PromptPaddi Junior ("we", "us") is an AI literacy and study-prompt platform built for Nigerian school learners, aligned with the Nigerian, Cambridge, and WAEC curricula. This policy explains what personal data we collect, why, and how it is protected, including the extra care we take because many of our users are children.
This policy is a plain-language summary, not legal advice. It is written to be consistent with Nigeria's Data Protection Act (NDPA 2023) and its predecessor regulation (NDPR), and informed by the UK Department for Education's guidance on AI in education and UNESCO's guidance on AI and education. Before relying on it for compliance purposes, have it reviewed by a qualified data protection professional in your jurisdiction.
What we collect
- School accounts: school name, admin email address, and a password (stored as a one-way hash, never in plain text).
- Learner rosters: a first name and class label that a school administrator chooses to add. We do not require or store a learner's surname, date of birth, or any other identifying detail. A school can instead keep its pupils' names off PromptPaddi Junior altogether: with "pupils by code" we hold a code for each pupil, never their name (see Pupils by code below).
- Learning GPS (schools that add it): a pupil's Daily Pulse and Friday Reflection answers (effort, a word for the day, a traffic light, what went well, what was hard, a wellbeing rating from 1 to 5, and whether they want help or to talk to someone), their GPS Checks for a topic or test (confidence, goal, strategies, next step and later the result), and notes the form teacher records about following up; and, if the school switches on monthly progress, each month's grades against target, assessment scores, attendance, behaviour incidents and effort ratings recorded by the form teacher, the pupil's monthly check-in (self-regulation, wellbeing ratings from 1 to 5 and a goal), and the record of any Parent-Student-Teacher meeting the trigger rules open. See "Learning GPS" below.
- My Learning GPS at home (families that add it): each child's first name and age group, the same answers as above for a child aged 10 or over, the Weekly Learning Chat a parent records with a younger child (what went well, what was tricky, a colour for the week, and short notes), the parent's own notes, and the monthly progress record the parent keeps (grades, attendance, behaviour, effort and their reflection). See "Learning GPS" below.
- Individual accounts: a randomly generated device token when someone redeems an access code: no name, email, or personal identifier is required to use PromptPaddi Junior as an individual.
- Usage data: which prompts and lessons are used and how often, to understand what's useful and keep the library up to date, not tied to any individual child's identity beyond the school or device token, unless the child has said who is studying (below). We do not store the text of any AI conversation: learners who use Study Coach prompts do so in their own AI account, outside PromptPaddi Junior, and Paddi conversations (see "How AI providers are involved") are not kept by us.
- Study habits (when a child says who is studying): on a subject page a pupil may choose their name from their school's class list, or a family may add a child's first name and stage. From then on, on that device, we keep which prompts the child copied or opened in an AI tool (the subject and topic, and the day) and the scores of the practice tests they finish, so that the child, their parents and, for a school pupil, their school can see their study habits on the progress dashboard. A cookie on the device remembers the choice; it holds a random token, nothing personal. “Not now” and “Stop saving on this device” keep nothing. When a school removes a pupil, their study habits are deleted with them.
- Free Study Coach sessions without an account: anyone can try three free primary Study Coach sessions in each subject. While a visitor works through one, their answers are kept only in a small cookie on their own device (ppj_study_try, for one day) so the session can be marked; we keep no record of them.
- PaddiPartner links: when someone opens a link a PaddiPartner shared in a social media post, we count the visit once a day using a one-way code made from their internet address and browser (we never store the address itself), and a cookie (ppj_partner_post, for 30 days) remembers which post they came from, so that the partner is credited if they buy. It holds the post's code, nothing about the visitor.
What we do not do
- We do not sell personal data, to anyone, ever.
- We do not ourselves use learner conversations to train any AI model. What an AI provider may do with data sent to it is set by that provider's own terms (see below).
- To see how many people visit and which pages they use, we use Cloudflare Web Analytics, which sets no cookies, does not follow anyone across other websites and does not identify individual visitors.
- We do not knowingly collect more personal data from a child than is needed to provide the service.
How AI providers are involved
Two ways. With Study Coach, learners copy a study prompt themselves into whichever AI tool they already use (such as Claude, ChatGPT, or Gemini), directly on that provider's own site, and that conversation never passes through our servers. Primary pupils can also "Study without AI": Study Coach sessions with a short lesson and questions marked by our own system, which involve no AI provider at all.
With PromptPaddi Tutor, Exam Boost and Homework Tracker with Paddi, Paddi, our built-in AI tutor, runs inside PromptPaddi Junior and is powered by Anthropic's Claude models through Anthropic's API. When a learner asks Paddi for help, opens a practice set, or hands in a written answer for Paddi to mark, the question, the learner's message and the last few messages, and (for marking) the written answer and class label are sent to Anthropic to produce the reply. We do not send the learner's name, school name, email or private link, and we do not store the conversation. Learning GPS answers are never sent to an AI provider.
Sending data abroad. Anthropic is based in the United States, so what is sent to Paddi leaves Nigeria. Anthropic's API commercial terms incorporate its Data Processing Addendum, in which Anthropic acts as our processor and which uses Standard Contractual Clauses for transfers out of Europe and the UK. It does not mention Nigeria. Anthropic's published terms say it does not train its models on this data and, by default, deletes it within 30 days, with exceptions (for example, content flagged under its usage policy can be kept for up to two years). See our Data & AI Handling page for details.
Children's data and parental/school consent
PromptPaddi Junior is designed for use in a school setting, under a school's subscription, or by a family with a parent or guardian's knowledge and supervision. Schools using PromptPaddi Junior are responsible for having appropriate consent in place under their own safeguarding policies before adding a learner to their roster. Individuals under 18 should only use PromptPaddi Junior with a parent or guardian's permission and supervision.
Learning GPS
Learning GPS is an add-on a school can switch on; pupils see it as My Learning GPS. Each pupil on the school's roster gets a private link, with no password, to answer a short check-in about their learning and wellbeing. Their answers are seen by their form teacher, through the class's own private link, and by nobody else in the class. When a pupil asks to talk to someone about how they are feeling, or rates their week 1 out of 5, or rates any area of their monthly wellbeing check-in 1 out of 5, we email their form teacher and the safeguarding contact the school has named, so that an adult can speak to them the same day. A school's administrator can also open each class's Monday list from the school dashboard, and that list includes what pupils wrote, so schools should limit who holds the administrator login.
Wellbeing answers are sensitive personal data. For schools in Nigeria, the data controller is AFRISAGE LTD/GTE, which runs PromptPaddi Junior in Nigeria under licence from PromptPaddi Limited. The school decides who holds the class links, and is responsible for telling parents and having their consent under its safeguarding and data protection policies before it adds a pupil, in line with the Nigeria Data Protection Act 2023. We process the answers only to provide the service to the school. When a pupil is removed from the roster, their answers, GPS Checks and follow-up notes are deleted with them. Learning GPS is not a clinical or diagnostic tool, and does not replace a school's safeguarding procedures.
At home. A parent with a PromptPaddi Junior family account can add My Learning GPS for their own children. The parent adds each child by first name and age group. A child aged 10 or over answers through their own private link, and only the parent sees the answers, on their dashboard; when the child asks to talk to someone or rates their week 1 out of 5, we email the parent. With a younger child, the parent records the Weekly Learning Chat themselves. The parent decides what is recorded and can remove a child at any time, which deletes everything recorded for that child; deleting the parent account deletes it all.
Pupils by code (schools that choose it)
A school can switch on "pupils by code" for its roster. Each pupil is then given a random code (such as PUP-7KQ2M9), made by the teacher's own browser before anything is sent to us, and the code is all we receive and hold in place of the pupil's name: we refuse a name if one is sent. Pupils' names stay with the school, in the browser on the school's own devices and in a name list the school downloads and keeps; neither is ever sent to us. On a school device that holds the list, PromptPaddi Junior shows each pupil's name in place of their code, on the page and in anything copied from it, without sending the name anywhere. Pupils still open their work with their own private link. On a pupil's own phone or tablet, without the school's list, the pupil is asked what they would like to be called; what they type stays on that device and is never sent to us.
When a school turns pupils already on its roster into codes, we replace their names everywhere we had kept them (the roster, Study profiles, the mark book and saved progress reports). What we then hold about a pupil (their class, their work and their code) is pseudonymised: only the school can tell who it belongs to. Emails we send the school, such as an urgent wellbeing alert, and downloads made on our servers show the code, so staff read the name on their own device. The school keeps its name list and is responsible for keeping it safe; we cannot recover a name we were never given.
Where data is stored and how long we keep it
Data is stored on servers we control, with access restricted to the team operating PromptPaddi Junior. A school's pupil records (its roster and everything recorded about those pupils, including Tutor records and the class teachers' contact details) are kept while the school's subscription is active and for 90 days after the last product it bought ends, then erased. The school's account and its orders and payments are kept after that, as tax and accounting records. A family's records are kept until the parent removes a child or deletes the account. The free first paper is different: if a parent claims one, we keep the parent's email address, the parent's first name, the child's first name and their answers for 30 days, then delete them (the claim is made with a ticked consent box, by which the parent confirms they have read this notice and consents to receive emails from AFRISAGE; we send the paper link and then a short series of emails about PromptPaddi Junior over about 16 days, each with an unsubscribe link, and the parent can unsubscribe at any time). The free paper is marked by our own system and is not sent to an outside AI service. You can request earlier deletion at any time, including from the unsubscribe link. See "Your rights" below.
For the free first paper, the emails (the paper link and the follow-up series) are delivered through our email provider, Resend, which handles the parent's email address and the email text for that purpose only. The child's answers are not sent to Resend or to any outside AI service.
Families and schools paying in pounds or dollars
If you pay in pounds sterling or US dollars, the seller is PromptPaddi Limited, registered in England and Wales (company number 17515862) and registered with the UK Information Commissioner's Office (registration number C2065004). Stripe processes the card payment, and PromptPaddi Limited receives your name, email, billing country and what you bought, to provide it and keep tax records. For families and schools in the UK we also handle personal data, including children's data, in line with the UK GDPR, the Data Protection Act 2018 and the ICO's Children's Code, and you can complain to the ICO (ico.org.uk). A small cookie (ppj_cur) remembers the currency you chose.
Your rights
Under the NDPA and comparable data protection law, you (or a school acting for its learners) can ask us to access, correct, or delete the personal data we hold, or ask us to stop processing it in certain circumstances. To make a request, email hello@promptpaddijunior.com.
Contact
Questions about this policy or how we handle data can be sent to hello@promptpaddijunior.com.