Privacy policy

1. Who we are

KnowYour CGPA (“we”, “us”) is an online GPA and CGPA calculator and academic tracker run by Blessing Emejulu in Nigeria. We are the data controller for the personal data described here. Contact us about privacy at support@kycgpa.com.

2. What we collect

Account details

• Your name and email address.
• A securely hashed password if you sign up with email (we never store the password itself).
• If you sign in with Google: your Google account ID, name, email and profile picture.
• When you agreed to these policies and the terms of service, and which version, so we can show you agreed.

Academic details

• Your registration (matriculation) number and admission year, if you enter them.
• Your courses, credit units and grades, and the GPAs and CGPA worked out from them.
• The school and department you type into the general calculator, and your grading scale.
• For the AI advisor: your course of study, current level, programme length, interests, nationality and target class.

Payments

• Payment reference, amount, status and date, with your name and email. Bank transfers are handled by our payment partner, Korapay; we don’t receive or store your bank login or card details.

Messages and technical data

• What you send us through the contact form.
• Basic server logs (IP address, browser type, pages requested, time) kept to keep the service secure and working.
• A record of each AI advisor request (date, which feature, size and estimated cost), used to manage usage limits and costs.

Advertising data (collected by Google)

• When ads are shown, Google AdSense collects information from your browser, such as cookie and device identifiers, your IP address, browser type, the page you’re viewing and how you interact with ads. Google collects this directly; we don’t receive it and we never pass your name, email, results or other account details to advertisers.

3. Why we use it, and our lawful basis

We don’t make decisions about you that have legal or similarly significant effects by automated means.

4. The AI academic advisor

If you use the advisor (Premium), we send our AI provider only what it needs: your grades, course codes and titles, the figures our own code has calculated, your level, course of study, interests, nationality and target. We never send your name, email, registration number or school. Our current AI provider is Google (Gemini API); we may switch to another reputable provider such as Anthropic, OpenAI, NVIDIA or Groq, under the same rules. To find current opportunities, we may search the web through Tavily, sending only a search phrase made from your course of study and level (for example “Computer Science scholarships for Nigerian students”), never anything that identifies you. AI-written plans and opportunity suggestions are saved to your account so you don’t have to generate them again.

You can stop using the advisor at any time and ask us to delete saved plans.

5. Advertising

To keep KnowYour CGPA free, we show ads served by Google AdSense. Google and its partners use cookies and similar technology to show ads, limit how often you see the same ad, measure results and prevent fraud.

• If you tap “Accept” on our cookie notice, Google may show personalised ads based on your visits to this and other websites.
• If you choose “Essential only”, we ask Google to show only non-personalised ads, based on the page you’re viewing and your general location (such as your country). Google may still use cookies to limit how often you see an ad, for reporting and to prevent fraud.
• We don’t use your results, grades or AI advisor data to choose ads.
• Ads are not aimed at children.

Learn how Google uses information from sites that show its ads at policies.google.com/technologies/partner-sites. You can turn off personalised ads from Google at My Ad Center, and change your choice on this site in our cookie policy.

6. Who we share it with

We share personal data only with providers who help us run KnowYour CGPA, under terms that require them to protect it:

• Korapay: processes bank-transfer payments.
• Google: sign-in with Google (if you choose it), the Gemini AI service (advisor only) and Google AdSense, which shows ads and collects the advertising data described above directly from your browser.
• Our AI provider (advisor only, if not Google): Anthropic, OpenAI, NVIDIA or Groq, receiving only the advisor data described in section 4.
• Tavily: web search for opportunities (advisor only), receiving only search phrases made from your course of study and level.
• Our hosting provider: stores the database and runs our servers.

We may also disclose data if the law requires it, or to protect the rights and safety of our users or the public. We never sell personal data.

7. Transfers outside Nigeria

Some providers above process data outside Nigeria (for example in the European Union or the United States). Where that happens we rely on the safeguards the NDPA allows, such as the provider’s contractual commitments and adequate data protection laws in the destination country, and we send only the minimum data needed.

8. How long we keep it

• Account and results: while your account is open. When you delete your account from Account in the app, they’re deleted straight away; if you ask us instead, we delete them within 30 days.
• Payment records: 6 years, as Nigerian tax and accounting law requires, even if you delete your account. They keep your name and email but are no longer linked to an account.
• AI advisor records and contact messages: up to 12 months, or until you delete your account.
• Server logs: up to 90 days.
• Backups are overwritten on a rolling basis, so deleted data disappears from them within 30 days.

9. Your rights

Under the NDPA you can:

• ask for a copy of your personal data;
• ask us to correct anything that’s wrong;
• ask us to delete your data;
• withdraw consent (for example, to the AI advisor) at any time;
• object to or ask us to restrict certain uses;
• ask for your data in a portable format.

When signed in, you can download a copy of your data or delete your account yourself from Account in the app. For anything else, email support@kycgpa.com or use the contact form from the email on your account. We reply within 30 days. If you’re not happy with our answer, you can complain to the Nigeria Data Protection Commission (NDPC).

10. Security

We use encrypted connections (HTTPS), hash passwords, keep sessions in secure cookies that page scripts can’t read, limit staff access, rate-limit sign-in and payment endpoints and take regular backups. No system is perfectly secure; if a breach affects you, we’ll tell you and the NDPC as the law requires.

11. Children

KnowYour CGPA is for university and polytechnic students. You must be at least 16 to use it. If you’re under 18, please use it with your parent or guardian’s permission. Ads on the site are not aimed at children. If you believe a child has given us data, contact us and we’ll delete it.

12. Cookies and device storage

We use essential cookies and device storage to run the service, and Google uses advertising cookies to show ads. See our cookie policy for the full list and how to change your choice.

13. Changes

We’ll update this page when our practices change and change the date at the top. If a change materially affects how we use your data, we’ll tell you in the app or by email first.