Legal · Privacy

Privacy Policy

Last updated: October 11, 2026

Sabifirst (operated from Nigeria) respects your privacy and complies with the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act (NDPA), and the EU General Data Protection Regulation (GDPR) where applicable.

1. Data controller

Sabifirst is the data controller for personal data processed on sabifirst.com. Contact: privacy@sabifirst.com.

2. Data we collect

Account data (name, email), learning activity (paths, progress, quiz answers), subscription records (plan, status, transaction reference), device and usage data (pages viewed, IP address, browser type), and support messages you send us.

3. Lawful bases & purposes

Contract (provide learning accounts and progress tracking); consent (marketing emails, non essential cookies); legitimate interests (security, analytics, improving content); legal obligation (responding to lawful requests).

4. Sharing & processors

Hosting (Hostinger), payments (Paystack, see section 5), embedded video (YouTube, youtube-nocookie.com), and analytics only where enabled. We never sell personal data.

5. Payments: how your money moves

Sabifirst Pro costs ₦2,639.60 per month (our ₦2,500 plan plus the payment processing fee, shown upfront). All payments are processed by Paystack (paystack.com), a PCI-DSS compliant payment processor. When you subscribe, you pay on Paystack's secure checkout with card, bank transfer, or USSD.

Your card number, expiry date, CVV, and bank details go directly to Paystack over encrypted connections. Sabifirst never sees, handles, transmits, or stores your card details. We do not hold them on our servers, in our database, or in our logs. The only payment data we receive is your name, email, subscription status, and transaction reference, which we use to activate Pro and manage your subscription. For how Paystack handles your payment data, see Paystack's privacy policy.

6. Retention & security

Account data is kept while your account is active, then deleted or anonymised within 24 months of closure. Logs are kept up to 12 months. Data is encrypted in transit (TLS) and at rest by our providers, with access limited to authorised staff.

7. Your rights (GDPR / NDPA)

Access, rectification, erasure, restriction, portability, and objection to processing, plus withdrawal of consent at any time. Email privacy@sabifirst.com and we respond within 30 days. You may complain to the Nigeria Data Protection Commission (NDPC) or your EU supervisory authority.

8. Children & international transfers

Sabifirst is not directed at children under 13 (16 in the EU). Data may be processed outside Nigeria/EU by our processors under standard contractual safeguards.

9. Changes

Material changes will be announced in app. Continued use after the effective date constitutes acceptance.