Privacy Notice
Who we are
SimuLearn (“we”, “us”), an education initiative of Adsoft Online Ltd., which operates SimuLearn and is the company that contracts with you and controls your data, runs a business simulation for universities, colleges, training programmes and learners, at simulearn.org and app.simulearn.org. We decide how and why your personal data is used, so under the Nigeria Data Protection Act 2023 (NDPA) we are the data controller. Contact us on hello@simulearn.org for anything in this notice.
What we collect
- Account details: your name, your email address or phone number, your role (student or lecturer), and a password. We never store your password itself, only a salted hash of it.
- Course details: the course you join and the matric number you enter.
- What you do in the game: every decision you submit, the time taken, your answers to the numbers checks and gates, your scores, integrity flags that the game raises, and anything you write (a pitch note, a capstone answer, or a request asking your lecturer to review a result). Your lecturer may also record a mark of their own for you, with a reason.
- Payments: the amount, currency, status and reference of a payment. Cards and bank details are handled by our payment provider; we do not see or store them.
- Technical data: your IP address and browser details, kept briefly for security and to limit repeated attempts. We use no advertising or analytics trackers.
- Messages: the verification, password-reset and certificate emails or text messages we send you.
Why we use it, and our legal basis
- To run your account and the course you are in. Basis: performing our agreement with you.
- To grade your work, show your lecturer how you are doing, and issue and verify certificates. Basis: performing our agreement with you, and our legitimate interest in fair, checkable results.
- To keep the service secure and to detect cheating and abuse. Basis: legitimate interests.
- To take payment and keep the records the law requires. Basis: agreement and legal obligation.
- To improve the simulation using results that are combined and not tied to you. Basis: legitimate interests.
- We do not send marketing unless you ask for it, and we never sell your data.
Who can see it
- Your lecturer sees your name, matric number, scores, decisions, integrity flags and written work for the course you joined, and can export them.
- Our administrators can see account and course records when they need to run or support the service.
- Anyone with a certificate code can check that the certificate is genuine. The check does not show your name.
- Service providers who process data for us under contract: our hosting provider, our email provider (SendByte), our payment provider (Fincra) and our text-message provider (Termii), where those services are switched on. Some of them are outside Nigeria. We use providers that protect data to a comparable standard and we share only what each needs.
- Authorities, where the law requires it.
How long we keep it
- Your account and game records are kept while your account is open.
- If you erase your account, your name, email, phone number, password, written answers and review requests are removed and your matric number is blanked. Your game records are kept without your identity so that your course’s results and certificate checks stay valid.
- Payment records are kept as long as tax and accounting law requires.
- Repeated-attempt counters are deleted within two hours. Verification and reset links expire and work only once.
Your rights
You can ask us to: give you a copy of your data; correct it; erase it; restrict or object to how we use it; and move it to another service. Where we rely on your consent, you can withdraw it at any time.
Students can download a copy of their data and erase their account themselves from the Account page in the app. For anything else, or for lecturer accounts, email hello@simulearn.org. We reply within 30 days. If you are not satisfied, you may complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
How we protect it
Connections use HTTPS. Passwords are stored as salted hashes. Results are digitally signed and every game can be replayed from its stored decisions, so tampering shows. Access to personal data is limited to people who need it. No system is perfectly secure; if a breach affects you we will tell you and the Commission as the law requires.
Cookies and storage
We use no tracking cookies. The app keeps your sign-in token and a few settings in your browser’s own storage so you stay signed in. Signing out clears the token.
Age
SimuLearn is for students, corps members and other adult learners aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn that we have, we will delete it.
Changes
If we change this notice in a way that matters to you, we will tell you in the app or by email before it takes effect. The date at the top shows the current version.