Back to Home
NDPA 2023 & Malabo Convention Pan-African Privacy Standard

Comprehensive Privacy & Data Protection Policy

Last Revised: October 2026 • Digital Skill Africa Unlimited • Governance Reference: VSU-NDPA-2026-V3

11. Overview & Regulatory Framework

This Privacy Policy governs the collection, processing, storage, and safeguarding of personal data on VoiceSkillUp (voiceskillup.com) and associated mobile applications, operated by Digital Skill Africa Unlimited ("Organization", "we", "our"). We are committed to transparency, data minimization, and strict adherence to international and African privacy benchmarks.

Applicable Legal Frameworks:
  • Nigeria Data Protection Act 2023 (NDPA) & Nigeria Data Protection Regulation (NDPR) administered by the Nigeria Data Protection Commission (NDPC).
  • African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) for cross-border African trade education data.
  • International Data Protection Standards including global data subject rights and privacy-by-design engineering principles.

22. Data Controller & Data Protection Officer (DPO)

Digital Skill Africa Unlimited is the primary Data Controller for personal, vocational, and voice data processed on the VoiceSkillUp platform. We have designated an active Data Protection Officer (DPO) to handle inquiries, subject access requests, and compliance governance.

Entity Name: Digital Skill Africa Unlimited

Primary Domain: https://voiceskillup.com

DPO Contact Email: privacy@voiceskillup.com / contact@voiceskillup.com

Corporate Head Office: Abuja & Kano Operations, Federal Republic of Nigeria

33. Categories of Data Processed

Account, Identity & Profile Data
  • Full legal name, alias, and avatar image.
  • Email address (strictly one registration per unique email).
  • Location details: Country, State, City, District / LGA.
  • Vocational trade occupation and skill tags.
  • Date of Birth (used solely for dynamic age verification in trade compliance).
  • Role assignment (Apprentice, Instructor, Super Admin).
Spoken Audio & Voice Tutoring
  • Spoken audio inputs for automatic speech recognition (ASR).
  • Acoustic phonetic patterns for pronunciation evaluation in Hausa and English.
  • Practice response audio recordings for instructor verification.
  • Zero voice data monetization or behavioral ad profiling.
Academic & Vocational Progress
  • Sequential module and lesson completion milestones.
  • Voice assessment scores and safety rubric pass/fails.
  • Course enrollment history and verified certificates.
  • Time-on-task and trade competency mastery logs.
Technical & Telemetry Data
  • Pseudonymized IP address and geolocation region.
  • Device type, operating system version, and browser agent.
  • Platform latency telemetry and speech error metrics.
  • Safety interceptor trigger events for hazardous voltage queries.

44. Federated Social Login (Google / Facebook) & Single Email Restriction

VoiceSkillUp supports federated single sign-on via Google OAuth 2.0 and Facebook Login. When utilizing social authentication:

  • Minimal Scopes: We strictly request read-only access to your public profile name, verified email address, profile picture, and unique provider subject identifier.
  • Zero Social Graph Access: We never request access to your friends lists, social feeds, private messages, or contacts.
  • Single Email Architecture: One email address cannot be registered across multiple disconnected accounts. Users with an existing local account linking a social login maintain a unified profile.
  • Role Switching: Apprentices can seamlessly transition to Instructor mode and vice-versa within their dashboard without duplicate account creation.

55. Pedagogical Voice AI & N-ATLaS Audio Safeguards

Voice is our primary pedagogical interface for vocational education in Hausa and English. Audio streams captured for speech-to-text (STT) and N-ATLaS AI tutoring are protected under strict commitments:

Voice Data Sovereignty Commitments:
  • No Commercial Monetization: Spoken audio recordings are NEVER sold, rented, leased, or licensed to third-party data brokers.
  • No Cross-Site Behavioral Tracking: Voice inputs are strictly bound to educational evaluation, trade safety instructions, and skill mastery.
  • Explicit Microphone Consent: Audio capture only activates upon explicit user initiation (tapping the microphone button).
  • Pseudonymized Transcripts: Training corpus logs decouple personal user identifiers from audio text transcripts.

66. Lawful Bases for Processing under NDPA 2023

  • Performance of Contract: Delivering vocational LMS features, grading voice assignments, and issuing verified trade certificates.
  • Explicit User Consent: Capturing microphone audio, accessing local device storage, and sending educational updates.
  • Legitimate Interests: Protecting platform safety, preventing hazardous electrical guidance errors, and mitigating credential fraud.
  • Legal Obligation: Complying with regulatory reporting, tax laws, and lawful law enforcement requests within Nigeria and the African Union.

77. Storage Architecture, Encryption & Security

In-Transit Encryption

All data transmitted between your browser/mobile app and our servers is encrypted using modern TLS 1.3 protocols with HSTS enforcement.

At-Rest Encryption

All databases (Cloudflare D1), course media (Cloudflare R2), and session tokens are encrypted at rest using AES-256 standard.

88. Learner Data Subject Rights & Deletion Portal

Right to Access & Rectification: You can review, update, or edit your personal profile, trade occupation, location, and skills in your Profile portal.
Right to Erasure ("Right to be Forgotten"): You may request complete deletion of your account, voice interactions, and learning records via our controlled multi-stage deletion workflow.
Data Deletion Portal →
Right to Data Portability: You can export your academic transcripts and certificate credentials in machine-readable format.
Right to Lodge a Complaint: You have the right to lodge a formal complaint with the Nigeria Data Protection Commission (NDPC) (ndpc.gov.ng).

9. Contacting the Data Protection Officer

Email: privacy@voiceskillup.com

Corporate: Digital Skill Africa Unlimited

Domain: https://voiceskillup.com