Privacy Policy

SchemeKnit is a teacher lesson-planning platform operated by BloomCore Technologies, a Ghana-registered business (Business Name Registration No. BN428031125, registered 7 November 2025). BloomCore Technologies is the data controller for the personal data described in this policy.

Business address: L7 Olive St., Akast Road, Akatsi, Volta Region, Ghana.

BloomCore Technologies is registered with the Office of the Registrar of Companies, Ghana, as a business name under the Registration of Business Names Act, 1962 (No. 151). Its business-name registration number is BN428031125, and its certificate is dated 7 November 2025.

Business-name registration is separate from registration with the Ghana Data Protection Commission (DPC). BloomCore Technologies is pursuing the separate DPC registration process. This Privacy Policy does not claim that DPC registration has been completed. The policy will be updated when the separate DPC registration is confirmed.

We collect only the information needed to provide SchemeKnit:

• Account information: teacher name, email address, role, account status, password hash, authentication and session records. School name and school relationship where a teacher is managed by a school.
• Curriculum and uploaded content: uploaded schemes of learning and curriculum documents, extracted curriculum text, strands, sub-strands, indicators, teacher configuration, lesson details, generated lesson plans, and exported or downloadable files.
• Financial and entitlement information: selected package, credits and quota balances, payment reference, amount, currency, payment status, payment method, and a Mobile Money phone number supplied to initiate a payment where applicable. Referral records and reward credits where a referral programme applies.
• Security information: session details, login/security events, audit records, password-reset records, MFA information where enabled, and security/rate-limit events.
• Support communications: emails and messages sent to BloomCore Technologies, including billing and technical support requests.

SchemeKnit does not receive or store complete bank-card details or Mobile Money PINs. Payment credentials are handled by Paystack.

SchemeKnit is a teacher lesson-planning tool, not a student records management system. Teachers must not upload pupils' names, personal information, grades or other identifiable student records.

The upload screen displays this notice before a file is selected. If such information is uploaded accidentally, contact us so it can be removed.

• Creating, authenticating and managing teacher and school accounts.
• Uploading documents and extracting curriculum structure.
• Generating, saving, editing, reloading and exporting lesson plans.
• Managing credits, package entitlements and referral rewards.
• Verifying payments and activating packages or school licences.
• Preventing fraud, abuse and unauthorised access.
• Maintaining security, audit and rate-limit records.
• Providing customer, billing and technical support.
• Meeting genuine legal, tax and financial record-keeping obligations.

AI-assisted enrichment is an optional product control. When a teacher requests AI content, lesson-level context — such as subject, class level, strand, indicator, duration and the specific section being rewritten — may be sent to the selected AI provider. The provider does not routinely receive the teacher's entire uploaded scheme through this path. SchemeKnit does not use uploaded curriculum documents to train public AI models.

SchemeKnit uses service providers that process data on its behalf or as independent providers:

• Render — application hosting.
• Neon — managed PostgreSQL database hosting.
• Cloudflare R2 — private object storage for uploaded originals.
• Paystack — payment processing, including Bank Transfer and Mobile Money.
• Resend — transactional email delivery.
• DeepSeek and Groq — AI providers used when AI-assisted generation is requested.

These providers may process or store data outside Ghana. We do not sell personal data.

Account and curriculum data is stored in a managed PostgreSQL database. Uploaded originals are stored in access-controlled private object storage. Passwords are hashed and are not stored in plain text. Access is restricted to authorised platform administrators. No system is completely secure; contact us promptly if you believe an account or document has been compromised.

To protect registration, sign-in and password-reset forms from automated abuse, we use Cloudflare Turnstile. When a challenge is shown, Cloudflare processes technical signals from your browser, your IP address and the result of the challenge to decide whether the request appears to come from a person. Cloudflare acts as a service provider for this purpose and may process data outside your country. The Turnstile token is verified on our server and is not used for advertising or profiling. See Cloudflare's privacy policy at cloudflare.com/privacypolicy.

Subject to the Act and applicable exceptions, you may:

• ask whether we hold personal data about you and request access to it;
• request correction of inaccurate or incomplete personal data;
• object to processing, or ask us to restrict it, where the law allows;
• request deletion of personal data that we are not required to keep;
• withdraw consent where processing relies on consent; and
• complain to BloomCore Technologies or the Ghana Data Protection Commission.

Send requests to bloomcoretechnologies@gmail.com. We may need to verify your identity before acting. Deletion is not always immediate or total: financial, tax, security and legal records may be retained for the periods described in our Data Retention Policy, and backup copies may take time to expire.

Privacy questions and complaints: BloomCore Technologies, bloomcoretechnologies@gmail.com. You may also use our Contact page.

This policy describes the current implementation. It is not a substitute for advice from a Ghanaian legal practitioner.