Institutional Privacy Policy

Wisdom Tower Academy (“Wisdom Tower”, “we”, “our”, or “us”) operates the primary educational platform accessible via wisdomtower.et and its sub-domains. For the purposes of applicable data protection legislation and institutional standards, Wisdom Tower Academy is the official Data Controller responsible for the processing and protection of your personal and academic information.

If you have questions regarding this charter or wish to exercise statutory data subject rights, you may reach our Data Protection Desk directly at: support@wisdomtower.tech

We collect only the essential data necessary to deliver personalized, uninterrupted educational services across our hubs:

In alignment with international privacy standards and Ethiopian legal frameworks, our processing activities rest upon well-defined legal bases:

• Contractual Necessity: Processing required to authenticate your enrollment, unlock purchased packages, record completed chapters, and calculate exam scores.
• Legitimate Institutional Interests: Enhancing pedagogical curriculum quality, diagnosing platform errors, safeguarding against fraudulent bank reference submissions, and preventing illegal scraping of copyrighted material.
• Explicit Student Consent: Optional participation in field leaderboards, scholarship notification updates, or voluntary academic feedback surveys.

Wisdom Tower Academy enforces rigorous technological barriers to shield student records from unauthorized access, alteration, or disclosure:

• Transit Encryption: All HTTP traffic is forcefully upgraded to Transport Layer Security (TLS 1.3 / HTTPS), ensuring eavesdropping protection even on public Wi-Fi or cellular networks.
• Database Vault: Production database clusters are maintained via Supabase with row-level security (RLS) policies ensuring students can only access their own private records.
• Restricted Administrative Access: Academic registrars and staff operate under strict Role-Based Access Controls (RBAC) governed by multi-factor authentication and detailed audit logging.

We partner only with enterprise-grade sub-processors bound by strict confidentiality and data-processing covenants:

• Supabase: Cloud database infrastructure, user authentication, and encrypted receipt asset storage.
• Google Cloud Platform & Vercel: Edge computing servers, static asset delivery, and DDoS mitigation.
• Payment Verification Gateways: Integration services (such as Verify.et) for automated bank reference validation.
• Google Gemini AI: Server-side AI processing for “Explain with AI” question walkthroughs (prompts contain only academic question context; no personal student identity is transferred).

Because Ethiopian students frequently face network volatility or high data costs, our platform uses client-side Service Workers and browser IndexedDB caches to store downloaded chapter summaries, flashcards, and reading progress locally.

This localized data resides entirely on your device and can be cleared at any time through your browser settings or via the platform Preferences panel.

Every enrolled student possesses comprehensive rights regarding their personal data:

• Right to Inspect: View all saved profile details, active package enrollments, and quiz histories inside My Learning and Account Settings.
• Right to Rectify: Update your name, phone number, and study preferences at any time.
• Right to Erasure (Right to Be Forgotten): Delete your account and personal data yourself at any time from the account deletion page or, in the Android app, from Settings > Security. Records of verified payments are kept as described in section 9.
• Right to Opt-Out: Toggle off optional leaderboard visibility to keep your score progress completely private.

For learners enrolled in our secondary curriculum tracks (Grades 9 through 12) who may be under the age of 18, Wisdom Tower Academy enforces protective parameters:

• We do not display public contact details or personal social media handles on secondary leaderboards.
• Parents and legal guardians may inspect or request modification of their dependent student's records by contacting our support desk.
• We provide an entirely educational, ad-free environment without behavioural profiling or commercial solicitations.

Active student accounts and their associated learning histories are retained throughout the active enrollment period to maintain continuous academic records across academic semesters. Transaction records are maintained for a period of five (5) years in compliance with Ethiopian tax and commercial bookkeeping statutes. Dormant accounts with no package enrollments may be purged after two (2) years of persistent inactivity following prior email notification.

If you have inquiries concerning this policy or wish to exercise your data subject prerogatives, please submit a formal request: