Privacy Policy

1. Overview

FlutterFlow SA Ghana ("we," "our," or "us") provides education, mentorship, and digital cohort management through https://www.flutterflowsaghana.live and associated administrative systems. This Privacy Policy details how we handle, protect, and process user credentials, personal identity, and authentication data across our platform and Google OAuth integrations.

2. Information We Collect

We collect minimal information necessary to guarantee secure authentication and cohort delivery:

• Direct Platform Accounts: Full name, registered email address, and securely hashed passwords or ephemeral verification tokens.
• Google OAuth Authentication Data: When authenticating via Google Sign-In, our platform requests only standard profile scopes (openid, email, profile):
  • Your verified Google email address (used for user identification and account notifications)
  • Your display name (used to personalize your dashboard and interface)
  • Your profile photo URL (used strictly for account avatar rendering)
• Operational & Audit Logs: Timestamped authentication records, IP addresses, and browser signatures to secure administrative interfaces against unauthorized intrusion.

3. How We Use Information

All collected data serves direct educational and authentication functions:

• Authenticating users and verifying role-based access permissions (Superadmin, Admin, Instructor, Student).
• Sending time-sensitive security notifications, including One-Time Passwords (OTPs) and account confirmations.
• Managing educational cohort enrollments, lesson progress, and completion credentials.
• Auditing administrative actions to maintain platform integrity and security compliance.

5. Data Storage, Security & Retention

We store application records in encrypted PostgreSQL databases utilizing industry-standard TLS encryption in transit and AES-256 encryption at rest. Authentication cookies are strictly provisioned with HttpOnly, SameSite=Lax, and Secure flags.

Ephemeral verification codes expire automatically within 10 minutes. Authentication sessions remain valid only for their configured lifespan or until manual termination by the user.

6. User Rights & Data Deletion

Users retain full autonomy over their personal information and credentials:

• You may request an export of your stored personal and academic record at any time.
• You may request the complete deletion of your account, profile, and associated credentials.
• You can revoke Google OAuth access granted to FlutterFlow SA Ghana at any moment directly through your Google Account Permissions Manager.

To request account or data removal, contact our support team at support@flutterflowsaghana.live. All legitimate deletion requests are processed and confirmed within 7 business days.