Privacy Policy

Chibondo Academy ("we", "us") operates https://chibondoacademy.com and https://private.chibondoacademy.com, an online secondary-education platform for Form 3 and Form 4 students in Malawi. You can reach us at geniuspulse22@gmail.com.

Account information. When you create an account we store your full name, email address (or WhatsApp phone number used as a login identifier), password (hashed by our authentication provider), and your role (student, teacher/tutor or administrator).

Google sign-in data. If you choose "Continue with Google", we request your Google email address and basic profile (name and avatar picture) for sign-in only, using Google Identity Services. We do not request or store your Google password, and we do not access your other Google account data.

Tutoring enquiries. Private-tutoring enquiries and WhatsApp verification records store your name, WhatsApp phone number, the grade/subjects you are interested in, and any message you send us.

Learning records. As you use the platform we record your subject enrolments, lesson progress, quiz and assignment results, and tutoring session bookings, so that we (and you) can track your studies.

Payment records. We use a third-party payment provider to process fees. We store the transaction reference, amount, and payment status — never your card or bank details.

Technical data. We collect standard server logs and basic device/browser information needed to run the service securely.

We use your data to: create and secure your account; deliver lessons, quizzes and private-tutoring services; show your progress to you and (for students) to the teachers and administrators supporting you; process fee payments; respond to your questions and support requests; and keep the platform safe. We do not sell your personal data, and we do not use it for advertising.

Our use of information received from Google APIs is limited to authenticating you and identifying your account (email address, name and profile picture). We do not transfer this information to third parties except as needed to provide the service. You may revoke our access at any time from your Google Account security settings (https://myaccount.google.com/permissions).

We share data only with service providers that help us run the platform: our hosting provider, our authentication and database provider (self-hosted Supabase), our email/SMS delivery providers, our payment provider, and our video-streaming provider. Each processes data only on our instructions to deliver the service.

Most of our users are secondary-school students. Parents or guardians who enrol a student under 18 consent to this policy on the student's behalf. We collect only the study-related data described above, and we never publish a student's personal information publicly. If you are a parent or guardian and have questions about your child's data, contact us at geniuspulse22@gmail.com.

We keep account and learning records while your account is active so you can resume your studies. If you ask us to delete your account, we remove your personal data within 30 days, except records we must keep for legal, accounting or safety purposes (for example payment records).

You can ask us at any time to: give you a copy of your data; correct it; or delete your account and personal data. Email geniuspulse22@gmail.com and we will respond within 30 days. If you signed in with Google, you can additionally revoke our access in your Google Account.

Data is stored on servers we control, encrypted in transit, and access is restricted to authorised staff. Passwords are hashed by our authentication provider and are never readable by us.

If we make material changes we will update the date above and, where appropriate, notify you in the platform or by email.