Cookie Policy

Braabby is an online tutoring platform for the Cameroon GCE (Ordinary and Advanced Level), operated from Cameroon and available at braabby.com. In this document "Braabby", "we", "us" and "our" mean the operator of that platform; "you" means the person accepting this document.

Registered particulars — company name, legal form, RCCM number, taxpayer number and registered office — are filed with the competent Cameroonian authorities and are stated in full on our published company information page. Where this document must name the contracting entity, that entity is the registered operator of Braabby.

Correspondence: legal@braabby.com for legal notices, privacy@braabby.com for data-protection requests, and the in-app Help & Support centre for everything else.

Braabby teaches school-age learners, and every Braabby teacher is an adult. A learner under 18 may use Braabby ONLY under the direct supervision of a parent or legal guardian. This is a condition of using the platform, not a recommendation, and it applies to every lesson, every message and every payment. (Separately, any student under 21 uses Braabby under the responsibility of a parent or guardian, who accepts these documents on their behalf.)

What direct supervision means

• A parent or guardian must know when each lesson is scheduled, and must be at home and reachable while it takes place.
• Lessons are live video with an adult. The parent or guardian must be able to see and hear the lesson at any moment, and may sit in on any lesson, at any time, without asking. No teacher may object to a parent being present, and no teacher may ask a learner to be alone, to close a door, or to move to a room where they cannot be seen.
• The parent or guardian should read the learner's messages with teachers from time to time. Every conversation stays on Braabby precisely so that a parent can do this.
• The account belongs to the family. The guardian is responsible for what is done through it — bookings, coins, messages and conduct — and should hold the password rather than leave it with a young child.
• A learner under 18 who cannot be supervised in this way should not use Braabby.

What Braabby does on its side

• Every teacher is identity-checked against a government ID and their qualifications are reviewed by a person before they may teach a single lesson.
• All teaching happens in Braabby's own classroom and all messaging happens on Braabby. A teacher may not move a learner to WhatsApp, a personal number, or any channel a parent cannot see. Asking to is a serious breach and grounds for immediate removal.
• Lessons are one-to-one or small groups of no more than three students, and the platform records who attended and for how long.
• Messages may be reviewed where there is a safeguarding concern, as set out in our Privacy Policy.
• A concern about any teacher's conduct can be reported from the lesson or the chat at any time. It reaches a person, and a teacher may be suspended while it is reviewed.

If anything about a teacher's behaviour worries you — a request to talk privately elsewhere, contact outside lesson times, questions that have nothing to do with the subject, or anything that makes a learner uncomfortable — stop the lesson and report it through Help & Support, or email legal@braabby.com. Tell us even if you are not sure. We would far rather review something harmless than miss something that mattered.

A cookie is a small text file a website asks your browser to keep and send back on your next visit. It is how a site can remember that you are signed in. Similar technologies — local storage and session storage — also keep small amounts of data on your device, and this policy covers those too.

Braabby sets a single cookie. It is strictly necessary: without it you cannot sign in.

• Name: the Braabby session cookie.
• Purpose: to keep you signed in as you move between pages.
• Contents: a random session token. It is not your password, your name or your email, and it carries no advertising identifier.
• Protection: it is httpOnly (scripts on the page cannot read it), SameSite=Lax (it is not sent from other sites), and Secure in production (it travels only over HTTPS). Only a hash of the token is stored on our servers, never the token itself.
• Lifetime: it expires when your session ends, and is deleted immediately when you sign out or use Sign out everywhere.

Because this cookie is strictly necessary to deliver a service you asked for, it does not require consent under the applicable rules. There is no consent banner on Braabby because there is nothing else to consent to.

Two small things are held by your browser and never sent to us:

• Local storage — your light/dark/system theme choice, and a note of which one-off notices you have dismissed, so we do not show them again.
• Session storage — if you use the visitor chat on our public pages before signing in, a temporary token so the conversation survives a page change. It is deliberately session-scoped: it dies when you close the tab, and the conversation with it.

We measure how the site is used, because we cannot improve what we cannot see. We built that measurement ourselves rather than embedding somebody else's, and it works without a cookie.

• It is first-party. There is no Google Analytics, no advertising pixel, no social-network tag, and no third-party script that could follow you to another website.
• We never store your raw IP address. To count returning visitors we derive a one-way hash from your IP, browser and language, mixed with a secret salt that ROTATES EVERY 24 HOURS. Yesterday's hash cannot be matched to today's, so the trail closes by itself.
• We honour Do Not Track. If your browser sends that signal, your visit is recorded anonymously by default, and can be configured to be skipped entirely.
• We do not build advertising profiles, we do not sell or share analytics data, and we do not track you across other sites, because we have nothing on other sites to track you with.

Every browser lets you view, block and delete cookies and site data, usually under Settings, Privacy. You can clear Braabby's data at any time.

Please note that blocking the session cookie will prevent you from signing in at all — it is the mechanism by which the platform knows who you are. Clearing local storage simply resets your theme choice and may bring back a notice you had dismissed.

We may update this document as the platform, our practices or the law change. The date at the top always shows when it was last revised, and the current version is the one published on braabby.com.

Where a change materially affects your rights or what you pay, we will tell you in advance through the platform or by email, and — where the law requires it — ask you to accept the new version before you continue.

Questions about this document? Reach us through the in-app Help & Support centre, or by email at legal@braabby.com (privacy matters: privacy@braabby.com). We aim to respond promptly.

This document is a template prepared for Braabby and should be reviewed by a qualified Cameroonian legal practitioner before being relied upon.