond promptly to any incident.

9. Your rights

You may request access to, correction of, or deletion of your personal data, object to or restrict certain processing, and request a copy of data you provided. To exercise any right, use the contact page. More detail is in our NDPR statement.

10. Cookies

We use essential cookies for sign-in and security, and limited analytics to understand usage. You can control cookies through your browser settings; disabling essential cookies may break sign-in.

11. Children

Cogdemy is not directed at children under 13. We do not knowingly collect their data. If you believe a child has provided us data, contact us and we will remove it.

12. Changes

We may update this policy; the “Last updated” date reflects the latest version.

13. Contact

For any privacy question or request, reach us via the contact page.