Your information should help you learn—not surprise you.

1. Who this policy covers

This policy applies to Fintter’s website, Android and iOS applications, and related education, community, admissions, counselling, messaging, AI tutor, certificate, promotion, and wallet services (together, the “Platform”). Fintter is operated by Fintter Technology Enterprise, a Nigerian enterprise and the data controller responsible for the personal data described here. Questions and data-subject requests can be sent to support@fintter.com.

2. Information we collect

Information you provide

• Account and identity: name, email address, password in protected form, account role, and Google account identifier if you choose Google sign-in.
• Profile and education: photo, biography, school, level, programme, subjects, interests, skills, goals, country, state, local government area, and optional date of birth or phone number.
• Admissions and counselling: preferences, qualifications, eligibility answers, saved schools or programmes, application tracking, scholarship applications, support questions, appointments, and guidance records.
• Content and communications: posts, comments, reactions, messages, community activity, reports, lesson content, assessment answers, files, images, audio, and video you submit.
• Payments: transaction reference, amount, currency, status, wallet ledger entries, and receipt details. Payment providers process card or bank credentials; Fintter does not need to store your full card number.
• Support and verification: correspondence, reports, evidence, and information submitted to verify an account, school, or certificate.

Information collected through use

• Device and technical data such as IP address, device/browser type, app version, operating system, session identifiers, crash information, and security logs.
• Usage data such as pages and features used, searches, follows, views, learning progress, assessment attempts, recommendations, promotion impressions, and interactions.
• Camera, photos, files, and notification token only when you use the related feature or grant permission. Fintter does not request precise device location.

3. Why we use information

• Provide accounts, profiles, learning, messaging, communities, admissions, counselling, certificates, payments, and support.
• Personalise feeds, lessons, school and programme matches, study guidance, and opportunities.
• Secure accounts, prevent fraud and abuse, enforce our rules, investigate reports, and protect students.
• Send service messages and, with the choices available to you, notifications or relevant platform updates.
• Measure and improve reliability, accessibility, safety, and product performance.
• Meet legal obligations, resolve disputes, and maintain financial and audit records.

Under the Nigeria Data Protection Act 2023 (“NDPA”), our lawful bases include performing our agreement with you, your consent, our legitimate interests in operating a safe education platform, compliance with legal obligations, and protection of vital interests where safety is at risk. You may withdraw consent where consent is the basis, without affecting earlier lawful use.

4. When information is shared

We do not sell your personal information. We may share limited information:

• With other users: according to your profile and post privacy settings. Messages are visible to conversation participants.
• With your school or counsellor: where your relationship, role, or an explicit sharing choice permits it. School administrators manage their own school spaces.
• With service providers: hosting, storage, email, push notification, analytics, content moderation, AI, customer support, and payment providers acting for the Platform.
• For safety or law: where reasonably necessary to comply with law, prevent harm, investigate abuse, or protect rights and security.
• For a business change: as part of a merger, financing, restructuring, or transfer, subject to appropriate confidentiality and notice.

AI features may send your prompt and the minimum relevant context to an AI service provider to generate a response. Do not enter confidential, medical, financial, or other highly sensitive information into the AI tutor.

5. Public content and your choices

A public profile or post can be viewed, copied, or reshared by others. You can make your account private, limit certain journey, skills, and goals sections, control counsellor sharing, manage notifications, delete your own content where available, block users, and report content. Removing something may not remove copies already shared by others or records we must keep for safety or law.

6. Children and student safety

Fintter is built for education and may be used by secondary-school students. A child should use Fintter only with the involvement and consent of a parent, guardian, or school where required by local law. We minimise collection, do not use precise location, and do not knowingly serve behaviourally targeted advertising to children. Parents or guardians may contact us to review, correct, restrict, or delete a child’s information. See our Safety Centre.

7. Retention and deletion

We keep information while your account is active and as needed for the purposes above. After an account-deletion request is verified, we delete or de-identify account data unless retention is reasonably required for law, financial reporting, fraud prevention, safety, dispute resolution, or enforcing agreements. Financial ledgers, receipts, moderation evidence, and security logs may therefore be retained for the legally required period and then deleted or anonymised. Backups are removed on their normal secure rotation cycle.

You can start deletion from Delete your Fintter account. You may also ask us to delete a particular item without closing your account.

8. Security and international processing

We use access controls, encryption in transit, password hashing, session controls, monitoring, and role-based permissions. No system is completely secure, so protect your password and tell us promptly about suspected misuse. Providers may process information in countries other than yours; where required, we use lawful transfer safeguards.

9. Your rights

Under the NDPA, subject to applicable limits, you may ask whether we process your personal data; request access, correction, erasure, restriction, or a portable copy; object to certain processing; withdraw consent; and object to a decision based solely on automated processing where it has a legal or similarly significant effect. We may need to verify your identity before acting. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (“NDPC”) if a privacy concern remains unresolved. We will not charge for a routine request unless the law permits it.

10. Changes

We will update this page when our practices change. For material changes, we will provide reasonable notice in the Platform or by email before the change takes effect where practicable.