Privacy Policy
Last updated 28 September 2026
This policy explains how Final Year (“we”, “us”) handles personal information when you use finalyear.ng, in line with the Nigeria Data Protection Act 2023. We are the data controller. For anything in this policy, email support@finalyear.ng. Our Terms of Service also apply.
What we collect
- Account: your email address and name. If you sign in with Google, Google shares your name and email address with us.
- Project details: your university, department, degree, referencing style, and the cover page details you enter, such as your matric number, your supervisor’s name and the submission date.
- Your work: topics, chapter outlines and text, earlier versions of chapters, the references in your project, and your conversations with the assistant.
- Uploaded files: documents and images you add to a project, and the text we read from them so the assistant can use them.
- Payments: the payment reference, amount, date and the words bought. Card and bank details are handled by Paystack and never reach us.
- Usage: how many words each action used and whether it succeeded, to keep your balance right and fix problems.
- Technical: your IP address is used when a request arrives to limit abuse. For people who are not signed in, only a one-way scrambled form of it is kept, to count daily use.
Why we use it
- To provide the service you signed up for: your account, projects, drafts, the assistant, references, downloads and payments (performing our contract with you).
- To keep the service secure and fair, prevent abuse and fix faults (our legitimate interests).
- To understand, in general terms, how the service is used so we can improve it (our legitimate interests). We record events such as “a project was created”, never the content of your work.
- To meet legal duties, such as keeping payment records.
We do not sell your information, and we do not use your work to train AI models.
Who processes it for us
We use these services to run Final Year. Each receives only what it needs for its part:
- Supabase: our database, file storage and sign-in. Your account, projects and files are stored in its data centre in Frankfurt, Germany.
- Vercel: hosts the website and the app.
- Groq: runs the AI models. When you draft a chapter, ask the assistant or read an uploaded file, the text and details needed for that request are sent to Groq to produce the answer.
- Serper: when the assistant searches the web for you, the search words are sent to Serper, which returns Google results.
- Crossref: citation and title details are looked up in Crossref’s public records to find and check references.
- Paystack: processes your payments.
- Google: sign-in with Google, and Google Analytics, which measures visits and the product events described above.
Some of these providers process data outside Nigeria, including in the European Union and the United States. We use providers that protect personal data to recognised standards, and send them only what the service needs.
Cookies and storage in your browser
- A sign-in cookie keeps you signed in. The site cannot work without it.
- Your browser’s storage keeps an unfinished project setup and your download layout preferences on your device.
- Google Analytics sets cookies to measure visits. You can block them with your browser’s tracking protection or a content blocker, and Final Year will still work.
How long we keep it
- Your account and projects are kept until you delete them or ask us to delete your account.
- Deleting a project deletes its chapters, earlier versions, references, conversations and files.
- Files uploaded during a project setup that is never finished are deleted after seven days.
- Payment records are kept for as long as tax and accounting law requires, even after an account is deleted.
Your rights
Under the Nigeria Data Protection Act you can:
- ask for a copy of the personal information we hold about you;
- have it corrected, and correct most of it yourself in Settings and in your projects;
- have it deleted, or ask us to delete your account;
- object to or restrict how we use it, and withdraw consent where we rely on it;
- take your work with you: every project can be downloaded as a Word document.
Email support@finalyear.ng from the address on your account and we will respond within the time the law allows. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.
Security
Information travels encrypted between your browser and our services. Each student’s projects, files and payments can be read only through their own account, and uploaded files are checked before they are stored.
Children
Final Year is meant for students of higher institutions. If you are under 18, use it only with the permission of a parent or guardian.
Changes
If we change this policy we will update the date above, and tell you on the site before a significant change takes effect.
