Legal

Privacy Policy

FailFast EDU | Effective: October 2026

This policy explains how FailFast EDU collects, uses, stores, and protects personal data for schools, teachers, students, and website visitors. It applies only to failfastedu.com and the FailFast EDU school platform, and is governed by the Nigeria Data Protection Act (NDPA) 2023.

Summary Of Key Points

  • FailFast EDU is a school-only learning platform. All student activity stays within the school environment.
  • Each school runs in its own private space. Student data is not shared with other schools or used for advertising.
  • School admins manage teacher and student accounts and are responsible for consent where applicable.
  • We collect only data needed to operate the platform, support schools, and track student learning progress.
  • We do not sell personal data to third parties. Some service providers may store or process data outside Nigeria subject to NDPA safeguards (see Section 7).
  • Billing records are retained for 7 years per Nigerian tax law; other account data follows the retention rules in Section 8.
  • You can exercise NDPA rights by contacting [email protected].

1. Scope of This Policy

This Privacy Policy applies to the FailFast EDU website at failfastedu.com and the FailFast EDU school learning platform operated by FAILFAST PIONEER SYSTEMS LTD. It covers the school waitlist, school admin accounts, teacher accounts, and student accounts.

FailFast EDU is a school-only learning environment. This policy does not cover any product outside FailFast EDU. Students and parents never pay and never play for money. The school may be billed for accounts above the free allocation, and the school may hold learning tokens for use inside the school. Those tokens never enter Arena, never move to another school, and cannot be paid out.

2. Who We Are

FAILFAST PIONEER SYSTEMS LTD (RC: 9433743) is the data controller for the FailFast EDU website and platform. Our registered address is 6, Rotimi Street, Yaba, Lagos, Nigeria. We operate under the Nigeria Data Protection Act 2023 (NDPA 2023) and the regulations of the Nigeria Data Protection Commission (NDPC).

Contact: [email protected]

3. Data We Collect

We collect the following categories of data depending on your role:

Website visitors and waitlist submissions

  • Name and email address (submitted through the school waitlist form)
  • Estimated school size (selected from a menu)
  • Browser and device type, IP address, and referring URL collected automatically through cookies and analytics tools

School admin accounts

  • School name, school type, and approximate student population
  • Contact name, email address, and role (e.g. principal, IT coordinator)
  • Phone number (optional, for onboarding support)
  • Account activity and session data
  • Billing contact information (for paid school accounts)

Teacher accounts

  • Name and email address
  • Subject areas and class levels assigned
  • Quizzes and practice sessions created
  • Account activity and session data

Student accounts

  • Name (or a school-assigned pseudonym) and student identifier
  • Class level and subject assignments
  • Quiz attempts, question responses, scores, Grit Points, and Success Points
  • Tier and ranking within the school
  • Account activity and session data
  • Device type and browser (to support low-data access features)

School learning tokens

For school learning tokens, we keep the school's token purchases and allocations to teacher and class budgets, rewards paid to students, and tokens returned at the end of the term. Students never pay for tokens. These records stay in the school and are visible to the School Admin. They are not visible to other schools. If a Teacher funds a self-funded reward fund, we record the purchase and the one-way transfer into the fund. The School Admin sees the reward given, not the Teacher's purchases.

4. How We Use Data

  • To operate and improve the FailFast EDU platform
  • To display student learning progress to the student and their school teachers and admin
  • To generate class-level and school-level analytics for teacher dashboards
  • To respond to support requests from school admins and teachers
  • To follow up on school waitlist and pilot applications
  • To monitor platform security, detect abuse, and investigate incidents
  • To comply with our legal obligations under Nigerian law

We do not use student data for advertising. We do not sell personal data to third parties.

5. School Roles and Responsibility

The School Admin is responsible for creating and managing accounts for teachers and students within their school. When a School Admin creates a student account, the school is responsible for ensuring that the appropriate notice has been given to students (and parents or guardians of students under 18) about how data will be used in the platform.

FAILFAST PIONEER SYSTEMS LTD acts as a data processor for student learning data in relation to the school. The school acts as the data controller for its own student data in the context of your school's administration of the accounts.

6. Student Data

Student data is isolated to the school that created the account. Students from one school cannot see data from another school. A student cannot interact with users outside their own school unless the school admin explicitly enables inter-school features (such as school battles).

Student learning data — quiz attempts, scores, Grit Points, Success Points — is visible to:

  • The student themselves
  • Teachers assigned to the student's class or subject
  • The school admin
  • FAILFAST PIONEER SYSTEMS LTD staff, for support and platform operation purposes only

Student data is not shared with other schools, other students outside the same school, or third parties for commercial purposes.

7. Data Sharing

We may share data with:

  • Service providers who assist us with platform hosting, email delivery, analytics, and support tools. These providers are bound by data processing agreements and may not use the data for their own purposes.
  • Legal or regulatory authorities when we are required to do so by Nigerian law, court order, or a valid legal process.
  • Partner schools in the pilot program may be cited as case studies only if the school admin gives explicit written permission.

We do not share personal data with advertisers, data brokers, or commercial third parties.

FailFast EDU hosts platform data on Oracle Cloud Infrastructure (OCI). We also use other third-party infrastructure providers to operate the platform. Some of these providers store or process data on servers located outside Nigeria. Where this occurs, we ensure that appropriate safeguards are in place as required by the NDPA 2023, including data processing agreements with those providers that bind them to data protection standards consistent with Nigerian law.

8. Data Retention

  • Waitlist submissions are retained until the waitlist program ends or you request removal.
  • Student personal data is kept while the school is using FailFast EDU. After the school ends service, that personal data is deleted within 60 days unless the school asks for earlier deletion.
  • The school's token ledger and token-pack purchase records are financial records and are kept for 7 years. Student personal data linked to them is still deleted on the 60-day timeline.
  • After 60 days of account closure, personal data is deleted or anonymized, except where retention is required by law (e.g. billing records).
  • Billing records are retained for 7 years as required by Nigerian tax law.

9. Security

We apply industry-standard security measures including encrypted data transmission (HTTPS), access controls, and authentication requirements for all school accounts. We limit access to personal data to staff who need it to perform their job.

No internet-based service can guarantee absolute security. If you believe your account has been compromised, contact us immediately at [email protected].

10. Children and Minors

FailFast EDU is designed for use by school students, including those under 18. Student accounts are created and managed by the School Admin, not by students or parents directly. The school is responsible for obtaining any required parental or guardian consent before adding a minor's details to the platform.

We do not knowingly collect personal data from children independently of a school account. If a parent or guardian believes their child's data has been added without their knowledge, they should contact the school admin first. If the issue cannot be resolved at the school level, contact us at [email protected].

11. Your Rights

Under the Nigeria Data Protection Act 2023, you have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal retention obligations)
  • Object to certain types of processing
  • Request that we restrict processing while a dispute is being resolved
  • Lodge a complaint with the Nigeria Data Protection Commission (NDPC)

To exercise any of these rights, contact us at [email protected]. For student data rights, parents or guardians should contact the school admin in the first instance.

12. Cookies and Analytics

The FailFast EDU website uses cookies and similar technologies for essential site functions and anonymous analytics (e.g. page views, session duration). We do not use advertising cookies or track users across other websites.

You can disable non-essential cookies through your browser settings. Disabling cookies may affect some features of the site.

13. Breach Notification

In the event of a data breach that poses a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of the breach, in line with NDPA 2023 requirements. We will also notify affected schools and individuals as soon as reasonably practicable.

14. Nigeria Data Protection Act (NDPA) 2023

FAILFAST PIONEER SYSTEMS LTD processes personal data in compliance with the Nigeria Data Protection Act 2023 (NDPA 2023) and the regulations published by the Nigeria Data Protection Commission (NDPC). This policy reflects our obligations as a data controller and, where applicable, as a data processor for school-managed student data.

15. Changes to This Policy

We may update this policy as the platform evolves. When we make material changes, we will update the effective date at the top of this page and notify school admins by email. Continued use of the platform after the effective date of a revised policy constitutes acceptance of the changes.

16. Contact

For privacy questions, data requests, or concerns:
FAILFAST PIONEER SYSTEMS LTD (RC: 9433743)
6, Rotimi Street, Yaba, Lagos, Nigeria
Email: [email protected]