Privacy notice
Last updated: 7 October 2026
The short version
- We collect what GoodPlace needs to work: your account details, your study progress and what you upload.
- We don't sell your data, show ads or use tracking cookies.
- When you use an AI feature, the text or images involved are sent to an AI provider (Anthropic, Google, OpenAI or DeepSeek) to produce the answer.
- Paystack handles payments. We never see or store your full card details.
- You can ask us to show you, correct or delete your data at any time.
Who we are
GoodPlace is a study app for medical students, run by Eze Goodluck in Nigeria ("we", "us"). This notice explains what personal data GoodPlace collects, why, and your rights under the Nigeria Data Protection Act 2023. Contact us at goodplace.support@gmail.com.
What we collect
- Account details: your email address, username and password (stored securely by our database provider; we can't read it), and, if you give them, your display name, school, course and year of study.
- If you sign in with Google: your name, email address and profile picture from your Google account, used only to create your GoodPlace account and sign you in. We don't access your Gmail, contacts, Drive or any other Google data, and we never post on your behalf. You can disconnect Google from GoodPlace in Security, or remove GoodPlace's access at myaccount.google.com/permissions. GoodPlace's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
- Sign-in sessions: to keep you signed in and to show the devices on your account, we store a sign-in session for each device, with the time it was created and last used and the browser it came from. We never store your password in your browser.
- Your study data: answers, scores, XP, streaks, flashcards, notes, lessons, study plans, settings and the specialties you create.
- What you upload: lecture slides, documents, photos and text you add to Lessons or other features, and the questions, cards and lessons made from them.
- Places and friends: the Places (classes and study groups) you join, people you follow, items you share with a Place and reports you make.
- Leaderboard totals: weekly and total XP, questions answered, streak and rank. These are visible to other signed-in users. Your answers, notes and cards are not.
- AI usage: how many AI requests you make, their size and the Pulse they use, so we can run your allowance fairly.
- Payments: your plan, payment dates, amounts and the reference codes Paystack gives us. Paystack processes your card or bank details; we never receive your full card number.
Why we use it
- To run your account and keep your progress in sync across your devices.
- To turn your uploads into questions, flashcards and lessons, and to answer your AI requests.
- To run plans, Pulse and payments, and to prevent abuse and fraud.
- To show leaderboards, and to share items with Places you choose to join.
- To fix problems and improve GoodPlace.
We do this to provide the service you signed up for and, where needed, with your consent (for example, when you choose to share with a Place). We also keep payment records where the law requires it.
Who we share it with
We only share data with the services that make GoodPlace work:
- Supabase stores accounts and study data.
- Vercel and Cloudflare host the website.
- AI providers receive the text and images of your AI requests and uploads in order to answer them. Depending on the task, this is Anthropic (Claude), Google (Gemini), OpenAI or DeepSeek. Each gets only what that request needs. We use their paid developer services, not their consumer apps.
- Paystack processes payments and keeps its own records under its own privacy policy.
These providers may store data outside Nigeria, for example in the United States, Europe or China. We choose providers that protect data to a standard comparable to Nigerian law. We never sell personal data, and we only disclose it to authorities when the law requires us to.
On your device
GoodPlace saves a few things in your browser: your sign-in, an offline copy of the app, your theme and other preferences, and a small cookie that unlocks your class content. There are no advertising or tracking cookies.
How long we keep it
We keep your data while your account is open. You can delete your account yourself at any time from Settings → Account & help, or ask us to. Your account and study data are deleted straight away, including items you shared with a Place, and any copies in backups are gone within 30 days. Payment records may be kept for up to 6 years where tax and financial laws require it.
Your rights
Under the Nigeria Data Protection Act 2023 you can:
- ask for a copy of your personal data,
- ask us to correct it or delete it,
- object to or limit how we use it, and withdraw consent you've given,
- ask for your data in a form you can move to another service,
- complain to the Nigeria Data Protection Commission (ndpc.gov.ng) if you think we've mishandled it.
Email goodplace.support@gmail.com from the address on your account and we'll reply within 30 days.
Security
Data travels over encrypted connections. Each student can only reach their own private data, and payment and Pulse records can only be changed by our server. No system is perfectly secure. If a breach affects you, we'll tell you and the regulator as the law requires.
Children
GoodPlace is made for university students and isn't meant for anyone under 16.
Changes
If we change this notice in a way that matters, we'll tell you in the app before it takes effect.