How Master Anything collects, uses, and protects your personal data — and the choices and rights you have. This policy covers the platform at masteranything.app, including paid courses, the Coursathon, and our AI features.
Last updated: June 2026
The personal data we handle and where it comes from.
Account information — when you create an account through our authentication provider (Clerk), we collect your name, email address, and optional profile photo. If you sign in with a social provider (such as Google), we receive the basic profile details you authorize.
Learning activity — courses you generate or enroll in, session and lesson progress, quiz and knowledge-check attempts, lab and proof submissions, streaks, and competition participation. This powers your personalized curriculum and progress tracking.
Payment metadata — when you purchase a paid course, payment is processed by Paystack. We store the transaction reference, amount, currency, the course purchased, and the payment status. Your card details never touch our servers; you enter them directly with Paystack.
AI conversation content — messages you send to the AI tutor, course-generation prompts, and material you submit for AI review are sent to third-party AI model providers (routed via OpenRouter) to generate responses. Please do not include sensitive personal information in AI chats.
Product analytics — we use PostHog to record page views, feature usage, and interaction events, and signed-in users are identified by their account details (such as email and name). This product analytics runs by default so we can understand and improve the platform; optional marketing tags are separate and stay off until you opt in via the cookie banner.
Technical data — device, browser, and approximate location information collected automatically by our hosting provider (Vercel) and analytics tooling for security, performance, and debugging.
The purposes we process your data for.
To provide the service: generating and personalizing courses, tracking your progress, running assessments and competitions, and delivering purchased course content and review sessions.
To process payments and manage enrollments through Paystack.
To send service and transactional email through Resend — receipts, learning reminders, and important account or course updates. Marketing-style campaign emails include an opt-out.
To understand and improve the product through analytics (PostHog) — for example, which features are used and where learners get stuck.
To keep the platform secure: fraud prevention, abuse detection, and competition integrity checks.
To comply with legal obligations, including financial record-keeping for paid transactions.
Third-party services we rely on, and international transfers.
We use the following processors: Clerk (authentication), Convex (database and backend), Paystack (payments), PostHog (product analytics), Resend (email delivery), Vercel (hosting and web analytics), and OpenRouter together with the underlying AI model providers (AI tutor, course generation, and AI review features).
We do not sell your personal data, and we do not share it with third parties beyond the processors listed above except where required by law.
Your data may be stored and processed on servers outside Nigeria (primarily in the United States and the European Union) by the processors above. We rely on each provider's contractual data-protection safeguards for these transfers.
AI model providers receive only the content needed to generate a response (your prompts, relevant course context, and submissions you ask to be reviewed). They are not given your payment details.
What runs by default and what you control.
Necessary storage — cookies and local storage required for sign-in, security, and core functionality. These are always on.
Product analytics — PostHog and Vercel Analytics run by default to measure how the platform is used so we can improve it. They are used for product improvement, not for advertising to you elsewhere.
Marketing tags — advertising and measurement tags (currently the LinkedIn Insight Tag) are off by default and only load after you opt in through the cookie banner.
You can change your marketing-tracking choice at any time using the "Cookie settings" button shown on the site.
How long we keep your data.
Account and learning data is kept for as long as your account is active so your courses and progress remain available to you.
If you ask us to delete your account, we delete or anonymize your personal data within a reasonable period, except where we must keep it.
Payment and transaction records are retained after account deletion for as long as Nigerian tax and financial regulations require.
Analytics data is retained according to our analytics provider's standard retention settings.
Rights for users in Nigeria and equivalent rights for international users.
If you are in Nigeria, you have rights under the Nigeria Data Protection Act 2023 and the NDPR, including the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, and withdraw consent where processing is based on consent.
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
If you are outside Nigeria (including in the UK/EU), we honor equivalent GDPR-style rights: access, rectification, erasure, restriction, portability, and objection.
To exercise any of these rights, email us at the address below. We may need to verify your identity, and we aim to respond within 30 days.
Withdrawing consent or requesting deletion does not affect the lawfulness of processing that happened before your request.
Who is responsible for your data and how to reach us.
Data controller: Master Anything (masteranything.app), operated from Nigeria.
Privacy questions and requests: support@masteranything.app.
If we make material changes to this policy, we will update the date above and, where appropriate, notify you by email or in the app.
Questions about this policy?
Email support@masteranything.app and we will get back to you.