Privacy Policy — My Genius

1. Information we collect

You can browse mygenius.ng and even take a quiz on app.mygenius.ng without an account. We only collect the categories below when they apply to how you use the Services.

Category	What it includes	When we collect it
Account & profile	Your Google account’s name, email address, and profile picture, plus a Google account identifier.	When you sign in with Google.
Academic profile	The university and department you select.	During onboarding, and when you update your profile.
Learning activity	Quizzes you start and complete, your answers, scores, generated study summaries, and progress metrics.	When you use the quiz features (some works anonymously).
Contributions	Study material (notes/files) you upload and any request you submit to add a course, department, or school.	When you upload notes or submit a request.
Donations	Amount, status, and a payment reference for voluntary donations. Payments are processed by our payment partner; we never receive or store your card or full bank details.	When you make a donation.
Technical & security	IP address, browser/device information, and activity timestamps used to keep accounts secure and prevent abuse.	Automatically, when you interact with the Services.
Anonymous usage	A random visitor identifier stored in your browser, device type, and how long a page is visible. This is not linked to your identity.	Automatically (see Anonymous analytics).

2. How we use your information

Provide and operate the Services — sign-in, quizzes, study summaries, progress tracking, notes, and leaderboards.
Personalise content, such as scoping course search to your university.
Send essential emails you would expect: a welcome message, donation receipts, and notices when your submitted notes are approved.
Keep the Services safe: detect, investigate, and prevent fraud, abuse, and security incidents.
Understand and improve the Services through aggregate, anonymous analytics.
Comply with legal obligations and enforce our Terms of Use.

We do not sell your personal information, and we do not use it for third-party advertising.

3. Legal bases (NDPA)

Under the Nigeria Data Protection Act 2023, we rely on:

Consent — for example, when you choose to sign in with Google or upload notes. You may withdraw consent at any time.
Performance of a contract — to deliver the features you ask for once you have an account.
Legitimate interests — to secure the Services, prevent abuse, and improve them using anonymous analytics, balanced against your rights.
Legal obligation — where we must retain or disclose information to comply with the law.

4. Cookies and similar technologies

We use only a small number of strictly necessary cookies, and no third-party advertising or tracking cookies:

Essential session cookies — keep you signed in across *.mygenius.ng once you log in.
Security cookies — help protect your account and requests from misuse.
Google Sign-In may set its own cookies to manage the sign-in prompt, governed by Google’s privacy policy.
Local storage — we store a random, non-identifying analytics id and small preferences (such as your selected university) in your browser.

5. Anonymous analytics

To understand how many people visit and how long they stay, each page sends short, anonymous “time on site” signals: a random visitor id generated in your browser, the type of device (for example mobile or desktop, derived from your browser’s user-agent), and the number of seconds a page was visible.

These signals contain no name, email, or account link. We use them only in aggregate to measure reach and engagement. The visitor id lives in your browser’s local storage and you can clear it at any time by clearing site data.

6. Who we share information with

We share personal information only with service providers that help us run the Services, each acting on our instructions:

Google — sign-in (authentication).
Groq — generating your AI study summaries from your quiz results.
Cloudinary — hosting study material you upload.
SafeHaven MFB — processing donations. Payment details go directly to the provider.
Our email provider — delivering the transactional emails described above.

We may also disclose information if required by law, to protect the rights, safety, and security of our users and the Services, or as part of a business transfer (such as a merger), in which case we will notify you.

7. Information others can see

Some features are social by design. If you sign in and appear on a leaderboard or a public profile, your display name, profile picture, university, and achievement statistics (such as quiz scores, contributions, or donation recognition) may be visible to other users. You can avoid appearing by not participating in the ranked features.

8. Data retention

We keep your personal information while your account is active and for as long as needed to provide the Services. Anonymous analytics and aggregate statistics may be kept indefinitely because they no longer identify you. When you ask us to delete your account, we remove or anonymise your personal information, except where we must keep limited records (for example, donation records) to meet legal or accounting obligations.

9. Your rights

Subject to the NDPA, you may:

Access the personal information we hold about you.
Correct information that is inaccurate or incomplete.
Request deletion of your account and personal information, in whole or in part.
Object to or restrict certain processing, and withdraw consent at any time.
Request a copy of your information in a portable format.
Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To delete your account, or just parts of your information, use Delete your account or data. You can also do it inside the app, from your profile. For anything else on this list, email [email protected]. We will respond within the timeframe required by law and may need to verify your identity first.

10. Security

We take the security of your information seriously and apply appropriate technical and organisational measures — including encryption in transit (HTTPS), secure session handling, access controls, and monitoring for abuse — to protect it. No online service can be completely secure, but we work to safeguard your data and to respond promptly if an issue arises.

11. Age & children

The Services are intended for tertiary (university and college) students and other users aged 18 and above. They are not directed at children under 13, and we do not knowingly collect their personal information. If you are between 13 and 18, please use the Services only with the involvement of a parent or guardian. If you believe a child has provided us personal information, contact us and we will delete it.

12. International transfers

Some of our service providers (such as Google, Groq, and Cloudinary) process data on servers outside Nigeria. Where personal information is transferred abroad, we rely on the safeguards permitted under the NDPA and take reasonable steps to ensure it remains protected.

13. Changes to this policy

We may update this policy as the Services evolve or the law changes. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you. Continuing to use the Services after an update means you accept the revised policy.

14. Contact us

Questions, requests, or complaints about privacy? Reach the team at [email protected]. My Genius is a product of OYEN INDUSTRIES.