Privacy Policy

Rezelio is operated by Wikrena Limited, a company registered in Nigeria and trading under the name Rezelio. Our registered address is in Enugu, Nigeria. When this policy says "Rezelio," "we," "us," or "our," it means Wikrena Limited.

You can reach us at any time with questions about your data at hello@rezelio.com.

What we collect depends on who you are and how you use Rezelio. We collect only what is necessary to make the platform work.

Children — Explorers and Builders (ages 7–14)

• ●First name and date of birth — used to assign the correct learning track.
• ●A hashed PIN. We never store the actual PIN. What is stored cannot be reversed back into the original number.
• ●Learning activity: lesson completion, quiz scores, XP points, streaks, badges earned, and coins.
• ●Virtual wallet activity: coins earned and spent within the platform only.
• ●Device type and approximate location used to access the platform (via Supabase session data).

Pioneers (ages 15–19 who self-register)

• ●Email address and a hashed password, stored securely via Supabase Auth.
• ●Date of birth — verified to confirm eligibility before an account is created.
• ●The same learning activity data listed for Explorers and Builders.
• ●Optionally: a parent or guardian's email address, if the Pioneer chooses to enable parental visibility.

Parents and guardians

• ●Email address and password (managed by Supabase Auth).
• ●The name and date of birth of each child account they create.
• ●Payment details when subscribing — processed entirely by Paystack. We never see or store card numbers.

Schools and teachers

• ●School name, address, and primary contact details.
• ●Teacher email addresses and names.
• ●Class rosters submitted by the school for bulk enrolment.

All users — technical data

• ●Session timestamps: when you log in and when activity occurs.
• ●Browser type and device type, collected by Supabase as part of standard session management.
• ●IP address, used only for rate limiting and security — not stored long-term.

We do not collect advertising identifiers, social media profiles, precise GPS location, or any biometric data.

We use the data we collect to operate the platform — nothing more, nothing less.

• ●Create and manage accounts for students, parents, schools, and teachers.
• ●Assign children to the correct learning track (Explorers, Builders, or Pioneers) based on their age.
• ●Save and display learning progress, XP, streaks, badges, and coins.
• ●Enable the Zelio AI tutor to provide personalised lesson guidance.
• ●Send parents weekly progress reports by email when subscribed.
• ●Process subscription payments via Paystack.
• ●Protect all accounts through session management, rate limiting, and security monitoring.
• ●Improve the platform through aggregated, anonymised usage data — never analysed at the individual level.

Protecting children's data is our most important obligation. It shapes the entire design of how accounts work on Rezelio.

• ●No email for under-14s. Children aged 7–14 log in with a name and PIN only. We do not collect or store their email addresses.
• ●Parent or school creates the account. Explorers and Builders cannot create their own accounts. A parent, guardian, or school must do so on their behalf.
• ●Age verification for Pioneers. Young people aged 15–19 who self-register must provide their date of birth. Anyone outside the 15–19 age range cannot complete Pioneer registration.
• ●No advertising to anyone under 19. There are no ads anywhere on the platform.
• ●Parents can request to view, correct, or delete their child's data at any time by emailing us.

We comply with the Nigeria Data Protection Regulation (NDPR), the Protection of Personal Information Act (POPIA), and the principles of the Children's Online Privacy Protection Act (COPPA) where applicable to our users.

We share data only with the service providers needed to run the platform. All providers are contracted to handle data securely and only for the purposes we specify.

We do not work with data brokers, advertising networks, or analytics platforms that track users across other websites.

• ●All data is transmitted over HTTPS using TLS encryption.
• ●Passwords and PINs are hashed using bcrypt. They cannot be recovered by us or by anyone else — not even in a data breach.
• ●Database access is protected by Row Level Security (RLS). Each user can access only their own data.
• ●The administrative service key is never exposed to the browser or to client-side code.
• ●Rate limiting is applied to all login and sensitive API endpoints to prevent brute-force attacks.

No system is perfectly secure, and we cannot guarantee that our platform will never be compromised. If we become aware of a breach that affects your personal data, we will notify you and the relevant authorities as required by applicable law.

• ●Active accounts: Data is retained for as long as the account is active.
• ●Deleted accounts: Data is soft-deleted immediately and permanently removed within 90 days.
• ●Payment records: Retained for 7 years to meet Nigerian legal and accounting requirements.
• ●Aggregated usage data: Anonymised, non-identifiable data may be retained indefinitely for platform improvement.

Depending on where you live, you may have the right to:

• ●Access the personal data we hold about you or your child.
• ●Correct inaccurate or incomplete data.
• ●Request deletion of your account and associated personal data.
• ●Withdraw consent for optional data processing.
• ●Object to certain uses of your data.
• ●Receive a portable copy of your data in a structured format.

To exercise any of these rights, email us at hello@rezelio.com. We will respond within 30 days. If you are not satisfied with our response, you may lodge a complaint with the National Information Technology Development Agency (NITDA) in Nigeria, or the relevant data protection authority in your country.

For any question about this privacy policy or how we handle your data:

• ●Email: hello@rezelio.com
• ●Address: Wikrena Limited, Enugu, Nigeria.

We may update this policy from time to time. We will notify you of any material changes by email or through a notice on the platform. The date at the top of this page always reflects when it was last revised.