Privacy Policy

Data controller: Tinnkers, 2 State Ave, Freetown, Sierra Leone.

Privacy contact: privacy@tinnkers.com (primary, monitored). Also: goodpeople@tinnkers.com or our Contact Us page. Please write from your registered address and include the email on the account; we aim to acknowledge every privacy request within 7 days and resolve it within 30 days.

• Account data you provide: full name, email, optional phone, password (hashed), role (student/parent/tutor), referral code, profile photo if uploaded.
• Google Sign-In data (non-sensitive, basic profile only): name, email address, profile picture and Google account identifier (see section 3). We request only the email and profile scopes.
• Learning activity: quiz/question attempts, practice progress, challenge completions, certificates.
• Support messages: Contact Us / Complaint messages and replies.
• Payments: subscription status/plan via Stripe; we never store full card numbers.
• Technical data: device type, logs, aggregated analytics (incl. Google Analytics).

We do not collect Gmail messages, Drive files, Calendar, contacts or any other Google data.

If you choose Sign in with Google, Google sends us your name, email address, profile picture and Google account identifier (scopes: email + profile). This is non-sensitive, basic profile information only. We use this only to create/secure your account and sign you in. We do not use Google user data for advertising, do not sell it, and do not allow humans to read it except with your consent, for security purposes, or to comply with applicable law.

Tinnkers' use and transfer of Google API data adheres to the Google API Services User Data Policy, including Limited Use.

Sharing: only hosting/database, email (ZeptoMail/Zoho), analytics (Google Analytics), payments (Stripe), or as required by law. Never with advertisers or brokers.

International transfers: Stripe, Google and our hosting/email providers may process and store your data on servers outside Sierra Leone and Nigeria (for example in the EU or US), under appropriate contractual and technical safeguards.

Retention: kept while account is active. You can delete your account at any time in the app (Profile → Settings → Delete account) or by emailing privacy@tinnkers.com from your registered address and telling us the email on the account. In-app deletion takes effect immediately; emailed requests are confirmed within 30 days. Backups expire within 90 days. We keep only limited records where the law requires it.

Revoke Google access anytime at myaccount.google.com/permissions. Revoking stops future Google sign-ins; email us to also delete the Tinnkers account.

Tinnkers is for users aged 13 and over. We do not knowingly allow children under 13 to create accounts, because we do not currently operate a verifiable parental-consent flow. By creating an account you confirm you are at least 13. If you are under 18, use Tinnkers only with the involvement of a parent, guardian or school. If we learn that a child under 13 has created an account, we will delete it and its personal data promptly — report to privacy@tinnkers.com. Parents or guardians may request review or deletion of a minor's data using the process in section 3.

Cookies: necessary session storage plus optional Google Analytics. Terms: see Terms of Service.