CLEVA Privacy Policy
Last updated: 11 October 2026
CLEVA helps Nigerian children learn with an AI tutor and past exam questions. This policy explains what information we collect, why, who we share it with, and the choices you have. It is written for parents and guardians, who own every CLEVA account.
1. Who we are
CLEVA is operated by Eniola Okikioluwa, based in Nigeria. We are the data controller for the information described here.
Contact us at support@clevastudy.app about anything in this policy.
2. Who uses CLEVA
Only a parent or guardian aged 18 or over can create a CLEVA account. You add your children as profiles inside your account, and they use CLEVA under your supervision. Children cannot create their own accounts. By adding a child, you confirm that you are their parent or legal guardian and that you consent to us processing their information as this policy describes.
3. Information we collect
About you (the parent)
- Your email address and sign-in details. Passwords are handled by our sign-in provider; we never see them.
- Your name, if you add it in Settings.
- Your subscription plan and status. Payments go through Google Play or the App Store; we never see your card details.
- Your parent PIN, stored only as a one-way scrambled code that cannot be turned back into the PIN.
- Messages you send us, such as support emails.
About your child
- First name, class (for example JSS 1), curriculum and chosen subjects.
- For Religious Studies, whether they follow the Christian (CRS) or Islamic (IRS) syllabus.
- The school they are linked to, and any class name or student number you enter, if you join a school with an invite code.
- What they type to the CLEVA tutor and the tutor's replies.
- Practice and exam activity: questions answered, answers chosen, scores and time spent.
- Learning insights we work out from their activity, such as topics they are struggling with.
- Safety records: if a message raises a safety concern (see section 6), the message and the alert sent to you.
About your device
- A notification token so we can send alerts to your phone, plus the phone's platform and the app version.
What we do not collect
We do not collect location, contacts, photos, camera or microphone input, or advertising IDs. CLEVA shows no ads and does not track you or your child across other apps or websites.
4. How we use information
- To run CLEVA: tutoring, practice papers, progress and your child's learning plan.
- To tell you how your child is doing, including alerts when they are struggling with a topic.
- To keep children safe, through the safety checks in section 6.
- To manage your subscription and answer support requests.
- To keep CLEVA secure and fix problems.
We use your child's information only to provide CLEVA to your family. We never sell it, never use it for advertising, and never build marketing profiles of children.
5. How the AI tutor handles messages
When your child asks the tutor a question, we send their message to an AI model to write the answer. We send only what the tutor needs: the message, the conversation so far, your child's first name, class, curriculum and subject, and the difficulty level you chose. We never send surnames, email addresses, school names or account IDs.
Messages are sent to specialist AI companies that run the model for us. We have set up our service so that the AI companies we use are listed as keeping no copy of messages after answering. We also use AI to check messages for safety concerns and to find topics your child finds hard.
You are asked to agree to this before your child uses the tutor, and you can turn it off at any time in Settings (behind your parent PIN). With AI turned off, practice papers and progress still work.
AI can make mistakes. Treat the tutor as a study helper, not a final authority.
6. Safety checks and alerts to parents
CLEVA checks what children type for serious safety concerns, such as self-harm, abuse, sexual content, violence, drugs and bullying. When a message raises a concern:
- your child sees a short, kind reply instead of a normal tutor answer;
- you receive an alert in the app and by email. The email and phone notification never include what your child wrote; the details are inside the app, behind your parent PIN;
- the alert cannot be deleted from the app, so it is always there for you to review.
Children are told in the app that CLEVA lets their parent know if they write about something unsafe. Safety alerts go only to the parent on the account. We do not send them to schools or anyone else, unless the law requires us to.
Automated checks are not perfect. They can miss things or flag harmless messages. They do not replace your own care and attention.
7. Who we share information with
We share information only with trusted service providers that help us run CLEVA. Each receives only what it needs for its job and may not use it for anything else:
- A secure cloud database and server host, which stores CLEVA's data in the European Union (Frankfurt, Germany).
- A sign-in service, which handles your email and sign-in details.
- AI companies that power the tutor, which receive messages and the minimal context in section 5.
- An email delivery service, which sends our emails to you.
- A notification delivery service, and Google and Apple notification services, which deliver alerts to your phone.
- Google Play, the Apple App Store and a subscription management service, which handle purchases and subscription status.
- A website host, which serves clevastudy.app.
We do not use any analytics, crash-reporting or advertising services.
Schools. If you join a school with an invite code, we tell the school which children joined, with their first name and class. Schools cannot see anything else: a school has no access to CLEVA's systems, and we do not send it your child's messages, activity, scores, learning insights or safety alerts. When you join, we may also set your child's curriculum to the school's.
We may also disclose information if the law requires it, or to protect a child's safety. We will never sell personal information.
8. Where information is stored
Some of our providers store or process information outside Nigeria. When this happens we use providers with strong security and contractual protections, as the Nigeria Data Protection Act 2023 requires.
9. How long we keep information
| Information | How long |
|---|---|
| Account and child learning data | Until you delete the child or your account |
| Ordinary notifications | 90 days |
| Safety alerts | 12 months, then deleted automatically |
| Data export files | Deleted 8 days after they are created |
| Purchase record with our subscription management service | Until you delete your account, then deleted within 30 days |
| Backups | Our database host keeps no backups on our current plan. Copies we make before database changes are deleted within 30 days |
When you delete a child or your account in the app, we delete their data from our systems straight away. Some copies are deleted later: a copy of your data you asked for in the last 8 days (its download links stop working after 7 days and the files are deleted after 8 days), your purchase record with our subscription management service when you delete your account (within 30 days), and copies we make before database changes (within 30 days).
10. Your rights
Under the Nigeria Data Protection Act 2023 you can:
- get a copy of your family's data (Settings, then Export my data);
- correct information that is wrong;
- delete a child or your whole account in the app, or by emailing us from your account email;
- withdraw consent for AI features at any time in Settings;
- object to how we use your information, or ask us to limit it.
Email support@clevastudy.app for anything you can't do in the app. We reply within 7 days. If you are unhappy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).
11. Security
We protect information with encryption in transit, strict access controls on our database, a parent PIN for sensitive screens, and regular security checks. No system is perfectly secure. If a breach affects your information, we will tell you and the NDPC as the law requires.
12. Changes to this policy
If we change how we use your family's information, we will update this page and tell you in the app or by email before the change takes effect. Where the change affects AI processing, we will ask for your agreement again.