Privacy Policy

Account & profile

When you create an account we collect your name, email, and password, and the profile details you provide — such as phone number, university, faculty, department, level, semester and session, student code, registration number and profile picture. Passwords are stored in a hashed form, or handled by our authentication provider; we never store them in plain text.

Your content

The study materials you upload, the requests you make, your course and carryover lists, and your notification preferences.

Usage & device data

Aggregated page-view counts (which pages are visited, not tied to your identity), a record of when your account was last active, and basic technical information your browser sends. We do not use third-party advertising trackers.

• To provide and personalise the service — your courses, dashboard and practice.
• To sign you in and keep you signed in.
• To send notifications you have opted into.
• To understand usage and improve Qitt (using aggregated analytics).
• To keep the platform safe and enforce our policies.
• To meet our legal obligations.

Under the NDPA 2023, we rely on one or more of the following:

• Your consent — for example, notifications and optional profile fields.
• Performance of a contract — to provide the service you signed up for.
• Our legitimate interests — to secure and improve the service, balanced against your rights.
• Legal obligation — where the law requires it.

You can withdraw consent at any time (see “Your rights”).

• Service providers that help us run Qitt — such as cloud hosting and file storage, and a push-notification provider — only as needed and under confidentiality obligations.
• Other users — material you choose to contribute is shared with other students, as described in our Copyright & Content Policy.
• Legal & safety — where required by law, or to protect the rights and safety of users and the public.

We do not sell your personal data.

We keep your personal data while your account is active and for as long as we need it to provide the service or meet legal and operational requirements. When it is no longer needed, we delete or anonymise it. You can ask us to delete your account and data at any time.

We take reasonable technical and organisational measures to protect your data — including hashed passwords and access controls. No method of storage or transmission is completely secure, but we work to protect your information and to respond quickly if something goes wrong.

Under the NDPA 2023 you have the right to:

• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Ask us to delete your data.
• Restrict or object to certain processing.
• Receive your data in a portable form.
• Withdraw consent you previously gave.

To exercise any of these, email csfun100@gmail.com. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).

We use a secure session cookie to keep you signed in, and we store some information in your browser's local storage so the app loads quickly. We use aggregated page-view analytics to understand how Qitt is used. We do not use third-party advertising or cross-site tracking cookies.

Some of the providers we use to run Qitt may store or process data on servers outside Nigeria. Where that happens, we take steps to ensure your data receives a level of protection consistent with the NDPA 2023.

Questions about this policy, or to exercise your rights:

• Email: csfun100@gmail.com
• Click to call
• Message on WhatsApp