Legal
Privacy Policy
What we collect, why, who else receives it, how long we keep it, and how to get a copy or have it deleted.
Last updated 8 November 2026.
1. Who is responsible
Samuel Ochaba, who runs Keel Academy as an individual, decides what happens to your data: B13 Afaka Road, Kurmin Gwari, Kakuri, Kaduna, Kaduna State 800282, Nigeria. Write to support@keelacademy.com about anything on this page.
2. What we collect
Your account: your email address, the name you give us, whether you have confirmed the address, and your password, which we store only as a scrambled hash that cannot be turned back into the password. If you sign in with Google or GitHub, that company tells us your email address, your name, your account number there and whether it has confirmed the address. We keep them with your account and use them only to sign you in; we never see your password there.
Your work: the files you upload and their check results, your practice answers and code, and the questions you ask the tutor with its replies.
Your payment: Paddle tells us the transaction and customer IDs, the price, the amount and whether it was refunded. Your card details go to Paddle, never to us.
Sign-in safety: the internet address (IP) and account of each sign-in, sign-up and email request, so we can stop password guessing and spam.
How you use the lessons: when you are signed in, the units you open, how long you spend reading them while the page is open and you are active, how far down each page you get, and which folded answers you open. We use it only to find where lessons are unclear or too long, and to fix them. This record stays on our server, no analytics company receives it, and it needs no extra cookie. Our server keeps no such record when you are not signed in.
Visits to the site, if you accept analytics cookies: Google Analytics records the pages you open and what you do on them (such as scrolling and clicking links), how you reached the site (for example a search or a link), your approximate location (country and city, which Google works out from your internet address), your device, browser and language, and when you visit. It tells visits apart with cookies named _ga and _ga_ followed by an ID, which last up to 2 years. We use it only to count visitors and to see which pages help people, with Google’s advertising features turned off. If you decline, Google Analytics does not load and none of this is recorded. You can change your answer at any time with Cookie choices at the bottom of every page.
Cookies: keel_session keeps you signed in for up to 7 days. The Google Analytics cookies above are set only if you accept them. Your answer to the cookie notice is saved in your browser, so the notice does not ask on every page. We use no advertising cookies.
3. Why we use it
To run the course you signed up or paid for: your account, your access, grading your work, the tutor, and the emails that confirm your address, reset your password or tell you a result is ready, and to improve the lessons, from how students use them. The sign-in records are there to keep accounts safe. Google Analytics, which runs only if you accept it, shows us how many people visit and which pages help them. We do not sell your data, and we do not use it for advertising.
4. Who else receives it
These companies handle your data for us, only to provide the parts of the course listed here. Some are outside Nigeria, so your data is stored and processed in other countries, mainly Sweden and the United States.
| Company | What it receives | Why |
|---|---|---|
| OpenAI | your tutor questions, and the answers and code that are graded, with the lesson text; not your name or email | the tutor and grading |
| E2B | the program you submit for assessment and the test inputs it runs on; not your name or email | running automated checks in a separate sandbox |
| Paddle | your name, email, billing details and payment | taking payment, tax, receipts and refunds, as Merchant of Record |
| Resend | your email address and the email we send you | confirmation, password-reset and result emails |
| only if you accept analytics cookies: the pages you visit, how you reached the site, your device, browser and approximate location; not your name or email | counting visits and seeing which pages help people (Google Analytics) | |
| Amazon Web Services (Sweden) | everything above, on the server that runs the course | hosting |
Paddle is a seller in its own right for your payment, so its own privacy notice also applies to what it holds. Google explains what it does with data from sites that use Google Analytics in How Google uses information from sites or apps that use our services.
5. How long we keep it
- Your account and your work: until you ask us to delete them.
- The record of each request to the model (the text sent and the reply): 30 days.
- How you use the lessons: 12 months, then only totals for each unit, with nothing that identifies you.
- Google Analytics records: Google deletes the detailed records after 14 months; the totals in its reports stay.
- Sign-in safety records: about an hour.
- Payment records: as long as the law requires us to keep accounting records, even after you delete your account.
- Backups: we keep no separate backup copies yet, so losing the server could lose your account and work. Paddle keeps its own records of your payment.
6. Your rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete your account and your work. Email support@keelacademy.com from your account’s address, so we know it is you. We answer within 30 days. You can withdraw your consent to analytics cookies at any time with Cookie choices at the bottom of every page.
If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission, or to the data protection authority where you live.
7. How we protect it
The site only works over an encrypted connection. Passwords and sign-in sessions are stored only as hashes, and only we can reach the server.
8. Changes to this policy
When this page changes, the date at the top changes with it. If a change affects what we do with data you have already given us, we email you first.