1. Introduction
This Privacy Policy explains how Stutsmart, owned and operated by Joseph Adu-Parkoh ("we", "us", "our"), collects, uses, stores, and protects information when you use the Stutsmart platform ("the Service") at stutsmart.app and related applications.
By using Stutsmart, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use the Service.
This policy applies to all users of Stutsmart across Ghana and other African countries. We are committed to protecting your privacy and handling your data responsibly.
2. Information We Collect
2.1 Information You Provide Directly
- Account information: Your full name, email address, password, role (teacher or student), and school or institution name when you register.
- Profile information: Class details, subject specialisations, education level, region, and teaching preferences you provide to personalise your experience.
- Content you create: Lesson plans, questions, study notes, and other content generated through the Service.
- Student work uploads: Screenshots or images of student work that teachers upload for post-lesson analysis. See Section 6 for our specific commitments regarding this data.
- Payment information: When purchasing credits, payment is processed by our payment partners (Paystack, Hubtel). We do not store your card or mobile money details. We only receive confirmation of successful transactions.
- Communications: Messages you send to our support team.
2.2 Information Collected Automatically
- Usage data: Pages visited, features used, time spent on the platform, and actions taken within the Service.
- Device information: Device type, operating system, browser type, and screen size.
- Log data: IP address, access times, and error logs for security and debugging purposes.
- AI interaction data: Prompts and responses from your use of AI features, used to improve service quality and detect misuse.
3. How We Use Your Information
We use the information we collect to:
- Create and manage your account and authenticate your identity
- Personalise AI-generated content — lesson plans, study sessions, question banks — to your classroom and learning profile
- Process credit purchases and maintain your credit balance
- Provide customer support and respond to your enquiries
- Send service-related notifications (account updates, credit alerts, new feature announcements)
- Monitor and improve the performance, security, and quality of the Service
- Comply with legal obligations
- Detect and prevent fraud, abuse, and violations of our Terms of Service
We do not use your personal data for advertising purposes. We do not sell your data to third parties.
4. AI Processing of Your Data
Stutsmart uses Google Gemini AI models to generate lesson plans, study sessions, question banks, and analysis. When you use AI features, relevant content — including curriculum selections, teaching preferences, and teacher notes — is sent to Google's AI systems for processing.
Google processes this data in accordance with their enterprise data use policies. We have configured our AI integration to minimise the personal data sent to AI systems. We do not send your name, email address, or payment information to AI models.
AI-generated content is stored in our database linked to your account so you can access it later. You may delete any generated content from your account at any time.
5. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information. We share data only in these limited circumstances:
- Service providers: We share data with trusted third-party services that help us operate Stutsmart — including Supabase (database and authentication), Google (AI processing), Paystack and Hubtel (payment processing), and our hosting provider. These providers are contractually bound to protect your data.
- Legal requirements: We may disclose information if required by Ghanaian law, court order, or other legal process.
- Safety: We may share information where necessary to protect the safety of our users or the public.
- Business transfer: If Stutsmart is acquired or merged with another entity, your data may be transferred as part of that transaction. You will be notified before this occurs.
6. Student Data and Minor Protections
Stutsmart takes the protection of student data seriously. We recognise that teachers may upload screenshots of student work — including work produced by learners under 18 years of age — for post-lesson analysis.
Our commitments regarding student work uploads:
- Student work screenshots are used only for the purpose of generating AI remedial recommendations for the uploading teacher
- We do not store student names or identifying information from uploaded screenshots beyond what is visible in the image itself
- Screenshots are processed by Google's AI Vision system to identify patterns in student responses. They are not used to train AI models.
- Teachers are responsible for obtaining appropriate consent from their school and students' guardians before uploading student work to the platform, in accordance with their school's data protection policies
- Uploaded screenshots may be deleted by the teacher at any time from their account
Stutsmart does not knowingly collect personal information directly from children under 13. Student accounts may be used by learners of any age, but account registration requires a valid email address and is the responsibility of the student or their guardian.
7. Data Storage and Security
Your data is stored on Supabase's secure cloud infrastructure with servers located in the European Union (Ireland region), chosen for proximity to West Africa and strong data protection standards.
We implement these security measures to protect your data:
- All data transmitted between your device and our servers is encrypted using TLS (HTTPS)
- Passwords are hashed and never stored in plain text
- Row-level security ensures users can only access their own data
- Authentication is handled by Supabase Auth with JWT tokens
- Payment processing is handled entirely by Paystack and Hubtel — we never handle raw payment credentials
While we implement strong security measures, no system is completely secure. We encourage you to use a strong password and to keep your login credentials private.
8. Data Retention
We retain your data for as long as your account is active. If you delete your account:
- Your profile, lesson plans, question banks, and generated content are permanently deleted within 30 days
- Credit transaction records are retained for 7 years for financial compliance purposes
- Anonymised, aggregated usage statistics (with no personal identifiers) may be retained indefinitely for service improvement
9. Your Rights
You have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your account and associated data
- Portability: Request an export of your data in a machine-readable format
- Objection: Object to specific uses of your data
- Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time
To exercise any of these rights, contact us at privacy@stutsmart.app. We will respond within 30 days.
10. Cookies and Local Storage
Stutsmart uses essential cookies and browser local storage to:
- Maintain your login session
- Remember your preferences and settings
- Ensure the platform functions correctly
We do not use advertising cookies or third-party tracking cookies. You may clear cookies through your browser settings, but doing so will log you out of the Service.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make significant changes, we will notify you by email and display a notice within the platform at least 14 days before the changes take effect.
Your continued use of Stutsmart after the effective date of any changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or how we handle your data, please contact: