This Privacy Policy describes your privacy rights regarding how and when we collect, use, store, share, and protect your information across our mobile software application and website ("BILDUP AI"). This Privacy Policy has been compiled to inform you of how the information you provide to us will be processed, as well as how we secure that Personal Data. By using BILDUP AI, you consent to the processing and use of your Personal Data as specified in this Privacy Policy.

We collect the following categories of Personal Data when you use BILDUP AI:

• Account Information: Name, email address, phone number, password, and other registration details.
• Educational and Usage Data: Learning progress, quiz responses, interactions with AI tutors (e.g., queries and responses), programs/subjects studied, device usage patterns, learning goals, proficiency level, motivations, and aspirations to personalize learning.
• Payment and Billing Information: If applicable, billing address, payment method details (processed securely via third parties).
• Device and Technical Data: Browser type, device identifiers, and log data for security and analytics.
• Sensitive Data (if provided): With your consent, data such as age, location, or educational background, which may include children's data if under parental supervision (see Age Restriction).

We may also collect non-personal data, such as aggregated usage statistics, to improve our AI models. If we use your data for AI training, it is anonymized and aggregated unless you consent otherwise.

Consistent with applicable law and choices available to you, we may use information collected from you or your devices:

• To provide, personalize, and improve our AI-powered educational services, such as adaptive learning paths, AI-generated lessons, quizzes, and tutoring recommendations based on your progress (this may involve automated decision-making; see Choices and Rights).
• To secure your account and enable login access.
• To inform you of new offers, features, and important information.
• To process payments and deliver services to your billing address.
• For security, fraud detection, and legal compliance, including preventing policy violations.
• To analyze and improve our AI algorithm (using anonymized data where possible) and detect biases in outputs.
• For any other purpose with your consent.

We may share the categories of information identified above for the following business and commercial purposes:

• With service providers performing tasks on our behalf, such as OTP verification, payment processing, SMS/email services, and customer support. These providers are contractually prohibited from using your information for other purposes.
• With technology partners (if applicable) for processing educational content, but only anonymized data unless consented.
• When we believe in good faith that disclosure is necessary to:
• Satisfy any applicable law, regulation, legal process or enforceable governmental request.
• Detect, prevent, or address fraud, security, or technical issues, including AI-related risks.
• Protect the rights, property, or safety of BILDUP AI, its users, or the public.
• Enforce our Terms of Service, including investigating violations.

• In the event of a merger, acquisition, or sale of assets, we will notify you via email or a site notice of any changes in ownership, data uses, or your choices.

Where Personal Information is to be transferred to a country outside Nigeria, BILDUP AI shall put adequate measures in place to ensure the Security of such Personal Information. In particular, BILDUP AI shall, among other things, confirm whether the country is on the National Information Technology Development Agency (NITDA) White List of Countries with adequate data protection laws. Transfer of Personal Information out of Nigeria would be in accordance with the provisions of the Nigeria Data Protection Regulation. BILDUP AI will therefore only transfer Personal Information out of Nigeria on one of the following conditions:

• Your consent has been obtained.
• The transfer is necessary for performing a contract with you or pre-contractual measures at your request.
• The transfer is necessary for a contract with a third party in your interest.
• The transfer is for public interest reasons.
• The transfer is for establishing, exercising, or defending legal claims.
• The transfer is necessary to protect vital interests where you cannot consent.

We will ensure secure transmission and provide details of protections upon request. For AI processing, transfers may occur to secure cloud providers, but only with appropriate safeguards.

If we hold your Personal Information, you may exercise the following rights by contacting our Data Protection Officer at support@bildup.ai:

• Right to access your Personal Information in a structured, electronic format.
• Right to information on collected and stored data.
• Right to object to automated decision-making or profiling (e.g., AI-based learning recommendations), including requesting human intervention, expressing your views, or contesting decisions.
• Right to rectify or modify inaccurate Personal Information.
• Right to request deletion of your data (subject to legal obligations).
• Right to data portability (transfer to a third party).
• Right to object to or restrict processing of your Personal Information.

These rights may be limited by law or our obligations. Declining to provide data may limit access to services, including AI personalization. You can update information via account settings or by contacting us.

We retain your information as long as your account is active, or as needed to provide services or for other lawful purposes. Even after account closure, we may retain certain data for compliance. We periodically review retained data for accuracy and necessity, and destroy it when no longer required.

Retention periods are determined by:

• Contract terms or the purpose for which data was collected.
• Statutory or regulatory requirements.
• Deletion requests (unless overridden by investigations or contracts).
• Other lawful bases.

For AI-generated educational data (e.g., progress logs), retention is limited to what's necessary for personalization, typically up to 2 years post-account activity unless longer is required.

We are concerned with safeguarding your Personal Data. We provide physical, electronic, and procedural safeguards to protect the information we process and maintain. Steps include:

• A dedicated data security team to protect our app and services.
• Regular testing for security vulnerabilities, including AI-specific risks like data leaks in model processing.
• Secure transmission protocols (e.g., encryption).
• Limited access to authorized personnel only.

We may update this Privacy Policy to reflect new services, such as AI enhancements, or legal changes. Updates will be posted here, with material changes notified via email, app notice, or website. Continued use after notice constitutes consent.

BILDUP AI is designed for educational users of all ages but is not directed at children under 13 without parental consent. We do not knowingly collect Personal Information from children under 13. For users under 18, parental/guardian consent is required for processing sensitive educational data. If we discover such data without consent, we will delete it. Parents can contact support@bildup.ai.

By using BILDUP AI, you consent to this Privacy Policy.