My Genius
← Back to home
Privacy Policy
My Genius (“My Genius”, “we”, “us”) is a student-focused learning community operated by OYEN INDUSTRIES. This policy explains what personal information we collect across mygenius.ng, app.mygenius.ng, our Android app, and the My Genius assistant on WhatsApp (together, the “Services”), why we collect it, who we share it with, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA). We keep our data use to the minimum needed to run the Services.
1. Information we collect
You can browse mygenius.ng and even take a quiz on app.mygenius.ng without an account. We only collect the categories below when they apply to how you use the Services.
| Category | What it includes | When we collect it |
|---|---|---|
| Account & profile | Your Google account’s name, email address, and profile picture, plus a Google account identifier. | When you sign in with Google. |
| Academic profile | The university and department you select. | During onboarding, and when you update your profile. |
| Learning activity | Quizzes you start and complete, your answers, scores, generated study summaries, and progress metrics. | When you use the quiz features (some works anonymously). |
| Contributions | Study material (notes/files) you upload. | When you upload notes. |
| Donations | Amount, status, and a payment reference for voluntary donations. Payments are processed by our payment partner; we never receive or store your card or full bank details. | When you make a donation. |
| Subscription payments | Amount, status, a payment reference, the temporary transfer account we generated for that payment, the name and account number the transfer came from as reported to us by the payment provider, and the period the payment covers. We never receive or store your card details, and there is no stored payment instrument. | When you pay for the reading plan and unlimited quizzes. |
| Reading plan | The courses you are reading, the days and times you chose, the order of your topics, and how far through each course you are. | When you set up or change a reading plan. |
| Your WhatsApp phone number, the display name on your WhatsApp profile, and the content of messages between you and the assistant in both directions, plus a short running summary of the conversation. See The WhatsApp assistant. | When you message the assistant, or link your number to your account. | |
| Notifications | A device notification token for each installation of the app, the platform, and the app version, so a reminder can reach that device. The token identifies the installation, not you. | When you allow notifications in the app. |
| Technical & security | IP address, browser/device information, and activity timestamps used to keep accounts secure and prevent abuse. | Automatically, when you interact with the Services. |
| Usage analytics | Two kinds, and they are not the same. Page-timing signals carry a random visitor identifier, device type, and how long a page was visible, with no link to your account. Product events record that something happened, such as a quiz being started or finished, and these are linked to your account. Both are stored with the IP address of the request. See Analytics. | Automatically (page timing), and when you use a feature (product events). |
2. How we use your information
- Provide and operate the Services — sign-in, quizzes, study summaries, progress tracking, notes, and leaderboards.
- Run the reading plan and the accountability reminders you asked for, which reach you in the app, by email, and on WhatsApp.
- Take and confirm payment for the paid features, and tell you before a paid month runs out.
- Personalise content, such as scoping course search to your university.
- Send essential emails you would expect: a welcome message, receipts for donations and payments, renewal reminders, and notices when your submitted notes are approved.
- Keep the Services safe: detect, investigate, and prevent fraud, abuse, and security incidents.
- Understand and improve the Services through aggregate, anonymous analytics.
- Comply with legal obligations and enforce our Terms of Use.
We do not sell your personal information, and we do not use it for third-party advertising.
3. Legal bases (NDPA)
Under the Nigeria Data Protection Act 2023, we rely on:
- Consent — for example, when you choose to sign in with Google or upload notes. You may withdraw consent at any time.
- Performance of a contract — to deliver the features you ask for once you have an account.
- Legitimate interests — to secure the Services, prevent abuse, and improve them using anonymous analytics, balanced against your rights.
- Legal obligation — where we must retain or disclose information to comply with the law.
4. Cookies and similar technologies
We use only a small number of strictly necessary cookies, and no third-party advertising or tracking cookies:
- Essential session cookies — keep you signed in across
*.mygenius.ngonce you log in. - Security cookies — help protect your account and requests from misuse.
- Google Sign-In may set its own cookies to manage the sign-in prompt, governed by Google’s privacy policy.
- Local storage — we store a random, non-identifying analytics id and small preferences (such as your selected university) in your browser.
- Device storage in the app — the Android app keeps your sign-in token, the last screen you were on, and small flags (such as whether the welcome video has already played on that device) on the device itself. Signing out clears everything that belongs to you.
5. Analytics
We keep two kinds of usage record. They are different, so we describe them separately rather than calling both of them anonymous.
Page-timing signals. To understand how many people visit and how long they stay, each page sends a short “time on site” signal: a random visitor id generated in your browser, the type of device (for example mobile or desktop, derived from your browser’s user-agent), and the number of seconds the page was visible. These carry no name, email, or account link, and we use them only in aggregate. The visitor id lives in your browser’s local storage and you can clear it at any time by clearing site data.
Product events. When you use a feature we also record that it happened: that a quiz was started or finished, that a summary was generated, that a question was reported. Where you are signed in, these events are linked to your account, because that is what lets us see whether a feature works for real students rather than only in aggregate.
Both kinds are stored with the IP address of the request, which we use to investigate abuse. An IP address is personal information, so we name it here rather than describing any of this as anonymous.
6. The WhatsApp assistant
My Genius has an assistant on WhatsApp. It is how the reading plan actually reaches you: it tells you when your reading time starts, sends the quiz for that day, and answers questions about your courses and your account. It is a task-specific assistant for My Genius, not a general-purpose chatbot.
You start the conversation. We do not message a number that has not written to us first, except for the reminders you set up yourself.
What this means for your information:
- We hold your WhatsApp number and the display name on your WhatsApp profile, because that is what a message is addressed to.
- We store the conversation, both your messages and the assistant’s replies, along with a short running summary of it. We need the history so the assistant can follow what you were talking about, and so we can see what went wrong when it answers badly.
- Your messages are sent to our AI provider to work out a reply. See Who we share information with.
- Linking is separate from messaging. Your number is only connected to your My Genius account when you complete the linking step. Until then the conversation is not attached to an account, and the assistant cannot see your scores or your plan.
- WhatsApp itself is Meta’s service, and your use of it is governed by Meta’s own terms and privacy policy. We cannot see or control what Meta does with your WhatsApp account.
You can unlink your number, or ask us to delete the conversation, at any time: see Your rights. Telling the assistant to stop also works.
8. Information others can see
Some features are social by design. If you sign in and appear on a leaderboard or a public profile, your display name, profile picture, university, and achievement statistics (such as quiz scores, contributions, or donation recognition) may be visible to other users. You can avoid appearing by not participating in the ranked features.
9. Data retention
We keep your personal information while your account is active and for as long as needed to provide the Services. Aggregate statistics that no longer identify you may be kept indefinitely.
When you ask us to delete your account we remove or anonymise your personal information. Three things deliberately survive, and we would rather name them than let you find out later:
- Donation and subscription payment records, which we keep for accounting and tax purposes. The payment is kept; the link to your account is broken.
- A record of the deletion request itself, including the email address it was made from, so we can show that we acted on it.
- Questions and study material already added to the shared library, which other students are using and which are not personal information about you.
WhatsApp conversations are kept while your number is linked, and are removed when you ask us to delete your data or unlink the number. Single-use quiz links from the assistant are cleared automatically a fortnight after they are spent.
10. Your rights
Subject to the NDPA, you may:
- Access the personal information we hold about you.
- Correct information that is inaccurate or incomplete.
- Request deletion of your account and personal information, in whole or in part.
- Object to or restrict certain processing, and withdraw consent at any time.
- Request a copy of your information in a portable format.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
To delete your account, or just parts of your information, use Delete your account or data. You can also do it inside the app, from your profile. For anything else on this list, email [email protected]. We will respond within the timeframe required by law and may need to verify your identity first.
11. Security
We take the security of your information seriously and apply appropriate technical and organisational measures — including encryption in transit (HTTPS), secure session handling, access controls, and monitoring for abuse — to protect it. No online service can be completely secure, but we work to safeguard your data and to respond promptly if an issue arises.
12. Age & children
The Services are intended for tertiary (university and college) students and other users aged 18 and above. They are not directed at children under 13, and we do not knowingly collect their personal information.
Under the NDPA, a person under 18 is a child, and their personal information may only be processed with the consent of a parent or guardian. If you are under 18, please use the Services only with that consent. We do not ask for your date of birth, so we cannot verify age ourselves; if you tell us, or we otherwise learn, that an account belongs to a child without that consent, we will delete it. If you believe a child has provided us personal information, contact us and we will delete it.
13. International transfers
Some of our service providers (such as Google, Groq, and Cloudinary) process data on servers outside Nigeria. Where personal information is transferred abroad, we rely on the safeguards permitted under the NDPA and take reasonable steps to ensure it remains protected.
14. Changes to this policy
We may update this policy as the Services evolve or the law changes. When we make material changes, we will revise the “Last updated” date above and, where appropriate, notify you. Continuing to use the Services after an update means you accept the revised policy.
15. Contact us
Questions, requests, or complaints about privacy? Reach the team at [email protected]. My Genius is a product of OYEN INDUSTRIES.