Privacy Policy

Knowsia is an AI-powered professional exam preparation platform for Africa, operated by Knowsia Professional Institute (Accra, Ghana). We help students preparing for ICAG, ACCA, ICAN, CIB Ghana, Chartered Taxation, and CPD qualifications.

Contact: info@knowsia.com

• Account data: name, email address, phone number, and your chosen examination body (e.g. ICAG).
• Usage data: questions attempted, scores, time spent, mock exam results, and topics studied.
• Payment data: subscription status and Paystack transaction references. We do not store full card numbers — payments are processed by Paystack.
• Technical data: IP address, browser type, and session tokens (stored in secure, HttpOnly cookies).

• To create and manage your account.
• To personalise your study experience and surface relevant practice questions.
• To process subscription payments via Paystack.
• To send transactional emails (verification, trial reminders, subscription receipts).
• To monitor platform performance and fix bugs (via Sentry).
• To see where students get stuck, so we can fix it. Our own servers record when a session reaches a step of a few key tasks — signing in, finding and buying a course, opening and finishing a lesson, answering a question, paying for a live class, downloading a certificate, asking for help. We record the step, the page and short ids (which course or lesson); never what you type, your answers, your name or your email. Your account appears only as a one-way coded value, and these records are deleted after 90 days. Nothing is shared with any third party, and if your browser sends “Do Not Track” or Global Privacy Control we record nothing at all.

We do not sell your personal data to third parties.

Several features use AI models run by outside providers: explanations, the tutor, lesson narration, and the marking of written answers. Depending on the feature, the text sent can include the question, your typed answer, your tutor conversation, or the photographs of an answer sheet you upload. Providers we use include Anthropic, OpenAI, Google (Gemini), xAI, Cloudflare, ElevenLabs (voice), and Together AI. We do not send your name, email or phone number with these requests. Please do not write personal details into an answer or onto a photographed sheet.

• Active account data is retained for the duration of your account.
• If you delete your account, we delete personal data within 30 days, except where required by law (e.g. payment records, which are kept for 7 years under Ghanaian tax regulations).
• Task-step records (see section 3) are deleted after 90 days. Counts derived from them — how many sessions reached a step in a week — may be kept, as they identify no one.

Under the Ghana Data Protection Act 2012, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to processing for direct marketing purposes.

To exercise any of these rights, email info@knowsia.com. We will respond within 30 days.

We use a single secure, HttpOnly cookie (knowsia_access) to maintain your authenticated session. This cookie is never accessible to JavaScript and expires after 15 minutes of inactivity. We set no advertising cookies.

Analytics (only if you agree). We ask once whether we may use Google Analytics to measure which pages help visitors and which confuse them. Google Analytics loads, and sets its cookies, only after you choose “Yes”. If you choose “No”, or your browser sends Do Not Track or Global Privacy Control, it never loads. Your choice is remembered in your browser; clear your browser data to be asked again.

• Paystack — payment processing (Ghana). Subject to Paystack's own privacy policy.
• Resend — transactional email delivery.
• Cloudflare — file storage (R2) and AI inference (Workers AI). Data processed within Cloudflare's global network.
• Sentry — error monitoring, where enabled. Error reports do not include email addresses or passwords.
• Railway — hosting of our servers and database.
• Bunny.net — video delivery and asset storage.
• Upstash — short-lived caches and rate limits.
• Google Analytics — only if you consent (see section 7).
• AI providers — see section 4.

We use industry-standard security measures including RS256 JWT tokens, bcrypt password hashing, TLS in transit, sign-in lockouts after repeated failed attempts, and encrypted database storage on our hosting provider. No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

We may update this policy as the platform evolves. Material changes will be notified by email at least 14 days before they take effect. Your continued use of Knowsia after that date constitutes acceptance.