Privacy policy

GoDigit is a platform for learning digital skills, open to children, young people, adults and seniors. This policy explains what data we process, why, for how long, with whom, and how you stay in control of it. It applies to the go-digit.org website and to the GoDigit app.

Last updated: 27 October 2026.

Who is responsible for your data

The data controller is GoDigit, an initiative of EMINI, based in Parakou (Benin). For any question about your data, write to us from the Contact page.

We apply Law No. 2017-20 of 20 April 2018 on the Digital Code of the Republic of Benin, under the supervision of the Personal Data Protection Authority (APDP). For people who use GoDigit from the European Union, we also follow the principles of the General Data Protection Regulation (GDPR).

Our principles

We only collect what GoDigit needs to work.
We never sell, rent or trade any data.
No advertising, no audience measurement and no advertising tracking, on the website or in the app.
Minors are protected by default, with nothing to set up.

The data we process

Your account. First name, last name, email address or phone number, date of birth, country, situation (pupil, student, working…) and interests. For a minor, the email address of their parent or parents. If you choose a password, it is stored in hashed form (Argon2) and nobody can read it, not even our team.

Your profile. Username and, for adults only, a profile photo and a cover image. Minors have a sticker instead of a photo.

What you post and send. Posts, comments, stories, short videos, articles, private messages, voice messages, photos, videos and documents that you choose to share.

Your communities. The communities you create or join: your membership (status, role as owner, moderator, host or member, chosen plan, start and end dates of the period, free trial already used), your membership requests, promo codes used, referrals and what you post in the community. For each community, we also keep its name, description, rules, logo, cover, category, plans and moderation log.

Your learning. Progress in courses and paths, exam scores (visible to you only), books read and reading progress, badges, registrations for lives, workshops and classes, attendance at lives (arrival and departure times).

Your payments. Order reference, price and currency set by the creator, conversion rate applied, service fee, total amount paid in CFA francs, date, product bought and chosen payment method (Mobile Money or card). When a parent pays for their child, the order keeps both accounts. Card numbers and Mobile Money codes are entered with our payment provider and never pass through our servers.

Your earnings, if you sell. For a creator (teacher, professional, author, community owner): sales, earnings, referral earnings, withdrawal requests, and the Mobile Money operator and phone number that receive your withdrawals.

Your devices. For encrypted messaging: the name of each device linked to your account (app or browser), the date it was added and its public keys. Private keys are created on the device and never leave it, except in a backup encrypted with your recovery code (see below).

Technical data. IP address and login information, used for security (limiting login attempts, blocking abuse). In the app, a notification token to send you the notifications you have turned on.

Your activity, for your recommendations. What you do on GoDigit (posts seen and their position in the feed, opens, reactions, comments, shares, saves, posts hidden or reported, searches, share of videos watched, categories viewed) is used only to rank your feed and suggest content and communities to you. No advertising, no sale, no sharing with other companies. For a minor, the text of their searches is never kept. This log deletes itself after the period set by our team (180 days today).

Parental controls. For a minor: the settings chosen by their parents (social space, photos, videos, sounds and links allowed, games, schedule, daily play minutes), their play minutes for each day, the courses or exams their parents suggest, their "I need help" alerts and the location shares they have accepted.

What we do not collect. Your contacts, your browsing history outside GoDigit. Your location is never tracked: it is only recorded if a minor accepts a request from their parent or chooses to attach it to an "I need help" alert, and it is deleted after 24 hours.

Why we use it

To run your account and the services you use, including communities, creators' sales and withdrawals (performance of the service you asked for).
To protect minors, moderate content and prevent abuse (legal obligation and legitimate interest in safety).
To send you useful messages: login code, reminders before lives you are registered for, lives scheduled or starting in your communities, replies, payment receipts, the steps of your withdrawals. Information messages about GoDigit are only sent with your consent, which you can withdraw at any time.
To keep the accounts of payments and creators' earnings (legal obligation).

Minors

Accounts are open from the age of 13. Younger children use the Junior space games without an account, or the resources with their school or their parents. The age of majority is that of the person's country.

For a minor's account:

Parental consent. When signing up, the minor gives a parent's email address. The parent receives an invitation, creates an account or logs in, and links their child's account.
Protected identity. The minor appears everywhere under a username and a sticker, including in communities. Their name, photo and profile are never shown to other members and no link leads to their profile.
Supervised contacts. Nobody can connect with a minor or write to them, except their parents and the adults their parents have linked to them (for example a teacher or a tutor).
Social space closed by default. Only a parent can open it. Photos, videos, sounds and links are not allowed in what the minor posts, unless their parents agree.
Communities. A minor never sees a community reserved for adults. They can only join a community and post in it if their parents have opened their social space. They cannot create or manage a community, or start a live in it.
Lives and calls. In a live, a minor can only speak on the microphone when given the floor: never the camera, never screen sharing. They cannot host a live.
Conversations. A conversation that includes a minor is never end-to-end encrypted, so that it stays open to parental controls. Parents remain participants in their child's secret chats.
Payments. A minor never pays themselves, whether for a class, a course or a community plan: the request is sent to their parent, who pays from their space. A minor does not sell anything and does not request withdrawals.
Parent space. Parents follow their child's activity, receive a summary every week, see the history of their calls (never their content), set their parental controls and can pause their account. Messaging and calls with parents are never cut off.
Location on request. A parent can ask for their child's location: the child accepts or declines, and sees everything that was shared. Coordinates are deleted after 24 hours. There is no remote listening.
"I need help". This button immediately alerts the child's parents (our team if no parent is linked). Their location is only attached if they choose to.
When they come of age, the person is notified and their account becomes an adult account, which they manage alone.

If you think a child under 13 has opened an account, write to us from the Contact page: we will delete it.

Linked Junior space and classroom sessions. A parent can link a home device to their parent space: the device then sends only a progress summary (chosen age range, levels done out of each island's total, diplomas, number of stickers), tied to a random token created at linking. No name, no photo, no device identifier. The summary is replaced at each update and deleted as soon as the device is unlinked, from the parent space or from the device. For a Junior classroom session, we keep only the teacher, the chosen programme, the dates and the number of devices that joined: nothing about the children, who have no account. Sessions are deleted 30 days after they end.

Communities

Public or private. In a public community, posts are public, like an ordinary post, and can appear in everyone's feed. In a private community, they are only visible to members who have access. A secret community is never listed and can only be joined by invitation. A community reserved for adults is invisible to minors and visitors.
Managed by its owners. The owner and moderators see the list of members, approve membership requests and posts, pin, remove or ban. Every management action is recorded in a moderation log that cannot be changed. Our team can also suspend a community.
Posting as the community. A post made in the community's name shows the community as its author. The person who wrote it remains known to themselves, the owner, the moderators and our moderation team.
Paid content. A community can offer paid plans and a Premium space (lives, courses, workshops, classes, books), included in a plan or sold separately. The owner sees the community dashboard: members joining and leaving, monthly earnings, best-selling content, promo codes used.
Community lives. The owner, moderators and adult hosts can start or schedule a live. Members who have access are notified when it is scheduled and when it starts.

Messaging, lives and calls

Private messages and their files are only served to the participants of the conversation.
End-to-end encrypted conversations between adults. One-to-one conversations and groups made up only of adults switch to end-to-end encryption as soon as every participant has a device with its keys (an up-to-date app or a linked browser). A line "From here on, messages are end-to-end encrypted" marks the switch: messages sent before stay as they were. After that, texts, photos, voice messages and files are unreadable to us; notifications and the conversation list only show "Encrypted message" or "New message".
What is not end-to-end encrypted. Class and activity conversations, and any conversation that includes a minor, never are: they remain open to parental controls and to our moderation, to protect minors. Circle chats, like class conversations, are not end-to-end encrypted: a teacher or professional invited by a mention can read them while they are in. Even in an encrypted conversation, our server sees who writes to whom, when, the size of messages, reactions, pins, read receipts, typing and presence.
Your devices. Each app and each linked browser is a separate device, with its own keys (5 devices at most). A browser can work without the phone: it reads messages sent since it was added, not those from before. In your settings, you see the list of your devices and can remove one at any time: it no longer reads new messages. A browser that works without the phone and is not used for 60 days is removed automatically. In a browser, keys are kept by the browser and deleted when you log out or remove it.
Recovery code. You can back up your keys on our server, encrypted with a recovery code that only you keep. Without this code, the backup is unreadable, to us as well. If you lose it, your encrypted history cannot be recovered on a new phone, except by linking it from a device you still have.
Secret chats are end-to-end encrypted and kept on your phone. They only open in the app.
Read and listen receipts. The author of a message sees when it has been read and, in a group, by whom. For a voice message, they see "Played" when a recipient has started listening to it. You choose who sees your online presence: everyone, your contacts or nobody.
Story views. The author of a story sees who viewed it and when (the pseudonym for a minor), while it is visible.
Disappearing messages, if you turn them on, vanish after the chosen time, files included.
Link previews. To show the preview of a link in a post, a story or an unencrypted message, it is our server that visits the page, never your device: the visited site does not see your address. For a link to GoDigit, the preview is built from our own data, without visiting anything. In an end-to-end encrypted conversation, our server makes no preview.
Lives and audio or video calls go through our own server, with no outside service, and are encrypted in transit. Calls are never recorded: we only keep the time, the duration and the participants, for example "Video call · 5 min".
Recorded class lives. A class live (live of an activity open to a class, or live started in a class or activity conversation) is recorded; a "Recorded" banner shows it in the room. The recording is kept with our storage provider. Only the teacher hosting it, the person in charge of the class and our moderation team can get a copy, and every copy is logged. Other lives, including community lives, are not recorded. The written chat of a live is not kept after the session.
Reminders. Before a scheduled live you are registered for, you receive a reminder (15 minutes before, today).
Block and report. You can block a person or report content at any time. Reports are reviewed by our moderation team. For an unencrypted message, the team sees the reported message; a disappearing message reported before it vanishes is kept while the report is reviewed.
Report and send. In an end-to-end encrypted conversation, our team cannot read anything. If you are threatened or in danger, "Report and send" sends our moderation team a readable copy of the conversation, decrypted on your device, as you see it: the latest messages (200 at most, or those of the last 7 or 30 days), the list of attachments and, if you choose, the photos. The other person is not notified, and the encryption of other messages does not change. This copy is used only for people's safety, moderation and compliance with our legal obligations, for example passing it to the authorities. It is kept while the report is handled, then deleted 180 days after the team's decision. Only the moderation team has access to it, and every viewing is logged.

Who we share it with

We only share your data with the technical providers we need, who are not allowed to use it for anything else:

Hosting: our servers are rented from Contabo. Cloudflare protects the website and speeds up its display.
Storage: Cloudflare R2, for our backups (encrypted before upload) and the recordings of class lives.
Emails: Resend, for login codes, parent invitations, summaries and the steps of withdrawals.
App notifications: Google Firebase Cloud Messaging.
Payments and withdrawals: Sonco Pay, our only payment provider, and the Mobile Money or card operators you choose.

In a community, other members see what you post there and your name (the username for a minor). The owner and moderators also see your membership and your plan.

Some of these providers may process data outside Benin. In that case, we only give them what is necessary and we make sure of an appropriate level of protection, as the Digital Code requires.

Finally, we may pass data to the authorities, only when the law requires us to.

How long we keep it

Account: as long as it is open. On deletion, your identity is erased immediately (name, username, email, phone, date of birth, photo, sticker, interests, parent and child links, parental control settings and data).
Posts and messages: until you delete them. After the account is deleted, those that remain appear under the name "Deleted account".
Communities: membership and the moderation log are kept with the community.
Disappearing messages: the time you chose.
Reports: the report record is kept for moderation follow-up. A copy sent with "Report and send" is deleted 180 days after the team's decision.
Shared location: 24 hours.
Activity log for recommendations: 180 days today.
Login codes: 10 minutes.
Payments and earnings: order references, sales and withdrawals are kept, without your name, for as long as the law requires for accounting.
Backups: encrypted backup copies are kept for 90 days, then deleted.

Cookies

The website only uses the cookies it needs to work: your login session (protected, unreadable by scripts) and a login indicator. No advertising or audience measurement cookies. Your display preferences (theme, text size) stay in your browser, as do the messaging keys of a linked browser.

Security

All exchanges are encrypted (HTTPS).
Conversations between adults end-to-end encrypted, under the rules described above.
Hashed passwords, single-use and time-limited login codes, limited attempts.
Photos re-encoded, without metadata or location.
Team access limited by role and logged.

In the event of a data breach that puts you at risk, we notify the APDP and the people concerned as the law requires.

Your rights

At any time you can:

view your data and correct it from "My account";
delete your account yourself, on the website or in the app (how to);
leave a community or stop a monthly plan;
remove a device from your encrypted messaging;
withdraw your consent to information messages and turn off notifications in your settings;
object to processing or ask for a copy of your data by writing to us from the Contact page.

We reply within one month at most. If our reply does not satisfy you, you can contact the APDP (apdp.bj).

Parents exercise these rights for their minor child, together with them.

Changes

If we change this policy in an important way, we will let you know on GoDigit before the change applies.