Last updated: October 6, 2026
Your privacy matters to us. This policy explains what data we collect, why we collect it, and the choices you have. It applies to everyone who uses SmartDzidzo.
We collect information you provide directly: your name, email address, profile details, and content you submit, such as reviews, discussion posts, messages, assignment files, notes and questions you ask the AI tutor.
When you pay, your card details go to our payment provider. We keep only a token for the card plus its brand, last four digits and expiry date, so you can recognise it and reuse it. We never store full card numbers.
Each time you sign in we record the device's browser and IP address and when it was last active, so you can see your signed-in devices and sign them out. We also keep a security log of sign-ins and important account changes.
When you enrol in courses, we record your progress, quiz results, grades and certificates so we can deliver your learning experience.
We use your information to operate and improve the Platform, personalise course recommendations, process payments, provide support, and keep your account secure.
We send account and security notices (such as sign-in codes and password changes) whenever they're needed. Marketing emails are off until you turn them on, and you can change every other notification in your settings.
We may use aggregated, anonymised data for research and analytics that help us build better learning products. This data cannot be used to identify you.
Depending on where you live, you may have the right to access, correct, delete or export your personal data, and to object to or restrict certain processing. If you are in the EU or UK, we process your data in accordance with the GDPR.
You can do most of this yourself: edit your details in your profile, download a copy of your data from Settings → Download data, and close your account from Settings → Delete account.
For anything else, or to object to or restrict processing, contact us and we will respond within the timeframe required by applicable law.
We keep your personal data only for as long as necessary to provide the Platform, comply with our legal obligations, resolve disputes and enforce our agreements.
When you delete your account, we erase your profile, notes, bookmarks, wishlist, notifications and the text of your messages, and sign out all your devices. Reviews and discussion posts stay on the Platform but show "Deleted user" instead of your name. Orders and invoices are kept because the law requires it, but they no longer identify you. Our security log is tamper-evident and can't be edited, so entries recorded before deletion (which can include your email and IP address) are kept until the log is retired.
We protect your data with encryption in transit, hashed passwords, role-based access controls for our staff and a tamper-evident security log. Two-factor secrets and payout bank details are additionally encrypted in our database.
You can turn on two-factor sign-in, see every device signed in to your account and sign any of them out. No system is completely secure, but we work hard to keep your information safe.
The Platform is not directed to children under the age of digital consent in their country. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the updated policy and, where appropriate, by email. The date at the top indicates when it was last revised.
If you have any questions about this Privacy Policy or how we handle your data, please reach out to our privacy team. We're here to help.