Privacy Policy

Last updated: September 2026

This policy governs this website and the Guava AI account. Each Guava AI product (such as Train Yourself) has its own Privacy Policy covering data specific to that product; this document covers what is collected and shared at the account level, across products.

1. Who we are

Guava AI Ltd is a private company limited by shares incorporated in Nigeria under company number RC 9819807, with its registered address at Diank Terraces, Sule Olusesi Street, Lekki Conservation Road, Lekki, Lagos, Nigeria. We are the data controller for personal data described in this policy. We process personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and, where applicable, the EU GDPR and UK GDPR. Contact us at hello@guava-group.com.

2. What we collect

Account information

When you create a Guava AI account, we collect your name and email address. If you sign in with Google, Google provides the information necessary to authenticate you; we do not receive your Google password. If you create an account with email and password, we store your email address and a cryptographically protected form of your password, never in plain text.

Subscription and payment information

If you subscribe to a product, we collect information necessary to manage that subscription — plan, status, and dates. Payments are processed by a third-party payment processor selected for that product — currently Flutterwave. We do not receive or store your full card details.

Product-specific information

Each product you use collects further information relevant to that product (for example, Train Yourself collects study progress and diagnostic answers). That is described in the product's own Privacy Policy, not repeated here.

Technical information

We may use limited information stored on your browser or device where necessary to keep you signed in, maintain your session, or preserve your progress. We do not use third-party advertising or cross-site tracking technologies.

3. How we use your information

We use your personal data to: create and manage your Guava AI account; provide access to the products you use; administer subscriptions and payments through our payment processors; maintain the security and functionality of our systems; prevent misuse, fraud and unauthorised access; communicate with you about your account or a product; comply with legal and regulatory obligations; and establish, exercise or defend legal claims where necessary.

4. Our legal bases for processing

Where the NDPA, EU GDPR, UK GDPR or another applicable law requires a legal basis, we rely on: performance of a contract, where processing is necessary to provide a product to you under its Terms; legitimate interests, where processing is reasonably necessary for security, fraud prevention, or operating our business, provided those interests are not overridden by your rights; legal obligations, where we must process or retain information to comply with law; and consent, where applicable law requires it and we have obtained it. Where we rely on consent, you may withdraw it at any time without affecting processing already carried out.

5. Who we share your information with

We use selected service providers to operate the Guava AI account and our products. Our principal providers include Supabase, for account authentication and database infrastructure; Vercel, for hosting; and a payment processor selected for each product (currently Flutterwave), for payment processing. Each processes personal data on our behalf only as necessary to provide their service to us.

6. International data transfers

Guava AI Ltd operates from Nigeria. Where personal data is transferred to or processed by a service provider outside Nigeria, we take reasonable steps to ensure it is protected consistently with this policy and applicable law.

7. Your rights

Subject to applicable law, you may request access to, correction of, or deletion of personal data we hold about you, by emailing hello@guava-group.com. Deleting your Guava AI account removes access to every product tied to it; specific data retained by an individual product is governed by that product's own Privacy Policy and applicable law.

8. Complaints

Contact us first at hello@guava-group.com. Nigerian residents may complain to the Nigeria Data Protection Commission (NDPC); EU/UK residents may complain to their local supervisory authority.