Privacy Policy
Version 1.0
•Effective: January 12, 2026
Effective Date: January 12, 2026
TuteAcademy ("we", "us", "our") operates a learning management system that provides educational content and services to individuals and institutions. We are committed to protecting personal data and complying with the Nigeria Data Protection Regulation (NDPR) and the General Data Protection Regulation (GDPR).
This Privacy Policy explains how we collect, use, store, share, and protect personal data when you access or use our website, applications, and services (collectively, the "Services").
1. Data Controller
For the purposes of NDPR and GDPR, TuteAcademy is the Data Controller of personal data processed through the Services.
Contact Email: support@tuteacademy.com
2. Personal Data We Collect
a. Information You Provide Directly
We collect personal data that you voluntarily provide, including:
Full name
Email address
Phone number
Username and password
Profile details
Billing and payment information
Communications with support
Institutional or role based identifiers (student, instructor, administrator)
b. Educational and Learning Data
As part of delivering LMS services, we collect and process:
Course enrollments
Learning progress and completion data
Assessments, submissions, and grades
Attendance records
Instructor feedback and interactions
c. Automatically Collected Data
When you use TuteAcademy, we automatically collect:
IP address
Device and browser information
Operating system
Usage logs and timestamps
Cookies and similar tracking technologies
3. Legal Basis for Processing
We process personal data under the following lawful bases:
Under GDPR (Article 6):
Consent provided by the data subject
Performance of a contract where processing is necessary to deliver Services
Legal obligation under applicable laws
Legitimate interests pursued by TuteAcademy, provided such interests do not override your rights
Under NDPR:
Consent of the data subject
Performance of contractual obligations
Compliance with legal and regulatory requirements
Protection of legitimate interests
4. How We Use Personal Data
We use personal data to:
Create and manage user accounts
Provide and administer educational services
Track learning progress and outcomes
Communicate service related notices and updates
Process payments and subscriptions
Provide customer support
Improve platform functionality and performance
Ensure security, fraud prevention, and system integrity
Comply with legal and regulatory obligations
5. Data Sharing and Disclosure
We do not sell personal data.
We may share personal data only in the following circumstances:
With instructors, institutions, or administrators for educational delivery
With third party processors such as hosting providers, analytics services, and payment processors
With regulatory authorities where required by law
In connection with audits, compliance reviews, or legal claims
As part of a merger, acquisition, or asset transfer
All third party processors act under contractual obligations to protect personal data and process it only on our instructions, in line with NDPR and GDPR requirements.
6. International Data Transfers
Personal data may be transferred outside Nigeria or the European Economic Area.
Where such transfers occur, we ensure appropriate safeguards, including:
Adequacy decisions
Standard Contractual Clauses (SCCs)
NDPR compliant data protection agreements
7. Data Retention
We retain personal data only for as long as necessary to:
Fulfill the purposes outlined in this policy
Meet contractual obligations
Comply with legal, accounting, and regulatory requirements
When data is no longer required, it is securely deleted, anonymized, or archived in accordance with applicable law.
8. Cookies and Tracking Technologies
TuteAcademy uses cookies and similar technologies to:
Enable core platform functionality
Authenticate users
Store user preferences
Analyze platform usage
You may manage cookie preferences through your browser settings. Restricting cookies may impact platform functionality.
9. Data Security Measures
We implement appropriate technical and organizational measures to protect personal data, including:
Access controls and authentication
Data encryption in transit and at rest where applicable
Secure hosting environments
Regular system monitoring and updates
Despite these measures, no system can be guaranteed to be completely secure.
10. Data Subject Rights
Under NDPR and GDPR, you have the right to:
Access your personal data
Request correction of inaccurate or incomplete data
Request deletion of personal data
Restrict or object to processing
Withdraw consent at any time
Request data portability
Lodge a complaint with a supervisory authority
Requests may be submitted by contacting us at support@tuteacademy.com
. We will respond within the timelines required by law.
11. Children and Minors
TuteAcademy does not knowingly process personal data of children below the age permitted under applicable law without valid parental, guardian, or institutional consent.
Where children’s data is processed, we apply heightened security and data minimization standards.
12. Third Party Services and Links
The Services may integrate or link to third party platforms. TuteAcademy is not responsible for the privacy practices of such third parties. Users are encouraged to review their privacy policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Updates will be posted with a revised effective date. Continued use of the Services constitutes acceptance of the updated policy.
14. Contact and Complaints
For privacy related inquiries, requests, or complaints, contact:
TuteAcademy
Email: support@tuteacademy.com
For NDPR related complaints, you may also contact the Nigeria Data Protection Commission (NDPC).
For GDPR concerns, you may contact your local Data Protection Authority.