Privacy Policy

1. What we collect

Data	Why we collect it
Name, email, password (hashed)	To create and secure your account
Role, institution, cohort	To show you the right dashboard and route evidence to the right trainer
Evidence you upload (files, YouTube/Google Drive links, descriptions)	To build your portfolio and let a trainer verify it
Verification feedback and marks	To record the outcome of a trainer's review
My Profile: photo, phone, location, hobbies, career objective, personal profile, skills, education history, industrial attachments, certificates, course description and expectations	Optional — to power the CV Builder and your public CV, if you choose to fill it in
Identity & registration: national ID number, date of birth, external exam registration code	Optional — for official records and the Export Profile form only. These never appear on your public CV share link — they're only ever shown on the Export Profile form, which stays behind your login and is never a public link.
Occupational Standards (OS) and Curriculum documents you upload	Optional — a personal reference copy for your own use; these are never treated as evidence and never affect any mark
Referee name, role, organisation, and contact details	Optional — shown on your CV if you add one; this is another person's contact information, provided by you
Testimonial text, photo, or video	Optional — for the public success-story feature, if you choose to submit one
Payment amount, plan, and a payment-processor transaction reference (Pesapal or Paystack, whichever is active)	To activate and track your Premium subscription — we never receive or store your card or mobile money number; the payment processor handles those directly
Contact form submissions	To respond to your enquiry

2. How we use it

Your data is used to operate Skillsfolio: authenticating you, displaying your portfolio or verification queue, routing evidence to the correct trainer, generating your CV Builder output and Export Profile form if you use them, processing Premium payments, and letting coordinators and the national admin oversee their own institution(s). We don't sell your data or use it for advertising.

3. Who can see it

• Trainees see their own evidence and feedback.
• Trainers see evidence submitted by students in cohorts assigned to them, and their own uploads.
• Institution coordinators see users, cohorts, and evidence activity within their own institution only.
• The national admin can see data across all institutions, for oversight of the programme nationwide.
• National support staff can see account names and emails needed to review Premium requests, but not evidence, cohorts, or My Profile content.
• Anyone with a CV share link can view the profile and verified-evidence information included on that CV — without logging in. This is the one place Skillsfolio data is intentionally made accessible outside the normal role boundaries, and it only happens if you generate and share that link yourself. Your national ID number, date of birth, and exam registration code are never included on this link, no matter what.
• The Export Profile form (which does include those identity fields) is the opposite of a share link — it's only ever generated for whoever is currently logged into that account, and isn't accessible via any link without being logged in as that person.

If you're under 18, you can enter "Minor" in the date of birth field instead of your actual date of birth — Skillsfolio doesn't require a national ID number from anyone who doesn't have one yet.

Outside of the CV share link, these boundaries are enforced by the system itself — an account at one institution cannot see another institution's users or evidence.

4. Where it's stored

Data is stored in a MySQL database operated by (or on behalf of) the national administration, and uploaded files are stored on the same server — except that older, already-verified evidence files may be moved to secure third-party cloud storage (Cloudflare R2) once they're no longer likely to need frequent access, purely to manage server capacity. This only changes where the file physically resides; it doesn't change who can access it or how. Passwords are never stored in plain text. Payment card and mobile money details are handled entirely by the payment processor's own systems (Pesapal or Paystack) and never pass through or get stored on Skillsfolio's servers.

5. How long we keep it

Account and evidence data is kept for as long as your account is active, to preserve your training record. My Profile fields, referees, and testimonials are kept until you update or remove them, or ask for your account to be closed. Contact form messages are kept until reviewed and can be deleted by the national admin. Payment records are kept as a financial record of the transaction.

6. Referees and other third-party information

If you add a referee to My Profile, you're providing us with another person's name and contact details, not your own. Please make sure they're comfortable being listed as a referee, and that you have a reasonable basis for sharing their contact information, before adding them — particularly since that information may appear on a CV link you share publicly.

7. Your rights

You can ask your institution coordinator or the national admin to correct inaccurate information, or to close your account. You can also remove or update anything in My Profile, delete a referee, or ask to have a published testimonial taken down, at any time. Reach out through the Contact Us form.

8. Changes to this policy

We may update this policy as Skillsfolio evolves. Material changes will be reflected here with an updated date.