Privacy Policy

1. Who we are

BGAP is a product of Aidlearn Analytics Limited, a company registered in Nigeria. We operate the analytics training platform at https://bgap.app. When this policy refers to "BGAP", "we", "us" or "our", it means Aidlearn Analytics Limited.

For privacy-related questions, contact us at privacy@bgap.app.

2. What data we collect

Data you provide directly

• Account information: full name, email address, phone number (optional), city, country
• Profile data: current role, industry, company or school name, career goal, experience level, tools of interest
• Challenge submissions: code, queries, spreadsheet work, and analysis you submit for evaluation
• Stakeholder presentation transcripts: the conversation between you and the simulated stakeholder
• Portfolio content: project descriptions, screenshots, bio, and public profile data
• Payment information: handled entirely by Flutterwave. We store only a transaction reference and plan details. We never see or store your card details.
• Organisation or cohort codes: if you join a cohort, we link your account to that organisation

Data we collect automatically

• Usage data: which challenges you attempt, your scores, XP earned, time spent, and retry patterns
• Session data: login timestamps, device type, browser, and operating system
• IP address: used to detect your country for billing currency and business context personalisation
• Cookies: see Section 7 for full details

Data we do not collect

• We do not collect biometric data
• We do not collect data from children under 13. If you believe a child has created an account, contact us immediately at privacy@bgap.app
• We do not access your device's camera, microphone, or location

3. How we use your data

• To operate the platform: authenticate your account, process challenge submissions, calculate XP and scores, and generate AI feedback
• To personalise your experience: tailor challenge business context to your country and industry, recommend challenges based on your skill gaps, and adapt difficulty to your experience level
• To provide AI feedback: your challenge submission and stakeholder transcript are sent to Anthropic's Claude API for evaluation. See Section 5 for how we handle third-party processors.
• To improve the platform: analyse aggregate usage patterns to identify what works and what to build next. We never analyse individual submissions beyond generating your personalised feedback.
• To send transactional emails: welcome emails, payment confirmations, quiz notifications, and login alerts. You cannot opt out of transactional emails while your account is active.
• To process payments: subscription billing via Flutterwave
• To comply with legal obligations: we may retain certain records as required by Nigerian law

4. Legal basis for processing

We process your data on the following legal bases:

• Contract performance: processing necessary to provide the platform you signed up for
• Legitimate interests: improving the platform, preventing fraud, and securing accounts
• Consent: analytics cookies, which you can withdraw at any time
• Legal obligation: financial records and compliance requirements

5. Third-party processors

We use the following third-party services to operate BGAP. Each is bound by a data processing agreement.

When your challenge submission is sent to Anthropic for evaluation, only the technical content of your work is transmitted. Your name, email, and personal identifiers are not included in the AI evaluation request.

6. Data retention

• Active accounts: we retain your data for as long as your account is active
• Deleted accounts: we delete personal data within 30 days of an account deletion request. Aggregate analytics data with all identifiers removed may be retained.
• Payment records: retained for 7 years as required by Nigerian financial regulations
• Challenge submissions: retained to power your Knowledge Map and certificates. Deleted when your account is deleted.
• Session logs: retained for 90 days for security monitoring, then deleted

7. Cookies

BGAP uses cookies and similar technologies. Here is exactly what we use and why:

You can withdraw your consent to analytics cookies at any time by clicking "Cookie settings" in your profile page, or by clearing your browser cookies.

8. Your rights

You have the following rights over your personal data:

• Access: request a copy of the data we hold about you
• Correction: update incorrect data via your profile settings
• Deletion: request deletion of your account and all associated data
• Portability: request your data in a machine-readable format
• Objection: object to processing based on legitimate interests
• Withdraw consent: withdraw analytics cookie consent at any time

To exercise any of these rights, email privacy@bgap.app. We will respond within 14 working days.

9. Data security

We take security seriously. The measures we have in place include:

• All data is encrypted in transit using TLS 1.2 or higher
• Database access is protected by Row Level Security — users can only access their own data
• Authentication tokens use industry-standard JWT with short expiry windows
• Multi-factor authentication is available for all accounts
• Concurrent session limiting — your account can only be active on one device at a time
• Login alerts notify you by email whenever a new sign-in occurs
• API routes are rate-limited and require valid authentication tokens
• Admin actions are logged in an audit trail

Despite these measures, no system is perfectly secure. If you believe your account has been compromised, contact us immediately at privacy@bgap.app.

10. International data transfers

Some of our third-party processors are based outside Nigeria. When your data is transferred internationally, we ensure it is protected by appropriate safeguards including standard contractual clauses and data processing agreements that meet applicable data protection standards.

11. Changes to this policy

We may update this policy as the platform evolves. When we make material changes, we will notify you by email and update the "Last updated" date at the top of this page. Continued use of BGAP after notification constitutes acceptance of the updated policy.

12. Contact

For privacy-related questions, data requests, or concerns, contact us at:

This privacy policy was last updated on 6 July 2026 and applies to all users of https://bgap.app.