Operating Unit: Aakadimia (A Division and Registered Operating Brand of Bongalo 24 Co Ltd)

Effective Date: October 13, 2026

Website: [https://aakadimia.com]

Data Protection Email: privacy@aakadimia.com

1. Introduction & Regulatory Scope

Aakadimia and its parent entity Bongalo 24 Co Ltd ("Company", "Platform", "We", "Us", or "Our") respect your privacy and are committed to protecting the personal data of all students, parents/guardians, tutors, and website visitors ("Users", "You").

This Privacy Policy governs the collection, processing, storage, sharing, and protection of personal data across aakadimia.com, its subdomains, mobile interfaces, and integrated digital services.

International Regulatory Alignment

Our data handling practices comply strictly with regional and international data protection standards, including:

 The African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention).

 Applicable African National Data Protection Frameworks (including Nigeria NDPA, Kenya Data Protection Act, South Africa POPIA, Ghana DPA, Rwanda Law No. 058/2021, and CEMAC regional regulations).

 The General Data Protection Regulation (GDPR) for global users.

  International Anti-Money Laundering (AML) / Know Your Customer (KYC) mandates.

2. Information We Collect

We collect personal information to provide certified educational courses, deliver live interactive classes, manage tutor digital wallets, execute Mobile Money payouts, and enforce security protocols.

┌─────────────────────────────────────────────────────────────────────────────┐

│ DATA COLLECTION MATRIX │

├───────────────────┬─────────────────────────────────────────────────────────┤

│ User Category │ Personal Data Categories Collected │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Students & │ Full legal name, email, phone number, physical address, │

│ Parents │ age/grade, academic records, live video/audio during │

│ │ classes, payment transactions, and support chat logs. │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Academic Tutors & │ Full legal name, email, phone number, government ID │

│ Examiners │ (National ID/Passport), proof of address, live selfie, │

│ │ academic/examiner credentials, and Mobile Money numbers.│

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Technical & │ IP address, device specs, browser type, geographic │

│ System Data │ location, cookies, bandwidth usage, and lab telemetry. │

└───────────────────┴─────────────────────────────────────────────────────────┘

2.1 Information Provided Directly by You

  Account Credentials: Names, email addresses, passwords, telephone numbers, and profile photos.

  Tutor KYC & Financial Verification: Government-issued identification numbers, photo ID uploads, address verification documents, bank details, and Mobile Money account credentials (e.g., MTN MoMo, Orange Money, M-Pesa, Airtel Money).

  Classroom & Communication Data: Audio and video recordings during live interactive sessions, chat transcripts, assignment submissions, practice exam scores, and support ticket submissions.

2.2 Automated Data Collection

  Log & Device Telemetry: IP address, device fingerprints, operating system details, browser type, network latency, and session duration.

  Virtual Lab Usage Data: Logs of technical configurations, command execution times, and resource consumption within IT virtual labs (CompTIA, Cisco, AWS, Microsoft).

  Cookies & Tracking: Session cookies, authentication tokens, and performance metrics.

3. Lawful Basis & Purposes for Processing Personal Data

We process personal data only when a valid legal ground exists under data protection law:

  Contractual Performance: To create user accounts, process Mobile Money enrollments, deliver live examiner classes, provision IT practical lab credentials, and process Tutor Wallet payouts.

  Legal & Regulatory Compliance: To execute mandatory KYC checks, comply with international AML regulations, prevent payment fraud, and respond to court orders.

  Legitimate Educational & Security Interests: To review recorded live classes for quality control, prevent unauthorized account sharing, defend against cyber threats, and evaluate platform reliability across African mobile networks.

  Consent: To send promotional WhatsApp broadcast notifications, marketing newsletters, or collect optional feedback (consent can be revoked at any time).

4. Know Your Customer (KYC) & Financial Anti-Money Laundering (AML) Data

To maintain compliance with international AML, Office of Foreign Assets Control (OFAC) sanctions, and financial integrity rules:

  Mandatory Tutor KYC: Tutors seeking wallet withdrawals must provide a valid government-issued ID, proof of residence, and undergo selfie matching.

  Sanctioned Zones Screening: Automated IP geolocation and identity screening are enforced to block transactions involving comprehensively sanctioned jurisdictions, including Afghanistan, Syria, Cuba, Iran, North Korea (DPRK), and Occupied Ukrainian Regions (Crimea, Donetsk, Luhansk, Zaporizhzhia, Kherson).

  Fraud Prevention: Financial transaction logs, wallet deposit history, and Mobile Money payout requests are retained and audited to prevent structuring or unauthorized money movement.

5. Live Class Recording & Intellectual Property Protection

  Session Recording Notice: All live classes (including IELTS, WAEC, GCE exam prep, and IT lab lectures) are automatically recorded for student revision, quality control, and safety monitoring.

  Student Consent: By joining a live video class, you consent to the capture of your voice, video feed, and chat comments within that specific educational setting.

  Recording Distribution: Recordings are hosted securely on low-data servers and are accessible only to registered students in that specific course batch. Downloading, screen-recording, or publishing class recordings outside aakadimia.com without written permission is strictly illegal.

6. How We Share & Disclose Information

Aakadimia never sells, rents, or trades your personal data to third-party marketers or data brokers. We share data only under strict, legally binding conditions with the following parties:

  Parent Entity: Bongalo 24 Co Ltd for administrative, corporate governance, and legal oversight.

  Third-Party Infrastructure & Service Providers: Secure cloud hosting platforms, Mobile Money payment gateways, virtual lab engine providers, and SMS/WhatsApp API gateways bound by strict confidentiality agreements.

  Senior Examiners & Tutors: Tutors receive student names and assignment submissions strictly necessary to conduct live classes and grade papers. Tutors do not receive student financial data or private contact details.

  Legal & Regulatory Authorities: When required by law, subpoena, court order, or financial intelligence authorities to investigate fraud, cyber abuse, or AML violations.

7. Data Storage, Security & International Transfers

7.1 Data Security Measures

We implement enterprise-grade technical and organizational security controls to protect your data:

  Encryption: AES-256 bit encryption at rest for stored records and TLS 1.3 encryption in transit across all web interfaces.

  Access Control: Role-based access restriction (RBAC) and mandatory multi-factor authentication (MFA) for administrative staff.

  Redundancy & Backups: Isolated server environments and automated continuous database backups.

7.2 Cross-Border Data Transfers

As a platform operating across 54 African countries and globally, your information may be transferred to and processed in secure cloud servers located outside your home country. We ensure all cross-border data flows comply with the Malabo Convention and relevant national transfer mechanisms (using standard contractual clauses and adequacy frameworks).

8. Data Retention & Deletion Policy

  Active Student & Tutor Accounts: Retained for the duration of account activity to grant continuous course access, lab usage, and verified certificate validation.

  KYC & Financial Transaction Logs: Retained for a mandatory period of five (5) to seven (7) years following account closure to comply with statutory anti-money laundering (AML) and financial audit laws.

 Classroom Recordings & Chat Logs: Retained for up to twenty-four (24) months from the date of class completion, after which they are archived or permanently deleted.

9. Your Data Protection Rights

Under applicable African regional frameworks and global data privacy standards, Users possess the following rights:

┌─────────────────────────────────────────────────────────────────────────────┐

│ USER PRIVACY RIGHTS │

├───────────────────┬─────────────────────────────────────────────────────────┤

│ Right │ Description & Execution │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Right to Access │ Request a copy of all personal data held about you. │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Right to Correct │ Rectify inaccurate or incomplete profile/KYC records. │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Right to Erasure │ Request deletion of your account and personal data │

│ ("Right to Forget")│ (subject to legal AML financial retention laws). │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Right to Restrict │ Limit or object to how we process your data for marketing│

│ / Object │ or automated profiling. │

├───────────────────┼─────────────────────────────────────────────────────────┤

│ Data Portability │ Request export of your academic records and receipts. │

└───────────────────┴─────────────────────────────────────────────────────────┘

To exercise any of these rights, email our Data Protection Officer at privacy@aakadimia.com. Requests are processed within thirty (30) days without charge.

10. Child Safeguarding & Minor Privacy

  Parental Consent: Children under the age of 18 are not permitted to create accounts or make Mobile Money purchases independently without verified parental or legal guardian consent.

 Protection of Minor Data: We enforce strict safety filters in live interactive classrooms and prohibit tutors from soliciting personal social media handles, private offline contact, or private photos from underage students.

  Parental Access: Parents or legal guardians may review, correct, or request deletion of their minor child’s personal information at any time.

11. Third-Party Links & External Software

aakadimia.com may contain links to external web tools, practical IT lab engines, or payment gateways. Aakadimia is not responsible for the privacy practices, cookies, or content of third-party websites. Users are encouraged to read the privacy policies of any external services visited.

12. Updates to This Privacy Policy

Aakadimia reserves the right to modify or update this Privacy Policy at any time to reflect changing technological realities, local legislation, or corporate operational updates. Material changes will be communicated via website notifications, direct email alerts, or official WhatsApp announcements. Continued platform usage after published updates signifies full acceptance of the revised Privacy Policy.

13. Contact Information & Data Protection Officer

For privacy inquiries, data access requests, or regulatory questions, contact our Data Protection Office:

 Data Protection Officer: Legal & Compliance Directorate

 Operating Entity: Bongalo 24 Co Ltd (Aakadimia Division)

 Official Privacy Email: privacy@aakadimia.com

 General Support Email: info@aakadimia.com

 Website: [https://aakadimia.com]