Privacy Policy

Effective 11 July 2026

This explains what personal data QueenSkiilia collects, why we use it, who we share it with, how long we keep it and what rights you have. We have written it to match what the product actually does.

1. Who we are

QueenSkillia Ltd (RC 9666003), a private company limited by shares incorporated in Nigeria, is the data controller for the personal data described here. QueenSkiilia is a marketplace connecting businesses with student talent.

We handle personal data in accordance with the Nigeria Data Protection Act 2023 (NDPA) and other applicable law. To contact us about privacy, email rukkiecodes@gmail.com.

2. What we collect

2.1 Information you give us

Data	Details
Account	Email address, account type (talent or business), full name, profile photo, country. We sign you in with a one-time code emailed to you — we do not store passwords.
Talent profile	University, skills, skill level, bio, portfolio items, ratings and reviews received, earnings.
Business profile	Company name, website, industry.
Identity verification	A photo of a government-issued identity document, a photo of your face (a selfie), and, for businesses, a business registration document. These are sensitive — see section 5 and section 8.
Payout details	Bank name, account number, and the account name returned by our payment provider when we confirm the account.
Project activity	Projects you post or apply to, applications, submitted work (files, links and notes), approvals and revision requests.
Messages	Chat messages and any files or images you attach.
Exams	Your answers, scores, pass/fail results and certificates.
Disputes and reports	The reason you give, and any evidence you upload.

2.2 Information created by using the Platform

Payment records: escrow amounts, our fee, the exchange rate applied, payment and transfer references, and status. We never see or store your full card details — those go directly to our payment provider.
Notifications we generate for you, and whether you have read them.
Technical data: IP address, device and browser information, and server logs, created when you use the Platform.

We do not buy personal data about you, and we do not run advertising or ad-tracking on the Platform.

3. Why we use it, and our legal basis

Why	Legal basis
Create and run your account; sign you in; show your profile.	Performance of our contract with you.
Run projects: matching, applications, submissions, approvals, chat, notifications.	Performance of our contract with you.
Take payments, hold escrow, apply our fee, convert currency and pay you out.	Performance of our contract; legal obligation (accounting and tax records).
Verify identity, prevent fraud and money laundering, and keep the Platform safe.	Legal obligation, and our legitimate interest in a trustworthy marketplace. Where identity documents and face images are involved we also rely on your consent, which you can withdraw (though we may then be unable to offer payouts).
Generate and mark skill exams, and issue certificates.	Performance of our contract with you (see section 4).
Investigate reports and resolve disputes.	Legitimate interest in enforcing our Terms and protecting users.
Support you, and tell you about material changes.	Performance of our contract; legitimate interest.
Comply with the law and respond to lawful requests.	Legal obligation.

4. Automated decisions and AI

Skill exams are generated and marked by artificial intelligence. When you take an exam, the questions and the answers you write are sent to Google (Gemini) to be marked. Your score, and whether you pass, is produced automatically.

This is an automated decision that affects you: it determines whether you receive a certificate. Automated marking can be wrong. If you believe a fault affected your result, you can ask a human to review it by emailing rukkiecodes@gmail.com, and you can contest the outcome.

Do not put personal information about yourself or anyone else into an exam answer beyond what the question needs. We do not use your exam answers to train AI models, and we do not use AI to make decisions about your account, payments or disputes — those are made by people.

5. Who we share it with

We do not sell your personal data. We share it with the service providers we need to run the Platform, each of which is only permitted to use it to provide their service to us:

Provider	What they get, and why
Supabase	Hosts our database and real-time messaging. Holds most of the data in section 2.
Vercel	Hosts the website and our services. Processes request and log data.
Cloudinary	Stores and serves uploaded files: profile photos, portfolio images, chat attachments, submitted work, dispute evidence, and identity documents and face photos.
Paystack	Processes payments and payouts. Receives your email, payment amount and, for payouts, your bank account details. Card details go to Paystack directly, not to us.
Google	Two separate uses: Gemini generates and marks exams (receives exam questions and your answers — see section 4), and Gmail's mail servers deliver our emails (receive your email address and the message, e.g. your sign-in code).
Exchange-rate provider	We fetch a USD→NGN rate to price payments. No personal data is sent.
Expo	Builds and distributes our mobile app.

We also share personal data:

with other users, as described in section 6;
with our staff, who review verification submissions, reports and disputes;
where the law requires it — for example a valid request from a court, regulator or law enforcement — or to establish, exercise or defend legal claims, or to prevent fraud or harm;
if our business is sold or reorganised, to the party acquiring it, subject to this policy.

6. What is visible to others

Some information is deliberately public. Please think about what you post.

Your profile — name, photo, country, skills, skill level, university, ratings and reviews — is visible to other users, and talent profiles may appear in search and on the leaderboard.
Portfolio items you mark public can be viewed by anyone with the link, including people without an account, and may be indexed by search engines. You can make an item private at any time. Items you keep private are not shown.
Certificates can be checked by anyone holding the certificate code, which confirms the holder's name, the skill and the date.
Projects, applications and messages are visible to the users involved.
Your identity documents and face photo are never shown to other users. They are only seen by our reviewers.

7. Where your data is stored

Our providers (section 5) operate globally, so your personal data may be stored or processed outside Nigeria, including in the European Union and the United States. Where we transfer personal data out of Nigeria, we do so on a basis permitted by the Nigeria Data Protection Act 2023 (NDPA) — for example because the destination provides adequate protection, because the provider is bound by appropriate contractual safeguards, or because the transfer is necessary to perform our contract with you.

8. How long we keep it

Data	Kept for
Account and profile	While your account is open. See section 9 for deletion.
Identity documents and face photos	Only as long as needed to complete verification and to meet our anti-fraud and legal obligations, after which they are deleted.
Payment and transaction records	Retained after your account is deleted, because tax, accounting and anti-fraud law requires us to keep them.
Messages, projects and submissions	While the account is open; a copy may remain with the other user in the conversation.
Disputes and reports	Kept while needed to resolve the matter and to defend legal claims.
Exam answers, results and certificates	Kept so certificates remain verifiable and results auditable.
Server logs	A short period, for security and troubleshooting.

9. Deleting your data

You can delete your account at any time in Settings → Delete account, on the web or in the app.

Your account is deactivated immediately and permanently deleted after 30 days.
Within that window you can recover it by emailing us from your registered address.
Deletion removes your profile, photo, portfolio, uploaded files, ratings, applications, submissions, chat history and notification history.
Transaction records are retained, as required by tax and anti-fraud law (section 8).
Content already shared with another person — such as a message you sent, or a review you left — may remain visible to them.

Withdraw any wallet balance before you delete your account, and do not delete it while a project, payout or dispute is open. You can also ask us to delete your data by emailing rukkiecodes@gmail.com.

10. Your rights

Under the Nigeria Data Protection Act 2023 (NDPA) you have the right to:

Access the personal data we hold about you, and get a copy.
Correct it if it is wrong — most of it you can edit yourself in your profile.
Delete it (section 9), subject to data we must keep.
Object to or restrict our processing of it, where we rely on legitimate interests.
Withdraw consent where we rely on it — for example, for identity documents. This does not affect processing already carried out.
Portability — receive data you gave us in a commonly used, machine-readable format.
Not be subject to a solely automated decision with significant effects, and to ask for human review — see section 4.

To exercise any of these, email rukkiecodes@gmail.com from your registered address. We will respond within the time the law allows. We may need to verify your identity first.

11. How we protect it

Traffic is encrypted in transit (HTTPS/TLS).
We store no passwords — sign-in uses a one-time code sent to your email, which expires.
We do not store card details; payments are handled by our payment provider.
Access to production data is restricted to staff who need it. Verification submissions are reviewed only by authorised reviewers.
Payout bank accounts are confirmed with the payment provider before use.

No system is perfectly secure. Keep access to your email address secure — it is the key to your account. If you believe your account has been compromised, contact us immediately. If a breach occurs that is likely to put your rights at risk, we will notify you and the Nigeria Data Protection Commission (NDPC) as the law requires.

12. Young people

QueenSkiilia is for people aged 16 and over. If you are under 18, you may only use it with the consent and supervision of a parent or guardian, who is responsible for your use of it.

We do not knowingly collect personal data from anyone under 16. If you believe a child under that age has given us personal data, contact rukkiecodes@gmail.com and we will delete it. A parent or guardian may contact us at any time to see, correct or delete their child's data.

13. Cookies

On the website we use a small number of strictly necessary cookies — mainly a secure, HTTP-only cookie that keeps you signed in. Without it you could not stay logged in.

We do not use advertising or third-party tracking cookies, and we do not profile you for advertising. The mobile app does not use cookies; it stores your sign-in token securely on your device.

14. Changes to this policy

We may update this policy — for example when we add a feature or change a provider. If a change is material we will tell you in-app or by email before it takes effect. The date at the top shows when this version came into effect.

15. Contact and complaints

QueenSkillia Ltd (RC 9666003)
rukkiecodes@gmail.com

If you are unhappy with how we have handled your personal data, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).