Effective date: 10 June 2026 · Data Controller: Josidel Online Business Ventures, Nigeria
JOTHERA is built for children, so privacy is at the heart of everything we do. This policy explains what we collect, why, and your rights — written to satisfy the Nigeria Data Protection Act 2023 (NDPA), the EU/UK GDPR, the US Children's Online Privacy Protection Act (COPPA), and Canada's PIPEDA.
The data controller is Josidel Online Business Ventures ("we"), Nigeria. Contact: privacy@jothera.com · WhatsApp +234 811 327 3337.
Children never create their own accounts. A parent or guardian (18+) registers, then creates a child profile. By creating a child profile, the parent gives verifiable consent for us to process the child's limited data described below. Parents can view, edit or delete a child's profile and all its data at any time from the app, or by contacting us. Schools enrolling pupils confirm they hold the necessary parental consents.
| Data | From whom | Why |
|---|---|---|
| Name, email, phone, password (hashed) | Parent / school | Account creation, login, support |
| Child first name, age, grade, avatar, curriculum | Parent | Personalised lessons & report cards |
| Learning data: lessons completed, quiz scores, XP, badges, streaks | Child's activity | Progress tracking, report cards, leaderboard |
| AI tutor messages | Child / parent | To generate Jota's answers; safety review |
| Payment confirmation (no card numbers) | Payment processor | Subscription management |
| Device/log data (IP, browser, pages) | Automatic | Security, debugging, performance |
We do NOT collect: child surnames (optional), precise location, photos of children, or any data for advertising. We never sell personal data and show no third-party ads to children.
Contract (providing the Service you signed up for) · Consent (child profiles, marketing emails — withdraw anytime) · Legitimate interests (security, service improvement) · Legal obligation (tax & accounting records).
Data is stored with vetted processors: Supabase (database & authentication), Vercel (website hosting), Render (application server), Anthropic (AI tutor processing), and our payment processors (e.g. Nomba). These providers may store data in the EU/US under appropriate safeguards (e.g. Standard Contractual Clauses). By using JOTHERA you understand your data may be processed outside your country with these protections in place.
Messages sent to Jota are processed to generate replies and are protected by child-safety rules. We do not use children's conversations to train public AI models. Conversations may be reviewed in anonymised form for safety and quality.
Account and learning data: while the account is active and up to 12 months after deletion request completion backups clear. Payment records: 6 years (legal requirement). AI chat logs: up to 12 months. You can request earlier deletion at any time.
You (and parents on behalf of children) may: access a copy of your data · correct it · delete it ("right to be forgotten") · restrict or object to processing · port your data · withdraw consent · complain to a regulator. Regulators include: Nigeria — NDPC (ndpc.gov.ng); UK — ICO; EU — your national DPA; Canada — OPC; USA — FTC. We respond within 30 days (or sooner where local law requires).
We use HTTPS encryption everywhere, hashed passwords, row-level security on the database (each family can only access its own data), and least-privilege access for administrators. No system is 100% secure; if a breach affects you, we will notify you and the relevant regulator within 72 hours where required.
We use only essential cookies/local storage for login sessions and preferences. We do not use advertising or cross-site tracking cookies.
For school partnerships, the school acts as the data controller for its pupils and JOTHERA processes pupil data on the school's instructions under our school agreement. Teachers can only see pupils in their own classes.
We will announce material changes by email or in-app at least 14 days before they take effect. Questions or requests: privacy@jothera.com (data requests) · support@jothera.com (general) · WhatsApp +234 811 327 3337.
© 2026 Josidel Online Business Ventures. All rights reserved.