Privacy & Cookies
This policy explains what personal data Crea8it Studio ("Crea8it", "we") handles, why, and what your rights are. It covers our website (crea8it.com) and the Crea8it Lab (the learning app at crea8it.streamlit.app). We are based in Nigeria and aim to follow the Nigeria Data Protection Act 2023.
1. What we collect
On the website: we don't ask you to create an account or fill a form. If you email or message us on WhatsApp, we receive what you send. Our hosting provider (GitHub Pages) may log technical data such as IP address.
In the Lab:
- Account details: full name, email address, WhatsApp number, and a password (stored in hashed form by our authentication provider).
- Program details: the organisation code you joined with, and any payment code you enter.
- Learning activity: progress, reflections, task submissions and files you upload, and when you were last active.
2. Why we use it
- To create your account and run the program you joined.
- To let your cohort admin support you, review your work and reach you.
- To issue certificates, keep the Lab secure, and answer your messages.
We rely on your consent and on the need to provide the service you signed up for.
3. Who can see your data
Your cohort admin (the organisation running your program) can see your name, email, WhatsApp number, progress, reflections and submissions. Organisations agree to use this only to run their cohort (see the Organisation Terms). Crea8it administrators can also access Lab data to operate and secure the service. We do not sell your data.
4. Service providers and transfers abroad
We use Supabase (database, authentication and file storage), Streamlit Community Cloud (app hosting), GitHub Pages (website hosting) and Google Fonts (fonts). These providers may store or process data outside Nigeria. By using the Lab you understand your data may be transferred to them.
5. Cookies
Our website sets no cookies of its own and uses no analytics or advertising trackers. Your browser does request fonts from Google when a page loads. The Lab uses only essential session storage or cookies needed to keep you logged in. If we add analytics later, we will update this section and ask for your consent first.
6. How long we keep data
We keep Lab data while your account or your organisation is active. If you ask us to delete your account, we do so within 30 days, except where we must keep something by law. When an organisation ends its agreement with us, it has 30 days to export its data before we delete it.
7. Your rights
You may ask to access, correct or delete your personal data, to restrict or object to its use, to receive a copy, and to withdraw consent at any time. Email [email protected] and we will respond within 30 days. You may also complain to the Nigeria Data Protection Commission (NDPC).
8. Security
We use access controls and a private file store for uploads. No online service is completely secure, so please use a strong, unique password.
9. Age
The Lab is for people aged 18 and over. If you believe a child has given us their data, contact us and we will delete it.
10. Changes and contact
We may update this policy and will change the date above when we do. Questions: [email protected].