Privacy Policy

Last updated 1 October 2026

The short version. We collect what is needed to run your account and your learning. We do not sell your data and we do not run advertising or analytics trackers. Your password is stored only as a one-way hash, so we cannot read it. Instructors can see the names and progress of students in their own courses; other students see your name and what you post. You can ask us for a copy of your data, or to delete it.

1. Who we are

Wuteve Global Academy, Monrovia, Liberia, is responsible for the personal data described here. Questions, requests and complaints go to wuteve@wuteveglobalacademy.com.

2. What we collect

Account details

Your first and last name, and your email address.
A phone number, if you provide one.
Your role on the platform — student or instructor.
Your password, stored only as a bcrypt hash: a one-way value. We never store the password itself and we cannot recover it or read it. If you forget it, it can only be reset, not looked up.

Account activity

Whether your email address has been verified, and when.
When your account was created, when you last signed in, and whether it is active or suspended.

Your learning

Which courses you are enrolled in, and which lessons you have completed.
Your progress through each course, and any certificates issued to you.

Community and messages

Discussion posts and replies you write, and the likes you give.
Study groups you create or join, and live sessions you attend.
Direct messages you send to other members.

Payments

No payment method is enabled at present, so no payment data is collected. When one is enabled, we will keep a record of each payment — amount, currency, date, status and the provider's reference — so that receipts and revenue reporting work. Card or wallet details are entered on the payment provider's own page; we do not receive or store them.

Technical data

Your signed-in session is held in your browser's local storage, not in a cookie, as an access token, a refresh token and your basic profile.
Your light or dark theme preference is stored locally in your browser.
Our servers keep request logs — the path requested, the response status and the time — for security and to diagnose faults.
Your IP address is used briefly, in memory, to apply rate limits so that one abusive client cannot exhaust the service for everyone. It is not written to our logs or stored in the database.
We do not use advertising cookies, and we do not run third-party analytics or tracking scripts.

3. Why we use it

To create your account, verify your email address, and sign you in securely.
To deliver courses, record your progress and issue your certificates.
To let instructors see and support the students in their own courses.
To run discussions, messages, study groups and live sessions.
To send service email: verification links, password resets, enrolment confirmations, certificate notices, payment receipts, and — for instructors and administrators — platform announcements.
To keep the platform secure and prevent abuse.
To meet our legal obligations.

We rely on your agreement and on the need to perform the service you have asked for. Where we use data to keep the platform secure, we do so because we have a legitimate interest in protecting it and the people using it.

4. Cookies and local storage

Your sign-in session is kept in local storage. Signing out clears it. Nothing about your session is shared with anyone else.
Pages load a few resources from other companies — typefaces from Google Fonts, icons from cdnjs, charts from jsDelivr on the instructor and administrator dashboards, and photographs from Unsplash on the home page. Serving those files necessarily reveals your IP address and browser details to those companies. We send them nothing about you, and they are not used to build a profile of you by us.

5. Who can see what

Instructors can see the name, email address and progress of students enrolled in courses they teach. They cannot see your password or your payment details.
Administrators can see account records and activity, because running and supporting the platform requires it.
Other students see your name and whatever you post in course discussions or study groups, or send to them directly. Your email address is not shown to other students.

6. Who we share it with

We use a small number of service providers who process data on our behalf, and nothing else:

MongoDB Atlas — stores the database holding your account and learning records.
Railway — hosts and runs the application.
Resend — delivers email, once a sending key is configured.
Payment providers — only when a payment method is enabled, and only for the payment itself.

We do not sell your personal data, and we do not share it for advertising. We may disclose it if the law requires it.

7. How long we keep it

Account and learning records are kept while your account exists, and are deleted when you ask us to close it.
We may keep a certificate's number, the name it was issued to and the course it was for after an account is closed, because the purpose of a certificate is that it can still be checked years later. If we do, we will tell you at the time.
Server logs are kept briefly and then discarded.

8. Your choices and rights

Access — ask for a copy of the personal data we hold about you.
Correction — change your name and details from your dashboard, or ask us to.
Deletion — ask us to close your account and delete your personal data, subject to the certificate note above.
Announcements — verification, reset and receipt emails are part of using the platform and cannot be switched off. If you would rather not receive platform announcements, tell us and we will stop.

To exercise any of these, write to wuteve@wuteveglobalacademy.com. These requests are handled by a person, not a button in the interface, so please allow us a little time. We may need to confirm your identity before acting.

9. Security

Passwords are hashed with bcrypt and are never stored in readable form.
Sign-in uses short-lived access tokens with rotating refresh tokens. If a refresh token is ever replayed, we treat the session as compromised and sign it out.
Traffic is encrypted over HTTPS, and we send HSTS so your browser insists on it.
Changing your password signs out your other devices.

No system is perfectly secure. If we ever become aware of a breach affecting your personal data, we will tell you and the relevant authorities.

10. Age

You must be at least 13 years old to hold an account. If you are under 18, please use the platform with the involvement of a parent or guardian. If we learn that a child under 13 has given us personal data, we will delete it.

11. Where your data is held

Our hosting and database providers may store data on servers outside Liberia. Where that happens, we rely on those providers' own security and contractual safeguards.

12. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top. Where a change materially affects you, we will tell you by email.

13. Contact

Wuteve Global Academy
Monrovia, Liberia · P.O. Box 1000
wuteve@wuteveglobalacademy.com
+231 886 590 302 · +231 772 876 644