Privacy Policy

Credify Learning (“Credify”, “we”, “us”) runs the Credify platform, where instructors publish courses, learners earn badges by passing quizzes, and learners can pay to redeem verifiable certificates. We are based in Accra, Ghana, and we are the data controller for the personal data described here.

We process personal data in line with Ghana’s Data Protection Act, 2012 (Act 843). You can reach us about anything in this policy at support@credify.study.

Account details. Your name, email address, password (stored only as a secure hash), role (learner or instructor), and a profile photo if you add one.

Learner profile. What you tell us during onboarding: phone number, where you study (institution type and school), level, programme, expected completion year, student ID, mobile money network and topics you’re interested in.

Instructor profile. Title, position, faculty, department or organisation, a signature image for certificates, and payout details (mobile money or bank account name and number) so we can pay you.

Learning activity. Courses you join, lessons you complete, quiz attempts and answers (including written answers), scores, badges and certificates earned, redeemed or revoked, and the times these happen.

Payments. For each redemption: the amount, currency, status, payment channel and Paystack’s reference. Card and mobile money details are entered with Paystack, not with us, and we never see or store your full card number or PIN.

Content you create. Instructors’ courses, lessons, uploaded videos, slides and images, questions and feedback. Learners’ reports about a course.

Technical data. Your browser keeps a sign-in token and a few preferences (like a collapsed sidebar) in local storage. Our servers keep standard logs (such as IP address, time and the page or action requested) for security and troubleshooting. We don’t use advertising cookies or third-party trackers.

• To run your account and the courses you teach or take, including progress, quizzes, grading, badges and certificates.
• To take payments for redemptions, pay instructors their share, and handle refunds.
• To send the emails the service depends on: verifying your email, resetting your password, new weeks and lessons, results, badges and certificates, and answers waiting to be marked. We may also send occasional platform announcements.
• To issue certificates and keep them verifiable (see section 5).
• To keep Credify safe and fair: detecting abuse, cheating and fraud, handling reports, and suspending accounts that break our Terms.
• To improve Credify, using aggregated statistics (for example, how many learners complete a course).

We rely on performing our contract with you (running the service you signed up for), our legitimate interests (security, fraud prevention and improving the platform), your consent where we ask for it, and legal obligations (for example, keeping payment records).

Instructors can use AI to draft quiz questions from their course notes and slides, and can turn on AI marking for short-answer questions. When they do, the relevant course text, questions and learners’ short answers are sent to our AI provider, DeepSeek, to produce a draft or a suggested mark. We don’t send names, emails or other profile details with them.

AI marks are suggestions. Instructors can review and change them, and any answer the AI can’t mark confidently goes to the instructor. AI features can be switched off by the instructor or by Credify.

When you redeem a badge or certificate, it gets a public verification page (and an Open Badges 2.0 record) so that employers and others can check it. Anyone with the link or QR code can see: your name, your programme and school, the badge or certificate name, the course, the instructor, the issuer and the issue date. If a credential is revoked, the page says so and shows the reason given.

Badges you’ve earned but not redeemed are not public. Your wallet, scores and quiz answers are never shown on verification pages.

We don’t sell personal data. We share it only as needed to run Credify:

• Your instructors and their course team (co-instructors and teaching assistants) see the name, email and student ID of learners in their course, along with progress, quiz attempts, answers, scores and badge status.
• Paystack processes redemption payments and refunds.
• Zend delivers our emails.
• DeepSeek provides the AI features described in section 4.
• Amazon Web Services stores uploaded files (videos, slides, images, signatures) and encrypted database backups.
• Our hosting provider, which runs the servers and database.
• Authorities, where the law requires it, or to protect the rights and safety of our users or of Credify.

Some of these providers store or process data outside Ghana, including in the United States and China. Where that happens we rely on the provider’s security commitments and take the steps Act 843 requires to keep the data protected.

• Account and learning data: for as long as your account is open.
• Redeemed credentials: for as long as they can be verified, because people rely on them. If you delete your account, we keep what’s needed for existing certificates to keep verifying, unless you ask us to withdraw them.
• Payment records: as long as tax and accounting law requires.
• Database backups: they are deleted automatically after 30 days.

When you delete your account, we remove or anonymise the rest of your personal data, apart from records we must keep by law.

Passwords are hashed, connections use HTTPS, uploaded files and backups are stored in private, encrypted storage and are only served through short-lived links, and staff access to administrative tools is limited and logged. No system is perfectly secure, but we work to protect your data and will tell you and the Data Protection Commission about a breach where the law requires it.

Under Act 843 you can:

• ask for a copy of the personal data we hold about you;
• correct it (most of it you can edit yourself in your profile);
• ask us to delete it, or to stop or limit using it;
• object to processing based on our legitimate interests, and opt out of announcements;
• withdraw consent you’ve given, without affecting what we did before.

Email support@credify.study and we’ll respond within a reasonable time. If you’re not satisfied, you can complain to the Data Protection Commission of Ghana.

Credify is meant for people aged 16 and over, mostly students at tertiary institutions. If you are under 18, you need the permission of a parent or guardian to use Credify and to make payments. If we learn that we hold data about a child without that permission, we will delete it.

We’ll update this page when our practices change and change the “last updated” date above. If a change is significant, we’ll tell you by email or in the app before it takes effect.