Legal

Privacy policy

Last updated: 20 September 2026

DrbenAI is a learning and communication tool for children, run by Finlig Digital Ltd in Nigeria ("we", "us"). Children's information deserves extra care, so we collect as little as we can and keep it only as long as it is useful to the family.

1. Who can create an account

Only an adult may create a DrbenAI account: a parent, a legal guardian, or a teacher acting with the school's authority. Children use DrbenAI through an adult's account and never sign up themselves.

By adding a child, you confirm you are that child's parent or guardian, or that you have their parent or guardian's permission.

2. What we collect

From the adult

• Name, email address and password (stored only as a secure hash).
• Whether you are a parent, guardian or teacher.
• A four-digit PIN you choose, stored as a secure hash, so children can't leave their screen.
• Lessons, tests and stories you write, and the pictures you upload for them.

About the child

• A nickname or first name and an age. Nothing more identifying.
• Your answers to the questionnaire about how the child learns: letters, reading, numbers, communication, playing with others, everyday skills, focus time, learning style, interests and goals.
• Results of the short quick check: which items were answered correctly and how long they took.
• Learning activity: lessons, stories and games opened and finished, answers, hints used, stars earned, and how the child said a session felt.
• Messages between the child and Dr Ben.

Optional background about the child

• Sex, state and local government area, school class or stage, and the main language at home. We never ask for a school name or an address.
• Support so far: whether the child has ever been assessed by a doctor, psychologist, therapist or special educator, and whether they have been diagnosed with a developmental, learning or neurological condition (and which). This is sensitive health information. Every one of these questions can be skipped or answered "Not sure".

Technical

• A session cookie so you stay logged in. We don't use advertising or tracking cookies.
• Failed login attempts with the IP address, kept briefly to block password guessing.

3. What we never ask for

We don't ask for a child's full name, photograph, address, school name, date of birth or phone number. Dr Ben is instructed never to ask a child for personal details.

DrbenAI does not diagnose anything. The levels and summaries it shows describe learning activity in the app, and the concern levels described in section 6 are simple screening summaries of what a parent told us. They are not clinical assessments or measures of a child's intelligence, and they should not be treated as such.

4. How we use information

• To set up where Dr Ben starts with a child, and to adjust as the child learns.
• To suggest suitable lessons, stories and games, and to show you progress in plain language.
• To let you read what your child said to Dr Ben, and to flag messages suggesting the child may be hurt or unsafe.
• To keep DrbenAI working, secure and free of misuse.

We do not sell information, and we do not show advertising.

5. Voice and chat

Speaking and listening happen in the browser on the device itself. DrbenAI does not upload or store recordings of a child's voice. When a child speaks, the browser turns the speech into text, and only that text reaches us.

Chat text between the child and Dr Ben is stored so parents and teachers can read it, and is sent to our AI provider to generate a reply. It is sent without names or account details attached. The optional background and support-so-far answers are never sent to the AI provider.

6. The Nigeria research dataset

We are building a dataset to understand children's learning needs across Nigeria, so that DrbenAI and others can serve them better. A child is only included if you tick the optional research box on the questionnaire. It is off unless you tick it.

If you do, we add one record for your child containing:

• A code such as DBN-000124 that is not built from your child's name.
• Age, sex, state, main language and school class. (Your local government area is kept in our internal copy only.)
• Four levels that DrbenAI works out from your answers, each LOW, MODERATE or HIGH: reading, communication, social and development. We compare your answers with what is typical for the child's age. We also record the main area of concern.
• Whether your child has had a professional assessment, and any existing diagnosis you told us about.

A record never contains your child's nickname, your name, your email address or any contact detail.

Because age, state and language together could point to a child in a very small community, we will share only grouped, anonymised results with education and research partners, never individual records that could identify a child. [Confirm this commitment with your lawyer before you rely on it.]

Taking your agreement back. Untick the box and save the questionnaire, and your child is left out of future exports. Deleting your child removes the record entirely. We can't take information back out of grouped, anonymised summaries that have already been made.

7. Helping DrbenAI improve

When you create an account you can tick a separate optional box to help DrbenAI get better for other children. It is off unless you tick it, and you can change your mind at any time.

If it is on, we count which explanations helped a child get an answer right. We store the counts only: which explanation was shown, and whether it worked. No names, nicknames, ages or any detail about your child is stored with them.

We do not use children's data to train AI models.

8. Pictures, lessons and stories you add

The lessons, tests and stories you write are private to your family. If you share a lesson with the DrbenAI library, other families can use it after we review it. Only the lesson content is shared, never anything about your child.

Pictures you upload are resized, stripped of hidden data such as the location where a photo was taken, and stored on our server. They are private to your family. A picture becomes visible to other families only if it is part of a lesson you share and we approve. Please don't upload photos that show a child's face to a lesson you plan to share. You can delete any picture at any time in "My pictures".

Most of the pictures in DrbenAI's own library are Twemoji graphics, licensed under CC-BY 4.0.

9. Who we share with

• Our AI provider (Anthropic), which generates Dr Ben's replies and explanations from the text sent to it.
• Our hosting provider, which stores the database and uploaded pictures that run DrbenAI.
• Authorities, where the law requires it, or where it is necessary to protect a child from serious harm.

That's all. We don't share with advertisers, data brokers or analytics companies.

10. How long we keep things

We keep a child's information while the account is active. When you delete a child, everything about that child is removed immediately: their profile, questionnaire answers, background answers, quick-check results, learning activity, and chat history, and the child's research record.

Chat messages are also cleared periodically as part of routine housekeeping. Failed login records are removed within a short period.

11. Your rights and controls

You can, at any time:

• See what DrbenAI holds about your child, on the child's page.
• Correct the questionnaire answers or redo the quick check.
• Read every message between your child and Dr Ben.
• Delete a child and everything stored about them, with one button.
• Turn the research and "help DrbenAI improve" options on or off.
• Delete pictures you uploaded, and lessons and stories you wrote.
• Ask us to delete your own account and all children on it.

Under Nigeria's Data Protection Act you also have the right to access your information, ask for corrections, object to certain uses, withdraw consent, and complain to the Nigeria Data Protection Commission. Information about health is sensitive personal data, and we use it only with your consent.

12. Security

Passwords and PINs are stored as secure hashes, never as plain text. Access is limited to your own account. Uploaded pictures are served only through the app after checking who is asking. Forms are protected against cross-site request forgery, and database queries use prepared statements. We ask every site running DrbenAI to serve it over HTTPS.

No system is perfectly secure. If a breach ever affects your information, we will tell you and the relevant authority promptly.

13. Changes and contact

If we change this policy in a way that matters, we will say so on this page and, where we can, by email.