Last updated: September 28, 2026
This Privacy Policy explains what personal information TheCipherLab ("we," "us," "our") collects when you use our platform (the "Service"), how we use it, the basis for that use, who we share it with, and the rights you have. It should be read alongside our Terms of Service.
TheCipherLab is owned and operated by Bassey Elijah Prince, trading as TheCipherLab, based in Nigeria, at thecipherlab.thebasi.com.
Account information, including your username, full name, email address, and password, which is stored in encrypted form.
Profile information you choose to add, including an avatar image, biography, occupation type, institution name, phone number, country, and social media handles.
Payment information, handled directly by our payment processor, Paystack. We do not store your full card number.
Submitted work, including assignment screenshots and memos, messages you send to the AI tutor, and posts and replies you make in the community section.
Information you provide when requesting a live 1:1 session.
Usage and progress data, including which modules and lessons you've completed, your quiz and CBT scores, assignment grades, streak activity, and completion status. We do not currently track your progress through an individual video (such as how much of a video you've watched).
Analytics data, including pages visited, session duration, and general traffic patterns.
Device and log information, including your IP address and browser type.
Confirmation of payment and subscription status from Paystack, and basic profile information such as your name and email if you sign in using a third-party provider.
If you use TheCipherLab's referral program, we set a short-lived, essential cookie on your device (see Section 9) that remembers which referral link you followed, so a reward can be granted to the person who referred you if you go on to subscribe. If someone signs up using your referral link and subscribes, we show you their username in your referral history so you can see who you've referred; we do not share any other information about them with you.
We do not intentionally collect sensitive personal data, including health information, biometric data, genetic data, religious or political beliefs, sexual orientation, or criminal history. If any such information is volunteered unprompted, for example in a support email, we use it only to resolve that specific request.
We use your information to provide and operate the Service, including tracking your progress, rank, and access to paid content; to grade assignments, including through our AI grading system; to power the AI tutor's responses using your current module and quiz history; to process payments and manage your subscription; to send grading results, receipts, and password resets; to send a weekly progress digest where you've opted in; to display your profile and contributions in the Community section where you've enabled this in Settings; to maintain an internal ranking of student progress (XP and completion), currently used by our staff for support and analytics purposes only — a student-facing leaderboard with its own visibility setting is planned but not yet available; to analyze aggregate, de-identified usage to improve the Service; to respond to support requests; and to detect and prevent fraud or abuse.
Account setup, progress tracking, grading, payment processing, and related emails are provided because they are necessary to deliver the Service you've subscribed to. The weekly digest and Community visibility are based on your consent, which you can withdraw at any time in Settings. Fraud prevention and platform security are based on our legitimate interest in operating a safe, functioning Service.
Our AI tutor and automated assignment grading are powered by Anthropic's Claude API, accessed under Anthropic's Commercial Terms of Service. Under these terms, Anthropic does not use your data to train its models, and API inputs and outputs are automatically deleted within 30 days, except content flagged by Anthropic's own safety systems for abuse-prevention review, which may be retained longer under Anthropic's policies.
Account information is retained while your account is active, and briefly afterward for legal and accounting purposes, unless you request earlier deletion.
Grades and written feedback are retained permanently as part of your learning record.
Raw submitted files, such as assignment screenshots, are retained in our instructor-facing lookup system for 30 days from submission. After 30 days, the original file is no longer accessible through that system, though your grade and feedback remain part of your permanent record.
Community posts remain visible according to your settings until you delete them or your account.
We share information only as necessary to operate the Service: with Paystack for payment processing, with Anthropic for our AI tutor and automated grading, with our object storage and content delivery provider for hosting video lessons and assignment evidence, and with our email service provider for transactional and opted-in emails.
Authorized TheCipherLab staff may access your submissions, grades, assignment evidence, and account information internally as needed to provide support, grade assignments, investigate issues, and operate the Service.
We do not sell your personal information. We do not share your individual submissions, grades, or private messages with other students, beyond what you explicitly choose to make visible through your Community profile settings. We may disclose information where required by law, or to protect the rights, safety, or property of TheCipherLab, our users, or the public.
Because our service providers may process data outside Nigeria, your personal information may be transferred internationally. This transfer is based on your informed consent, given by using the Service under this Policy, and on the necessity of these transfers to perform our contract with you, since these providers are how we deliver the Service you've subscribed to.
You have the right to access the personal information we hold about you, to correct inaccurate information, most of which can be edited directly in Settings, to delete your account and associated personal information, to export your data in a portable format, to withdraw consent for anything based on consent at any time, and to object to processing based on our legitimate interest.
To exercise any of these rights, contact thecipherlab.support@gmail.com. We will respond within one month of receiving your request.
We use cookies and similar technologies to keep you signed in, remember your preferences, attribute a referral signup to the link that led to it for up to 30 days (see Section 2.4 — this cookie is essential to the referral program working and is not used for analytics or advertising), and gather aggregate analytics about how the Service is used. Where required, we will request your consent before using non-essential cookies, such as those used for analytics.
The Service is not available to children under 13. Users aged 13 to 17 may use the Service only with a parent or guardian's consent, as described in our Terms of Service. We do not knowingly collect personal information from children under 13, and if we become aware that we have, we will delete it promptly.
We take reasonable technical and organizational measures to protect your personal information, including encrypted password storage and access-controlled infrastructure. In the event of a personal data breach likely to result in high risk to your rights, we will notify the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and notify affected users without undue delay where the risk to you is high.
For all privacy questions and rights requests, contact thecipherlab.support@gmail.com.
We may update this Privacy Policy from time to time. We will make reasonable efforts to notify active users of material changes. The date at the top of this document reflects the most recent revision.
thecipherlab.support@gmail.com