Privacy Policy
Effective date: July 5, 2025 · Last updated: July 24, 2026
1. Who We Are
Soro is a live, small-group Yorùbá conversation programme for heritage-speaking adults, operated by Soro Africa Limited, a company registered in Nigeria (Company Registration No. 9597096), based in Lagos, Nigeria ("Soro," "we," "us," or "our").
This Privacy Policy explains how we collect, use, share, and protect your personal data when you visit sorobiyoruba.com, enrol in a class, or otherwise interact with our services (the "Service"). It is written to comply with the Nigeria Data Protection Act, 2023 ("NDPA")and the regulations of the Nigeria Data Protection Commission ("NDPC").
By using the Service, you agree to the collection and use of information as described here. If you do not agree, please do not use the Service.
2. Information We Collect
a) Information you give us directly
- Full name, email address, and phone/WhatsApp number, collected when you sign up or enrol
- Yorùbá proficiency level or learning goals, if you share them during onboarding
- Payment-related details necessary to process your subscription (see Section 4; we do not store your card details ourselves)
- Any messages you send us (e.g. support requests, feedback, WhatsApp conversations)
b) Information collected automatically
- Usage data: pages visited, class bookings, attendance records, credit balance and consumption history
- Device and browser information, IP address, and basic analytics (via cookies; see Section 8)
- Audio/video recordings of your class sessions, which we make for quality assurance and training purposes
c) Information from third parties
- Payment confirmation data from our payment processor, Paystack
- Where applicable, calendar/booking confirmations if you connect a calendar to schedule classes
We do not knowingly collect information from anyone under 18. Soro is intended for adult learners only.
3. How We Use Your Information
We use your data to:
- Create and manage your account, plan, and credit balance
- Schedule you into an Ẹgbẹ́ Sọ̀rọ̀ (learning group) and share necessary details with your assigned Atọ́nísọ̀nà (guide) so classes can run
- Process payments and send receipts
- Send class reminders, scheduling updates, and service communications by email and/or WhatsApp
- Monitor and improve the quality of our classes and platform
- Respond to your questions and support requests
- Meet our legal and regulatory obligations
4. Legal Basis for Processing
Under the NDPA, we rely on the following legal bases:
- Performance of a contract: to deliver the classes and features you've signed up for
- Consent: for optional communications such as marketing updates (you may withdraw this at any time)
- Legitimate interest: to improve our Service and keep it secure
- Legal obligation: where required by Nigerian law (e.g. tax and financial record-keeping)
5. Who We Share Your Information With
We do not sell your personal data. We share limited data with trusted service providers who help us run Soro, including:
| Provider | Purpose | Data Involved |
|---|---|---|
| Paystack | Payment processing | Payment/billing details (Soro never sees or stores your full card number) |
| Supabase | Secure database hosting for our app | Account, booking, and progress data |
| Emailit | Sending transactional emails (receipts, reminders) | Name, email address |
| Atọ́nísọ̀nà (guides) | Running your Ẹgbẹ́ Sọ̀rọ̀ class | Name, contact info, attendance |
Each of these providers is contractually or by design restricted to using your data only to provide their service to us.
WhatsApp Groups: Communication for your Ẹgbẹ́ Sọ̀rọ̀ (learning group) is conducted through a dedicated WhatsApp group. By joining this group, your WhatsApp phone number will be visible to your Atọ́nísọ̀nà (guide) and to the other learners in your group, in the same way it would be in any WhatsApp group. Joining this WhatsApp group is optional. You will be sent a group invite link, and choosing to join constitutes your agreement to have your number visible to other members as described above. If you would prefer not to join, please contact us to discuss alternative arrangements for receiving class communications.
6. International Data Transfers
Some of our service providers (including our database host, Supabase) may store or process data on servers located outside Nigeria. Where this happens, we take steps to ensure your data receives a comparable level of protection to that required under the NDPA, including relying on providers with recognised security and data protection standards.
7. Data Retention
We retain your personal data for as long as your account is active, and for a reasonable period afterward to meet legal, accounting, or dispute-resolution needs. You may request deletion of your account data at any time (see Section 9), subject to any records we are legally required to keep.
8. Cookies and Analytics
Our website uses cookies and similar technologies to keep you logged in, remember preferences, and understand how visitors use the site. We also use third-party analytics and advertising tools that set their own cookies and collect usage data on our behalf, including Google Analytics and Google Tag Manager, the Meta (Facebook) Pixel, and PostHog. These help us measure how the site and our marketing perform and improve the experience. Some of these providers may process your data outside Nigeria. You can control or block cookies through your browser settings; disabling some cookies may affect site functionality.
9. Your Rights
Under the NDPA, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data ("right to be forgotten"), subject to legal limits
- Object to or restrict certain processing
- Request a copy of your data in a portable format
- Withdraw consent at any time where processing is based on consent
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC)
To exercise any of these rights, contact us at speak@sorobiyoruba.com.
10. Data Security
We use reasonable technical and organisational measures (including encrypted storage and access controls) to protect your data against unauthorized access, loss, or misuse. No system is completely secure, and we encourage you to use a strong, unique password for your account.
11. Children's Privacy
Soro is designed for adult learners. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, please contact us so we can delete it.
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will post the updated version on this page with a revised "Last updated" date, and where changes are significant, we will notify you directly.
13. Contact Us
If you have questions about this Privacy Policy or how we handle your data:
Soro Africa Limited
Lagos, Nigeria
Email: speak@sorobiyoruba.com