Privacy Policy — HandOut (Handout.ng)

1. Who we are

The data controller responsible for your personal information in connection with the Services is the operator of HandOut / Handout.ng. For privacy-related requests, see Contact at the end of this policy.

2. Information we collect

2.1 Account and profile

• Authentication: Email address and/or authentication tokens when you sign in (including Google Sign-In where offered).
• Profile: Display name, photo URL, and similar profile fields you choose to provide.

2.2 Content you provide

• Study materials: Files and content you upload (for example PDFs, documents, images) or generate through the app.
• Audio: Voice recordings you create for transcription, summaries, or notes, where you use those features.
• Scans: Photos or images you capture or select for scanning or export.
• AI assistant: Messages you send to the in-app assistant and responses returned to you.
• Library: Titles, summaries, quizzes, notes, and related data you save to your in-app library, including items synced to your account.

2.3 Technical and usage data

• Device type, operating system, app version, and similar diagnostic information.
• Firebase App Check and related signals used to help protect the Services from abuse.
• Error logs or performance data processed through our hosting and backend tools.

We do not use your content to train public machine-learning models for unrelated third parties. Processing is described under How we use information.

3. How we use information

We use information to:

• Provide, operate, and improve the Services (including summaries, quizzes, lecture notes, scanning, chat, and library sync).
• Authenticate you and maintain your account.
• Store and sync your saved content across devices when you are signed in.
• Protect security, prevent fraud and abuse, and comply with law.
• Communicate with you about the Services where appropriate.

4. Legal bases (where applicable)

Depending on your location, we rely on:

• Performance of a contract — to deliver the Services you request.
• Legitimate interests — to secure and improve the Services, provided those interests are not overridden by your rights.
• Consent — where required (for example certain optional features or marketing, if we offer them).
• Legal obligation — where we must process data to comply with law.

5. Third-party services and processors

We use service providers that process data on our behalf. These may include:

Their use of data is also governed by their respective policies (for example Google’s Privacy Policy and Firebase terms). We configure services to support our features and security needs.

6. International transfers

Your information may be processed in Nigeria and in other countries where our providers operate (including countries outside your own). Where required, we use appropriate safeguards (such as contractual clauses) for international transfers.

7. Retention

We retain information for as long as your account is active and as needed to provide the Services, unless a longer period is required by law. When you delete your account or content where the app provides deletion, we take steps to remove or anonymize it from active systems within a reasonable time, subject to backup and legal retention needs.

8. Security

We use industry-standard measures including encryption in transit (HTTPS/TLS), secure authentication, and access controls implemented through Firebase and our backend. No method of transmission or storage is 100% secure; we work to protect your information appropriately.

9. Your rights

Depending on applicable law (including the Nigeria Data Protection Act (NDPA) and, where relevant, GDPR), you may have the right to:

• Access a copy of your personal data
• Correct inaccurate data
• Request deletion of your personal data
• Object to or restrict certain processing
• Data portability
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us using Contact below. We may need to verify your identity before responding.

10. Children’s privacy

The Services are intended for students and educators. They are not directed at children under 13 (or the minimum age required in your country) without appropriate consent. If you believe we have collected information from a child without proper authority, contact us and we will take appropriate steps.

11. Marketing and sale of data

We do not sell your personal information as a commodity. We do not share your content with advertisers for targeted advertising. We may use aggregated, de-identified statistics to understand product usage or for institutional pilots only where permitted and without identifying you individually.

12. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version with a new Last updated date. For material changes, we may provide additional notice (for example in-app or by email). Continued use of the Services after the effective date constitutes acceptance of the updated policy where permitted by law.

13. Contact

For privacy questions, data protection requests, or complaints:

Email: hello@batalearner.edu.ng

Governing law: Where not prohibited by applicable law, matters relating to this policy may be governed by the laws of the Federal Republic of Nigeria, with dispute resolution as described in our Terms of Use (if any), or as required by your local law.