Privacy Policy

Knowsia is an AI-powered professional exam preparation platform for Africa, operated by Knowsia Professional Institute (Accra, Ghana). We help students preparing for ICAG, ACCA, ICAN, CIB Ghana, Chartered Taxation, and CPD qualifications.

Contact: info@knowsia.com

• Account data: name, email address, phone number, and your chosen examination body (e.g. ICAG).
• Usage data: questions attempted, scores, time spent, mock exam results, and topics studied.
• Payment data: subscription status and Paystack transaction references. We do not store full card numbers — payments are processed by Paystack.
• Technical data: IP address, browser type, and session tokens (stored in secure, HttpOnly cookies).

• To create and manage your account.
• To personalise your study experience and surface relevant practice questions.
• To process subscription payments via Paystack.
• To send transactional emails (verification, trial reminders, subscription receipts).
• To monitor platform performance and fix bugs (via Sentry).
• To understand how students use the platform in aggregate (via PostHog analytics — no individual identifiers shared externally).

We do not sell your personal data to third parties.

When you request an AI explanation, the question text is sent to our AI inference providers (Cloudflare Workers AI, Together AI, or Anthropic) to generate a response. We do not send your name, email, or any other personal identifiers to these providers.

• Active account data is retained for the duration of your account.
• If you delete your account, we delete personal data within 30 days, except where required by law (e.g. payment records, which are kept for 7 years under Ghanaian tax regulations).
• Anonymised, aggregated usage statistics may be retained indefinitely.

Under the Ghana Data Protection Act 2012, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your account and associated data.
• Object to processing for direct marketing purposes.

To exercise any of these rights, email info@knowsia.com. We will respond within 30 days.

We use a single secure, HttpOnly cookie (knowsia_access) to maintain your authenticated session. This cookie is never accessible to JavaScript and expires after 15 minutes of inactivity. No tracking or advertising cookies are set.

• Paystack — payment processing (Ghana). Subject to Paystack's own privacy policy.
• Resend — transactional email delivery.
• Cloudflare — file storage (R2) and AI inference (Workers AI). Data processed within Cloudflare's global network.
• Sentry — error monitoring. Error reports do not include email addresses or passwords.
• PostHog — product analytics. We use server-side event tracking; browser-level user IDs are pseudonymised.

We use industry-standard security measures including RS256 JWT tokens, bcrypt password hashing, TLS in transit, and encrypted database storage (Supabase Pro on AWS). No system is perfectly secure — if you believe your account has been compromised, contact us immediately.

We may update this policy as the platform evolves. Material changes will be notified by email at least 14 days before they take effect. Your continued use of Knowsia after that date constitutes acceptance.