Privacy policy

No ads. No tracking. No selling your data. Without an account, nothing about you leaves your browser.

Last updated 25 October 2026.

In short. Without an account, your progress and theme choice are saved only in your own browser. With an account, we keep your name, email, password (scrambled, never readable) and which lessons you finished, so your progress follows you. That's all. You can see, download or delete it at any time.

1. Who is responsible

Amaete Build (build.amaete.com) is the data controller. Contact us about privacy at the contact address on this page (coming before launch).

This policy follows the Nigeria Data Protection Act 2023 (NDPA) and, for people in the European Economic Area and the United Kingdom, the General Data Protection Regulation (GDPR and UK GDPR).

2. What we collect, and why

What	Why	Legal basis	Kept for
Progress and theme, in your browser's storage (no account)	So the site remembers what you finished and how you like it	Needed for the service you asked for	Until you clear your browser
Name, email, scrambled password (account)	To let you sign in and put your name on certificates	Contract: providing your account	Until you delete your account
Lessons finished and certificates (account)	To keep your progress on every device, and let others check your certificates	Contract	Until you delete your account
Server logs (IP address, time, page)	To keep the site secure and working	Legitimate interest in security	Up to 30 days

We don't use advertising, analytics trackers or tracking cookies, and we don't sell or rent personal data. Our storage is limited to what the site needs to work, so we don't show a cookie banner.

3. Who else is involved

Hosting. The site and the account server run on servers we rent from cloud hosting providers. They process data only on our instructions.
Google Fonts. The page fonts load from Google's servers, which see your IP address when they send the fonts. We plan to host the fonts ourselves.
Email. If you reset a password, an email provider sends the message for us.

Some of these providers may store data outside Nigeria or your country. When that happens we rely on the safeguards the NDPA and GDPR require, such as adequacy decisions or standard contractual clauses.

4. Children

Anyone can use the lessons without an account. Accounts are for people 13 and older. If you are under the age of digital consent where you live, a parent or guardian must agree first. If we learn that a child under 13 made an account, we delete it.

5. Your rights

Under the NDPA and the GDPR you can ask us to:

show you the personal data we hold about you, and give you a copy you can take elsewhere;
correct anything wrong;
delete your account and everything linked to it;
stop or limit some processing, or object to it;
withdraw any consent you gave, at any time.

Write to the contact address on this page (coming before launch). We reply within one month, and it's free. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng), or, in the EU or UK, to your local data protection authority (in the UK, the ICO).

6. Keeping data safe

Connections are encrypted (HTTPS). Passwords are stored only as a one-way hash. Access to the server is limited to the people who run it. If a breach ever puts your data at risk, we will tell you and the regulator as the law requires.

7. Changes

If we change this policy in a way that matters, we'll say so on the site and, if you have an account, by email.