Privacy Policy
How we collect, use, and protect your personal information.
1. Overview
Crearea ("we", "us", "our") is an AI powered educational platform operated under the laws of the Republic of Ghana. This Privacy Policy describes how we collect, use, store, and protect your personal information when you use the Crearea mobile application and website (collectively, "the Service").
By using Crearea, you agree to the collection and use of information in accordance with this policy. This policy complies with the Ghana Data Protection Act, 2012 (Act 843).
2. Data we collect
2.1 Account information
When you create a Crearea account, we collect:
- Full name and email address
- Education level (JHS, SHS, or University)
- School name and class/year (optional)
- Profile photo (optional)
- Password (stored as a secure hash — we never see your plain text password)
2.2 Usage data
We collect information about how you use the Service:
- Notes you create and edit (stored securely in your account)
- Files and documents you upload to your Library
- AI chat history and interactions
- Study room activity (messages, participation)
- Credit usage and subscription status
- App performance data and crash reports
2.3 Device information
We collect limited technical information including device type, operating system version, and app version to provide and improve the Service. We do not collect precise GPS location.
2.4 Payment information
Payments are processed by Paystack, a PCI-DSS compliant payment provider. We do not store your card number, MoMo number, or full payment details. We only store transaction records (plan purchased, date, amount) for your account history.
3. How we use your data
We use your data exclusively to:
- Provide, maintain, and improve the Crearea Service
- Personalize your AI experience based on your education level and subjects
- Process subscription payments and manage your credit balance
- Send important account notifications (security alerts, billing, policy updates)
- Provide customer support when you contact us
- Comply with legal obligations under Ghanaian law
- Detect and prevent fraud, abuse, and misuse of the platform
We do not use your data to serve advertisements, build advertising profiles, or sell insights to third parties.
4. Data sharing and third parties
We share your data only with the following trusted service providers, strictly for operating the Service:
- Google Firebase — database, authentication, storage, and cloud functions hosting. Firebase is operated by Google LLC under their data processing agreement.
- Paystack — payment processing. Paystack is a PCI-DSS Level 1 certified payment provider operating in Ghana.
- Google Gemini API — AI model inference. Content you submit for AI processing is sent to Google's Gemini API under our API agreement. Google does not use this data to train models when submitted through the API.
We never sell your personal data. We never share your data with advertisers, data brokers, or any third party for commercial purposes beyond operating the Service.
We may disclose data if required by Ghanaian law, a court order, or to protect the safety of our users.
5. Student and minor protection
Crearea is an educational platform designed for students aged 12 and above. We take the protection of student data seriously.
- Users under 18 should use Crearea with parental awareness and consent.
- We do not collect more data than necessary to provide the educational service.
- Student notes, files, and AI interactions are private to their account and not shared with other users without explicit consent (e.g., sharing to a study room).
- We do not display advertising to any users, including minors.
- Parents or guardians may contact us at privacy@crearea.app to request access to or deletion of a minor's account data.
6. Your rights under Ghana DPA 2012
Under the Ghana Data Protection Act 2012, you have the right to:
- Access — request a copy of all personal data we hold about you
- Correction — request correction of inaccurate or incomplete data
- Deletion — request deletion of your account and personal data ("right to be forgotten")
- Portability — request your data in a machine readable format
- Objection — object to how we use your data in certain circumstances
To exercise any of these rights, email us at privacy@crearea.app. We will respond within 30 days. Account deletion can also be initiated from within the app under Settings > Account > Delete Account.
7. Data retention
We retain your data for as long as your account is active. When you delete your account:
- Your profile, notes, and files are deleted within 30 days.
- AI chat history is deleted within 30 days.
- Payment transaction records are retained for 7 years as required by Ghanaian tax and financial regulations.
- Anonymised, aggregated usage statistics (with no personal identifiers) may be retained indefinitely for product improvement.
8. Security
We implement industry standard security measures to protect your data:
- All data transmitted between your device and our servers is encrypted with TLS 1.3.
- Authentication is handled by Firebase Authentication with secure token based sessions.
- Passwords are never stored in plain text — only secure cryptographic hashes.
- Access to production systems is restricted to authorised team members only.
- We conduct regular security reviews of our infrastructure and code.
No system is 100% secure. If you believe your account has been compromised, contact us immediately at privacy@crearea.app.
9. Contact us
For all privacy related enquiries, requests, or complaints:
Data Protection Contact:
Email: privacy@crearea.app
Address: Accra, Ghana
If you are unsatisfied with our response, you have the right to lodge a complaint with the Data Protection Commission of Ghana.
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or in app notification. Continued use of the Service after changes constitutes acceptance of the updated policy.