Comprehensive Privacy & Data Protection Policy
Last Revised: October 2026 • Digital Skill Africa Unlimited • Governance Reference: VSU-NDPA-2026-V3
11. Overview & Regulatory Framework
This Privacy Policy governs the collection, processing, storage, and safeguarding of personal data on VoiceSkillUp (voiceskillup.com) and associated mobile applications, operated by Digital Skill Africa Unlimited ("Organization", "we", "our"). We are committed to transparency, data minimization, and strict adherence to international and African privacy benchmarks.
- Nigeria Data Protection Act 2023 (NDPA) & Nigeria Data Protection Regulation (NDPR) administered by the Nigeria Data Protection Commission (NDPC).
- African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) for cross-border African trade education data.
- International Data Protection Standards including global data subject rights and privacy-by-design engineering principles.
22. Data Controller & Data Protection Officer (DPO)
Digital Skill Africa Unlimited is the primary Data Controller for personal, vocational, and voice data processed on the VoiceSkillUp platform. We have designated an active Data Protection Officer (DPO) to handle inquiries, subject access requests, and compliance governance.
Entity Name: Digital Skill Africa Unlimited
Primary Domain: https://voiceskillup.com
DPO Contact Email: privacy@voiceskillup.com / contact@voiceskillup.com
Corporate Head Office: Abuja & Kano Operations, Federal Republic of Nigeria
33. Categories of Data Processed
- Full legal name, alias, and avatar image.
- Email address (strictly one registration per unique email).
- Location details: Country, State, City, District / LGA.
- Vocational trade occupation and skill tags.
- Date of Birth (used solely for dynamic age verification in trade compliance).
- Role assignment (Apprentice, Instructor, Super Admin).
- Spoken audio inputs for automatic speech recognition (ASR).
- Acoustic phonetic patterns for pronunciation evaluation in Hausa and English.
- Practice response audio recordings for instructor verification.
- Zero voice data monetization or behavioral ad profiling.
- Sequential module and lesson completion milestones.
- Voice assessment scores and safety rubric pass/fails.
- Course enrollment history and verified certificates.
- Time-on-task and trade competency mastery logs.
- Pseudonymized IP address and geolocation region.
- Device type, operating system version, and browser agent.
- Platform latency telemetry and speech error metrics.
- Safety interceptor trigger events for hazardous voltage queries.
44. Federated Social Login (Google / Facebook) & Single Email Restriction
VoiceSkillUp supports federated single sign-on via Google OAuth 2.0 and Facebook Login. When utilizing social authentication:
- Minimal Scopes: We strictly request read-only access to your public profile name, verified email address, profile picture, and unique provider subject identifier.
- Zero Social Graph Access: We never request access to your friends lists, social feeds, private messages, or contacts.
- Single Email Architecture: One email address cannot be registered across multiple disconnected accounts. Users with an existing local account linking a social login maintain a unified profile.
- Role Switching: Apprentices can seamlessly transition to Instructor mode and vice-versa within their dashboard without duplicate account creation.
55. Pedagogical Voice AI & N-ATLaS Audio Safeguards
Voice is our primary pedagogical interface for vocational education in Hausa and English. Audio streams captured for speech-to-text (STT) and N-ATLaS AI tutoring are protected under strict commitments:
- No Commercial Monetization: Spoken audio recordings are NEVER sold, rented, leased, or licensed to third-party data brokers.
- No Cross-Site Behavioral Tracking: Voice inputs are strictly bound to educational evaluation, trade safety instructions, and skill mastery.
- Explicit Microphone Consent: Audio capture only activates upon explicit user initiation (tapping the microphone button).
- Pseudonymized Transcripts: Training corpus logs decouple personal user identifiers from audio text transcripts.
66. Lawful Bases for Processing under NDPA 2023
- Performance of Contract: Delivering vocational LMS features, grading voice assignments, and issuing verified trade certificates.
- Explicit User Consent: Capturing microphone audio, accessing local device storage, and sending educational updates.
- Legitimate Interests: Protecting platform safety, preventing hazardous electrical guidance errors, and mitigating credential fraud.
- Legal Obligation: Complying with regulatory reporting, tax laws, and lawful law enforcement requests within Nigeria and the African Union.
77. Storage Architecture, Encryption & Security
All data transmitted between your browser/mobile app and our servers is encrypted using modern TLS 1.3 protocols with HSTS enforcement.
All databases (Cloudflare D1), course media (Cloudflare R2), and session tokens are encrypted at rest using AES-256 standard.
88. Learner Data Subject Rights & Deletion Portal
9. Contacting the Data Protection Officer
Email: privacy@voiceskillup.com
Corporate: Digital Skill Africa Unlimited
Domain: https://voiceskillup.com
