What we collect, why, and what you control.

Information we collect

We collect data to provide and improve our services

Account & identity:

Name, email, role (learner or educator), and authentication tokens stored via the API auth flow.

Course activity:

Enrollments, module progress, quiz attempts, assignment submissions, cohort attendance, and certificates issued.

Content & uploads:

Media you store through the curriculum builder (videos, PDFs, lesson assets) along with metadata such as duration and file size.

Billing & payouts:

Purchase history, pricing, revenue share, and payout accounts configured inside the educator dashboard.

Device & diagnostics:

Cookies, IP addresses, and API logs that help us secure accounts, debug errors, and maintain service performance.

Phone and message settings:

Phone number (optional), country code, and di choices you make about WhatsApp reminders for live class, SMS backup, and course updates. Na only if you gree we go collect am.

Push notification tokens:

When you install our mobile app or on browser push, we dey keep FCM/Expo token, your platform (iOS, Android, or web), and device label so we fit send class reminders, chat alerts, and order updates. You fit off notifications any time from your system settings.

Live class audio, video and chat:

Daily.co na im dey power live sessions. Your camera, microphone, and screen-share dey pass through Daily.co only while you dey inside di session, and recordings dey store for our AWS S3 bucket only when di educator on recording. Daily.co dey handle di in-call chat for di time wey di session last.

Zoom account wey you connect:

If you connect Zoom, we keep access token, refresh token, the permissions wey you give, plus the Zoom user ID, email and display name for that account. We dey use dem only to create and manage the meetings wey you schedule for LearnKasts. If you disconnect Zoom for Settings, Integrations, everything go delete sharp sharp.

In-app messages and community:

Chat messages, attachments (pictures, files) wey you share for course discussion, mentorship talk, and reactions. We no dey sell or share dem with advertisers at all.

AI features (voice and avatar):

If you choose to clone your voice or make AI avatar, di audio and image samples wey you send dey go to our AI processors (HeyGen and D-ID) to build your own voice or avatar, and di result dey store for our system. You fit delete your voice or avatar from your educator settings any time.

AI help for course content:

When you use di AI Course Wizard, AI tutor, or auto quiz marking, di text wey you send dey go OpenAI or AWS Bedrock under our enterprise agreement; dem no dey train dia models with your data.

Educator payout details:

Educators wey dey collect payout dey give bank account details, routing info, and tax numbers (like BVN/TIN) wey we need to pay dem. We dey store dis data encrypted and share am only with our payment processors.

Accessibility settings (sensitive):

If you complete di accessibility setup, we dey keep di vision, hearing, movement, and screen-reader needs wey you report so we fit arrange di interface for you. Dis one na sensitive data, we no dey share am and you fit clear am from settings.

Marketing attribution:

When you enter through referral link or marketing campaign, we dey capture UTM parameters and referral codes for your session so educators fit credit di person wey refer you, and we fit measure how di campaign perform.

How we use your information

Your data powers your learning experience

Deliver experiences:

Personalize dashboards, resume lessons, issue certificates, and power live sessions through the educator console.

Operate the platform:

Process transactions, calculate payouts, send cohort reminders, and run analytics visible on educator and learner dashboards.

Improve LearnKasts:

Aggregated analytics and feedback from feature usage (e.g., curriculum builder, assignments, help center) guide product decisions.

Protect the community:

Detect fraud, enforce community guidelines, and comply with legal requests related to course content or financial activity.

Communicate with you:

Send system alerts, onboarding tips, release notes, and support responses when you open a ticket or contact us.

Your controls & security

You're in control of your data

Account settings:

Update profile details, change roles, and manage notification preferences from your dashboard.

Data exports & deletion:

Educators can export course data; learners can request account deletion. We retain only what is required for compliance (e.g., payouts, tax records).

Media ownership:

Educators control their uploads. We store them securely via the storage services configured in this codebase (e.g., S3 storage drivers).

Security practices:

API tokens, session cookies, and Livewire state are protected with HTTPS, server-side validation, and activity logs maintained in the analytics services.

Contact support:

Reach us via the contact page for privacy questions or to exercise your data rights.

Third-party processors

Services wey dey help us run LearnKasts

Paystack, payment processing

Card and bank details dey enter for checkout wey Paystack dey host. Na only transaction reference, status, and di last 4 digits of card we dey receive.

Daily.co, live video classroom

Real-time audio and video, in-call chat, and recording when educator on am.

Zoom, meetings for your own account

When you schedule Zoom class we dey send Zoom the meeting topic, start time, length and participant limit. When learner register for the class, we dey send Zoom their name and email so Zoom fit give them personal join link wey identify them for the meeting; nothing else about the learner dey shared. If you archive recording to the course, we dey download am from your Zoom account and keep am with the class. Recordings wey you keep for Zoom go remain for your Zoom account.

HeyGen and D-ID, AI avatar and voice

Voice samples and reference photos wey dem use build your avatar or voice.

OpenAI and AWS Bedrock, AI text

AI Course Wizard, tutor answers, auto quiz marking, and AI website-builder content. Dem no dey train on your data.

Amazon Web Services (AWS S3, CloudFront)

File storage for course videos, lesson assets, recordings, and pictures wey you upload, wey CDN dey serve.

Mailgun and MailerLite, email delivery

Transaction emails (password reset, receipts, course updates) and marketing automation.

Firebase Cloud Messaging and Expo, push notifications

Dem dey carry push notifications go your device.

Pusher, real-time updates

Live progress, chat presence, and notifications inside di app.

Google, single sign-on, Translate, Analytics

OAuth login (di email and profile name for your Google account), translation of interface text, and traffic analytics wey dem join together.

Meta (Facebook) Pixel

Conversion tracking for marketing pages. You fit opt out for di cookie banner.

Laravel Nightwatch, error and performance logs

Application error traces and request performance numbers for debugging.

Compliance and contact

How long we dey keep your data

We dey keep account data as long as your account dey active. After you delete am, na only wetin law say make we keep we go keep (money records: 7 years; tax records: as Nigerian, EU, and US law talk). Analytics wey no carry your name fit stay forever.

International transfers

Our system dey host for AWS regions wey fit dey outside your country (like us-east-1, eu-west-1). Where e necessary, Standard Contractual Clauses or something like am dey guide di transfer.

Children and minors

LearnKasts na for people wey don reach 13 years and above. We no dey knowingly collect personal info from children wey never reach 13 (or 16 for some EU/UK places). If we find out say we collect data from pikin wey never reach di age, we go delete am. Parents and guardians fit contact us to check am or make we delete am.

Legal bases (GDPR/NDPR)

We dey process your data based on: (a) di contract to deliver di courses wey you enrol for; (b) di consent wey you give for marketing email, AI avatar/voice features, and analytics cookies; (c) our legitimate interest for security, stopping fraud, and making di product better; and (d) legal duties (tax, payouts, compliance requests).

Your rights

You fit ask to see, correct, export, or delete your personal data, and you fit object to or limit some processing. Use di data export and delete tools inside di app, or email us for di address below.

Privacy contact (DPO)

Email privacy@learnkasts.com for any privacy request or complaint. We dey try answer within 30 days. You fit also report to di Nigeria Data Protection Commission (NDPC) or your local authority.