Privacy Policy
Information We Collect
Account Information
- Name and email address provided at registration
- Password (stored as a one-way hash — we never store your plain-text password)
- Role, specialty, and institution provided during onboarding
- Subscription tier and status
Learning Data
- Conversations and messages you send to Aidanna
- Files you upload (Pro users only) — processed to generate educational responses
- Selected language and mode preferences
- Usage counts (message count per day/month, audio generations used)
Technical Information
- Browser type, operating system, and device type (collected via standard web logs)
- Session authentication tokens (stored in memory, not persisted beyond your session)
What we do not collect: We do not use cookies for tracking or advertising. We do not collect precise location data. We do not build advertising profiles. We do not sell your data.
How We Use Your Information
- To create and maintain your account
- To personalise your learning experience based on your role and specialty
- To generate AI-powered educational content tailored to your requests
- To enforce usage limits and manage subscription access
- To process payments through Paystack
- To send transactional emails (account confirmation, password reset, billing notices)
- To monitor for abuse and maintain platform security
- To improve the Service through aggregate, anonymised usage analysis
We do not use your data for targeted advertising and we do not share it with advertisers.
AI & Data Processing
Aidanna uses Google's Gemini API to generate responses. Your conversation content is sent to Google's API to produce educational output. We apply the following protections:
Paid subscribers (Pro / Institutional): Processed via Google's paid API. Under Google's terms, your data is not used to train or improve Google's models or products.
What we send to Google's API
- Your message content and conversation history (needed to generate contextual responses)
- Your selected language and mode
- Files you upload (Pro users only, for document-based queries)
What we do NOT send to Google's API
- Your name or email address
- Your payment information
- Your account credentials
Audio generation uses Google's Gemini TTS API via our Cloud Run service. The same data handling principles apply.
Data Storage & Security
Your data is stored in Supabase (PostgreSQL) with servers in secure data centres. Audio files are stored in Firebase Storage with time-limited signed URLs.
- All data is transmitted over HTTPS/TLS encryption
- Passwords are stored as bcrypt hashes — never in plain text
- Access to production databases is restricted to authorised personnel only
- Authentication is handled via Supabase Auth with JWT tokens
- Regular backups are maintained
While we implement strong security measures, no system is 100% secure. We will notify affected users promptly in the event of a data breach.
Data Sharing
We do not sell, trade, or rent your personal information. We share data only with the following service providers, strictly to operate the platform:
We may also disclose information when required by Nigerian law, court order, or to protect the safety of users or the platform. We will notify you of such disclosures where legally permitted to do so.
Your Rights
You have the following rights regarding your personal data:
To exercise any of these rights, email support@aidanna.com. We will respond within 30 days.
Data Retention
- Account data: Retained while your account is active
- Conversation history: Retained to enable continuity across sessions; deleted upon account deletion
- Audio files: Retained in your Media library until you delete them or your account is closed
- Usage records: Retained for billing and limit enforcement; aggregated and anonymised after 12 months
- Inactive accounts: Accounts with no activity for 24 consecutive months may be deleted with 30 days' notice to your registered email
You may delete your account at any time from account settings, which will permanently remove your data within 30 days.
Children's Privacy
Aidanna is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has registered, please contact us immediately at support@aidanna.com and we will delete the account promptly.
International Transfers
Aidanna operates from Nigeria. Some of our third-party service providers (Google, Supabase) process data on servers outside Nigeria. By using the Service, you consent to the transfer of your data to these providers in accordance with their respective data protection terms.
We select providers that maintain industry-standard data protection practices and, where applicable, comply with GDPR or equivalent frameworks.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a prominent notice within the Service at least 14 days before the changes take effect. The "Last Updated" date at the top of this page will always reflect the most recent revision.
Your continued use of the Service after a change takes effect constitutes acceptance of the updated policy.
Contact Us
For privacy requests, data deletion, or any questions about this policy:
Lagos Island, Lagos, Nigeria
We aim to respond to all privacy requests within 30 days.
