Trust starts
with clarity.

UNCLARIFIED DRAFT - NOT IN FORCE - DO NOT PUBLISH
Prepared 13 November 2026, America/New_York. No effective date has been approved.
This is original proposed language for NOCKBLUE LIMITED (NockBlue), Nigeria. Bracketed TODO items and editorial notes are release blockers. Operational promises below are proposed obligations, not evidence that a control is live. Publish only after the owner confirms the facts, Nigerian counsel reviews the final text, and the matching release passes operational verification. Read README.md for the evidence ledger and decisions.

UniMata Terms of Service

UNCLARIFIED Proposed policy version: 0.1, 13 November 2026
Effective date: [TODO: approve after final review]
Operator: NOCKBLUE LIMITED, Nigeria
Service address: [TODO: approved public legal service address]
Proposed support: support@unimata.app; billing@unimata.app for payments. [TODO: activate and verify delivery before publication.]

1. Your agreement with NockBlue

These Terms apply when you use the UniMata app and the UniMata services identified on the screen where you accept them. NockBlue is the operator. The Community Guidelines and any clearly disclosed purchase conditions form part of your agreement. Our Privacy Policy explains our handling of personal information; accepting these Terms is not blanket consent to every use of your data.

Please read the version presented before you create an account or buy an AI tool. If you cannot accept it, do not create an account or make that purchase. Mandatory consumer and privacy rights continue to apply.

The NockBlue company website has a different purpose from the app. These Terms do not automatically govern unrelated NockBlue products or replace any future company website terms.

2. Who may use UniMata

Eligibility: strictly 18 years and older. The owner confirmed this rule on 13 November 2026; it also matches the current native onboarding contract and code. Verify enforcement in the launch release. It is a UniMata product rule, not a statement that Nigerian law prohibits every younger person from using a learning service. A parent's permission does not override the rule.

Provide accurate eligibility information. Do not create an account for an ineligible person or help someone bypass an age restriction. We may restrict an account while investigating a credible eligibility concern. Any identity check must be proportionate and explained; we do not ask you to send identity documents in public chats.

UNCLARIFIED Institution, department and level information helps organise your experience. An institution appearing in the app does not by itself mean that it endorses, operates or has verified UniMata or its users. [TODO: confirm whether any institutional verification exists; do not describe email verification as student verification.]

3. Accounts and account security

UNCLARIFIED Use contact details you can access, keep sign-in codes private, and tell us about suspected compromise through [TODO: working support route]. You are responsible for your own misuse of the service; you are not automatically liable for every act committed by an attacker using a compromised account.

Do not impersonate another person, trade accounts, evade a restriction, or obtain access to conversations you are not allowed to join. Display names and usernames must follow our Community Guidelines. We may correct misleading impersonation and rights violations through a fair review process.

If a session expires or a connection fails, follow the recovery message shown in the app. Do not repeatedly pay or send a confidential sign-in code to another user in an attempt to fix access.

4. The service and its limits

UNCLARIFIED UniMata brings course communities, study conversations, course materials and academic tools into a student workspace. Intended study tools include document tutorials, flashcards, memorisation, practice exams, learning analytics, timetable/planning tools and AI assistance from UniMaze. Features are available only as identified in your release. [TODO: reconcile this intended service description with actual launch functionality; the wider design vision is not proof of a completed native implementation.] Available features, device requirements and any purchase limits must be described before you rely on them. Product illustrations, prototypes and future plans are not promises of release dates.

Other users create their own content. NockBlue does not guarantee a person's identity, academic results, employment, income or the accuracy of everything shared. You remain responsible for checking advice and observing your institution's rules.

We may maintain, update or withdraw a feature for legitimate operational, safety or legal reasons. Where a change materially affects an unfulfilled paid entitlement, we will explain the available remedy; this clause does not permit us to retain payment for a service we are legally obliged to deliver or refund.

5. Free features and paid AI tools

UNCLARIFIED Editorial implementation gate: the owner says coin checkout will be added and is not yet in the SwiftUI design. The customer-language below describes the intended finished service in the present tense, as requested. No checkout, subscription, tutorial entitlement or payment route is certified live by this draft.

UniMata charges only for AI tools. AI usage coins are called UniMaze coins. A feature must show a price before it charges you. There is no authorised tuition collection, peer-to-peer payment service, cash withdrawal, investment product, or purchase of academic grades under these Terms.

Paystack processes payments through permitted checkout channels. A purchase screen must identify the seller, amount and currency, taxes or additional fees where applicable, what is included, limits, and whether it is a one-time purchase, credit pack or recurring plan.

Commercial offer specified by the owner:

UNCLARIFIED The AI tool is named UniMaze. UniMaze coin purchases start at ₦500 for 50 UniMaze coins. You may buy coins on a pay-as-you-go basis without a monthly plan. Monthly-plan users may also buy extra coins when their plan allowance is used. [TODO: specify any larger packs, per-tool usage costs, taxes and the order in which plan allowances and purchased coins are used. The confirmed minimum pack is ₦500 for 50 coins; do not infer the same effective rate for larger packs or monthly subscriptions.]

UNCLARIFIED UniMaze coin overdraft

UNCLARIFIED Your UniMaze coin balance may fall to a minimum of −50 coins. An AI request must not take the balance below that cap. If the balance reaches −50 coins, UniMata pauses AI answers until the overdraft is repaid. This limit is in UniMaze coins; it does not create a separate cash debt or authorise interest, a penalty or a collection fee. The minimum purchase pack is ₦500 for 50 coins; other pack or subscription rates must be disclosed separately.

UNCLARIFIED [TODO: implement and document when an overdraft becomes available, how a new request is costed/reserved before generation, what happens if its final cost differs, how top-ups repay the negative balance, when AI access resumes, and how failed/cancelled/disputed requests are corrected. The owner confirmed only the minimum pack rate of ₦500 for 50 coins, not every larger-pack or subscription rate. Do not create a new charge or allow a job to exceed the −50 cap through a race condition. If the rule means repayment of the full negative balance after lockout rather than simply moving above −50, make that unlock state explicit in both the policy and implementation; the present wording follows the owner's instruction to pause until repaid.]

UNCLARIFIED Plans of ₦10,000 and above allow a tutorial for up to 10 students at once. [TODO: define whose entitlement pays, whether the host counts, invitation/attendance rules, concurrency, whether AI limits are shared, limits per tutorial and whether participants need a paid plan. This wording presents the intended final service in the present tense, as requested; it is not evidence of implementation.]

UNCLARIFIED [TODO: approve expiry, carry-over, usage accounting, billing period/time zone, renewal authorisation, cancellation, proration, price changes and unused entitlement treatment. Monthly pricing does not by itself establish automatic renewal. Do not describe coins as money, transferable value, redeemable cash or a financial product; confirm the intended nontransferable service-credit treatment and refund exceptions before publication.]

No recurring debit is authorised merely because you accept these Terms. A recurring plan requires a specific, clear renewal disclosure and valid payment authorisation, with a working cancellation route. A one-time purchase must not silently become a subscription.

UNCLARIFIED Distribution gate: native store rules can require store billing for digital functionality. Paystack-only checkout is not approved for every storefront by this draft. The release team must document the permitted platform, region and programme before enabling a payment route. If another billing channel is adopted, revise the purchase disclosures and these Terms before launch.

6. Payment problems, failed delivery and refunds

UNCLARIFIED Keep the transaction reference and purchase receipt. If money leaves your account but access or credits do not appear, avoid another payment and contact [TODO: payment support route]. Give the reference, date, amount, currency and problem description; never provide a PIN, password, OTP or complete card details.

UNCLARIFIED We will reconcile the payment and entitlement records and explain whether a payment is pending, failed, delivered or being refunded. A bank debit alone may not establish successful settlement. A verified duplicate charge or paid service that cannot be delivered will be remedied through restoration or an appropriate refund, subject to applicable consumer law and the circumstances of the failure. We will not force replacement credits where the law entitles you to a refund.

UNCLARIFIED AI may produce an unhelpful or inaccurate result. That does not remove your statutory rights concerning misdescription, defective service or nondelivery. [TODO: approve a fair discretionary refund policy for dissatisfaction, consumed credits and unused balances, separate from mandatory remedies.]

UNCLARIFIED Refund initiation and receipt by your bank are different events. We will provide status information and a reference when available, without guaranteeing an unverified bank completion deadline. Paystack's retention of its merchant processing fee does not automatically reduce a refund that you are legally owed. Legitimate bank disputes and regulatory complaints remain available to you; please provide truthful information.

7. Using AI responsibly

AI output can be wrong, incomplete, biased or fabricated, including citations and calculations. Check important results against reliable sources. AI tools are study aids, not a substitute for a qualified professional, emergency assistance, or your institution's assessment rules.

Only submit material you may lawfully use. Do not upload someone else's private data without a lawful basis, confidential examination material, or content prohibited by the Community Guidelines. Do not use AI for impersonation, exploitation, fraud, harassment or prohibited academic misconduct.

UNCLARIFIED You retain rights you already hold in your inputs. Any rights you may have in outputs depend on applicable law and third-party rights; we do not guarantee originality, exclusivity or copyright protection. [TODO: align AI-specific licensing, vendor terms, training choices, retention and sensitive-input warnings with the actual providers.]

Study materials, recordings and linked videos

UNCLARIFIED Upload course material only where you have the necessary rights. Do not upload a confidential assessment or another person's private records merely because the file relates to your studies. For a class recording, obtain the permissions required by law and your institution; do not secretly record people or bypass a lecturer's restrictions. [TODO: approve recording permissions, notices and handling before enabling recording or transcription.]

UNCLARIFIED Linked videos are provided through the relevant third-party service and its terms. A tutor follow/notification subscription is distinct from a paid monthly AI plan. Estimated grades, CGPA predictions and exam analytics are educational aids, not official institutional records or guaranteed outcomes. [TODO: verify enabled video, recording and analytics flows; disclose any third-party information transfers and distinguish deterministic calculations from paid AI operations.]

8. Your content and our permissions

You retain ownership of content you create, subject to rights that belong to others. To operate the feature you use, you grant NockBlue a non-exclusive permission to store, transmit, reproduce and display that content only as reasonably needed to provide, secure and moderate the service and meet lawful obligations. Providers may perform these tasks for us under appropriate arrangements.

This permission does not transfer ownership, grant a general right to sell your content, or authorise unrelated advertising use or AI model training. Any separate use requiring permission must be explained and authorised separately. The permission ends when the operational need ends, except for limited lawful retention and material already held by recipients or retained under a legal obligation.

Share only what you are entitled to share. A recipient may keep a copy; deletion from your device or our relay does not necessarily erase a recipient's copy. Do not assume that a chat is end-to-end encrypted unless the specific feature expressly and accurately says so.

9. Rules, enforcement and appeals

Our Community Guidelines prohibit abuse, exploitation, illegal activity, privacy violations and misuse of the service. We may investigate reports and proportionately remove content, restrict a feature, suspend an account or close an account. Urgent restrictions may occur before notice where necessary to protect people, evidence or systems.

UNCLARIFIED Where safe and lawful, we will explain the relevant reason and give an appeal route. [TODO: operationally verify reporting, blocking, moderation, enforcement notice and appeal controls before publishing this promise.] Restrictions must not be used as a device to avoid lawful payment remedies. Good-faith reporting is protected; deliberately fabricated reports may themselves be reviewed.

10. Leaving UniMata

UNCLARIFIED You may stop using UniMata. Account closure and data deletion are different from uninstalling the app or clearing a device's chat history. Use [TODO: verified account deletion route] or contact [TODO: privacy support]. Our Privacy Policy explains data retained for legitimate legal, security and accounting needs and the limits of deleting copies held by other people.

UNCLARIFIED [TODO: specify paid entitlement handling on voluntary closure, eligibility closure, service retirement and enforcement closure, preserving consumer rights.]

11. Intellectual property, third parties and availability

UNCLARIFIED NockBlue and UniMata branding and software are owned by NockBlue or used with permission. These Terms allow ordinary authorised use of the service; they do not transfer the software or branding to you. Legal exceptions remain available. Report infringement through [TODO: rights-holder contact], identifying the work, content location and basis of your claim.

UNCLARIFIED Third-party links and services have their own conditions. Their inclusion does not establish endorsement. We aim to provide a reliable service, but network, device and third-party failures can interrupt access. We do not exclude remedies that the law requires for paid services.

12. Responsibility and dispute resolution

Nothing in these Terms limits liability or rights that cannot lawfully be limited, including mandatory consumer rights. Each party remains responsible for matters for which applicable law makes it responsible. No blanket waiver for fraud, unlawful conduct or legally non-excludable harm is intended.

UNCLARIFIED [TODO: Nigerian counsel to approve any proportionate limitation clause. No arbitrary liability cap or consumer indemnity is inserted in this draft.]

UNCLARIFIED Nigerian law governs these Terms, subject to mandatory protections that apply to you. Contact [TODO: complaints route] to seek an informal resolution. This does not prevent urgent court relief, a complaint to a regulator, or another right provided by law. Unresolved claims may be brought before a court with lawful jurisdiction; this draft does not impose mandatory private arbitration or a class-action waiver.

13. Changes and contact

UNCLARIFIED Material changes will be communicated through [TODO: verified notice mechanisms], with an effective date and any renewed acceptance or consent required by law. Changes do not retroactively authorise undisclosed charges or processing. The current version and previous materially different versions should remain accessible.

UNCLARIFIED Legal enquiries: hello@nockblue.com [TODO: activate; confirm legal service suitability]
General support: support@unimata.app [TODO: activate]
Payment support: billing@unimata.app [TODO: activate]
Privacy requests: privacy@unimata.app [TODO: activate]
Safety reports: safety@unimata.app [TODO: activate]
Appeals: [TODO: verified route, ownership and response process]

UNCLARIFIED DRAFT - NOT IN FORCE - DO NOT PUBLISH
Prepared 13 November 2026, America/New_York. No effective date has been approved.
This is original proposed language for NOCKBLUE LIMITED (NockBlue), Nigeria. Bracketed TODO items and editorial notes are release blockers. Operational promises below are proposed obligations, not evidence that a control is live. Publish only after the owner confirms the facts, Nigerian counsel reviews the final text, and the matching release passes operational verification. Read README.md for the evidence ledger and decisions.

UniMata Privacy Policy

UNCLARIFIED Proposed version: 0.1, 13 November 2026
Effective date: [TODO]
Controller: NOCKBLUE LIMITED, Nigeria
Public address: [TODO]
Proposed privacy contact: privacy@unimata.app [TODO: activate and test before publication]
Data Protection Officer, if required/appointed: [TODO: confirm designation and publish role contact]

1. What this notice covers

This notice is for UniMata account, student profile, study communication, AI purchase and support processing that NockBlue actually operates. The NockBlue company website needs its own tailored visitor notice covering the hosting, contact forms, cookies and analytics actually used there. A product policy must not silently substitute for that notice.

UNCLARIFIED This draft combines source-confirmed native pilot data categories with proposed disclosures for AI and payments. It does not establish that all features are available to the public. Editorial TODO items must be resolved against a release data inventory before publication.

2. Information we handle

UNCLARIFIED We do not need your sign-in code, password, PIN, banking OTP or complete card details in a support message. Payment details entered into a processor-controlled checkout are handled under that provider's notice. [TODO: verify whether NockBlue receives reusable payment authorisations, card brand/last digits or other identifiers; describe exactly rather than promise that we receive no payment data.]

UNCLARIFIED Device permissions must be requested when needed for the enabled feature. [TODO: confirm photo picker/camera, microphone, notifications, contacts and location access per platform; do not list unimplemented permissions as collected data.]

UNCLARIFIED A tutorial collaborator's access must follow the actual workspace permissions. Shared source material does not automatically mean that private AI prompts, individual answers, exam attempts or progress are visible to everyone. [TODO: define and test each sharing default, participant role and entitlement; the 10-student allowance does not establish permission to see every participant's data.]

UNCLARIFIED The design vision includes possible student/official verification, but that is not established as a current native onboarding feature. [TODO: if verification is enabled, add the exact document categories, verification provider, lawful basis, badge meaning, retention/deletion and appeal workflow. Do not generalise an aspirational document-deletion rule into a claim that originals are never stored.]

3. Why we process it and our lawful bases

UNCLARIFIED The following is a proposed processing map, not a substitute for a documented legal assessment:

We do not treat acceptance of the Terms as consent to marketing, model training or all third-party processing. Where consent is used, refusing or withdrawing it must be explained without misleading consequences. Sensitive data and high-risk processing require their own assessment and applicable additional conditions.

4. Who can see your profile and communication

UNCLARIFIED The native contract currently defaults institution, department and level visibility and discoverability to enabled. Controls allow these preferences to be changed. [TODO: inspect the final onboarding UI and deployed behaviour; explain the defaults clearly before discovery begins and assess whether they are appropriate.]

UNCLARIFIED Eligible signed-in users may see the profile fields you make visible through the People feature. Conversation participants receive messages you send to them. Authorised personnel and service providers may access limited relevant information for operation, security, lawful investigation or support under controlled permissions. [TODO: document actual access controls, staff access audit and moderation access.]

UNCLARIFIED Email verification confirms control of an inbox; it does not by itself verify institutional enrolment or every profile statement. Do not share private information merely because a profile names your institution.

We do not claim end-to-end encryption, universal monitoring, or that every message is private from the operator. Device protection and encrypted transport/storage, where implemented, are different from end-to-end encryption.

5. AI-specific processing

UNCLARIFIED Before an AI request is sent, the tool must identify what information is sent to which provider, the purpose, relevant storage locations or transfer safeguards, retention, any human review, and whether inputs/outputs can be used for model improvement. [TODO: fill these details for each actual AI provider, including safety filters and usage telemetry.]

UNCLARIFIED Do not submit confidential examination papers, someone else's sensitive information, or material you lack permission to share. The tool should let you understand what will leave your device. No promise of zero retention, no training, Nigerian-only storage or exclusive outputs is made by this draft.

UNCLARIFIED [TODO: determine whether prior conversation history, profile attributes or uploaded files are sent with an AI request; do not assume that only the latest prompt is transmitted. Document deletion and opt-out behaviour separately for NockBlue and the provider.]

6. Service providers and other disclosures

UNCLARIFIED Current native documentation names these technical providers. Their inclusion here is source evidence, not a completed vendor audit:

UNCLARIFIED Some providers act on NockBlue's instructions; others may have independent legal responsibilities. These roles must be assessed for the particular activity. Other disclosures may occur where legally required, to protect a person's safety through a lawful process, to obtain confidential professional advice, or in a legitimate business transition with appropriate safeguards. Investor interest does not entitle someone to identifiable user chats or unrestricted user data.

UNCLARIFIED [TODO: confirm any advertising, analytics, data licensing or sale practices. Do not publish a claim of 'we never sell/share data' without an evidence-backed definition and audit.]

7. International processing

UNCLARIFIED Providers may process information outside Nigeria. Before such processing, NockBlue must document the relevant recipient, destination, processing and lawful transfer mechanism under the Nigeria Data Protection Act and applicable directives. We will make the required information available through [TODO: privacy contact and appropriate notice]. Do not assume a vendor's brand or generic contract alone establishes an adequate transfer mechanism.

8. Retention, local copies and deletion

Keep data only for justified purposes, with a reviewed schedule and deletion jobs that can be tested. Account deletion must be distinguished from clearing a device, removing an app and expiring a relay message.

UNCLARIFIED The native pilot documentation describes direct-message relay bodies leaving after recipient receipt or 30 days, group bodies after all eligible receipts or 45 days, and a separate 45-day chat attachment lifecycle. These are scoped implementation descriptions, not universal deletion promises. They do not establish what remains in recipients' devices, legacy history, security records, database backups, payment records, AI vendors or a lawful evidence hold.

UNCLARIFIED [TODO: verify the deployed configuration and schedules before converting any of those periods into customer-facing commitments. Cover legacy v1 history explicitly.]

Your rights request may require a proportionate identity check. We must not collect excessive new information just to process it. If data must lawfully remain, explain the category, reason, access restrictions and retention criteria.

9. Your choices and rights

UNCLARIFIED Depending on the legal conditions, you may request information about processing, access to your data, correction, erasure, restriction or objection, a portable copy where applicable, and withdrawal of consent for consent-based processing. You may challenge legally relevant solely automated decisions and seek human review where the law provides it. These rights are subject to applicable limits; they are not a promise to erase someone else's lawful records or every recipient's copy.

UNCLARIFIED Contact [TODO: working privacy route] with the request and enough information to locate your account. [TODO: adopt the legally required response timetable and escalation procedure; verify current GAID requirements.] There is no requirement in this draft to waive your rights or pay an arbitrary fee to complain.

You may complain to the Nigeria Data Protection Commission through its current official complaint channels on the NDPC website. Any applicable pre-complaint procedure must be explained accurately without deterring lawful complaints.

10. Children and eligibility concerns

UNCLARIFIED UniMata is strictly 18+; the owner confirmed this rule on 13 November 2026. If you believe an underage person has an account or their information was supplied without a lawful basis, contact [TODO: safety/privacy route]. We will assess and address the concern under the Child Protection Policy. Collect only the information needed to verify and protect; do not send intimate images or identification documents through an ordinary public report.

UNCLARIFIED An age rule does not eliminate our responsibility to handle a child's information lawfully if we encounter it. Opening the service to minors would require a separate reviewed eligibility, age assurance, parental-consent where applicable and safeguarding model before release.

11. Security and incidents

UNCLARIFIED Appropriate technical and organisational safeguards must reflect the sensitivity of the data and the service risks. No system offers perfect security. [TODO: substantiate access control, encryption, recovery, audit and incident-response statements before making specific claims.]

We will assess incidents and make legally required regulator and individual notifications using clear, actionable language. The statutory thresholds differ; not every technical fault is a reportable personal-data breach. An incident notice should explain the known facts, likely effect, mitigation and contact route without exposing further private information.

12. Updates and contact

We will date the final policy, communicate material changes appropriately and obtain fresh consent where required. A later policy revision does not retroactively legitimise unlawful processing.

UNCLARIFIED Privacy: privacy@unimata.app [TODO: activate]
DPO designation/contact: [TODO]
Public service address: [TODO]
Account deletion: [TODO: verified route]
Child-safety contact: safety@unimata.app [TODO: activate]

UNCLARIFIED DRAFT - NOT IN FORCE - DO NOT PUBLISH
Prepared 13 November 2026, America/New_York. No effective date has been approved.
This is original proposed language for NOCKBLUE LIMITED (NockBlue), Nigeria. Bracketed TODO items and editorial notes are release blockers. Operational promises below are proposed obligations, not evidence that a control is live. Publish only after the owner confirms the facts, Nigerian counsel reviews the final text, and the matching release passes operational verification. Read README.md for the evidence ledger and decisions.

UniMata Community Guidelines

UNCLARIFIED Proposed version: 0.1, 13 November 2026
Effective date: [TODO]
Proposed reporting email: safety@unimata.app [TODO: activate and test; implement working in-app route]

1. Study, connect and treat people with dignity

UniMata is intended to help people connect around student life and learning. Be clear, considerate and honest. Disagree with ideas without attacking a person's dignity. These rules apply to accounts, names, profiles, study chats, groups, uploads, AI inputs and outputs shared through UniMata, and any additional community surface actually enabled.

UniMata is strictly 18+; the owner confirmed this rule on 13 November 2026. Do not help an underage person evade it. Every person must still be protected from abuse, including a minor who reaches the service despite the rule.

2. No harassment, hate or threats

Do not bully, stalk, threaten, sexually harass, intimidate, or organise a pile-on against someone. Do not encourage violence or dehumanise people because of ethnicity, religion, disability, sex, gender, sexual orientation, nationality or another protected or vulnerable status.

Criticism, academic debate and discussion of difficult subjects are allowed when they do not become targeted abuse or encouragement of harm. Context matters, including whether material is shared for education, reporting or condemnation. Educational context never permits sexual exploitation of a child.

Do not distribute graphic violence, cruelty or threats to frighten people. Do not promote terrorism, violent extremist recruitment or instructions intended to help someone carry out violence.

3. Zero tolerance for child sexual abuse and exploitation

Child sexual abuse material, grooming, sexual solicitation of a child, sextortion, trafficking, sexualised depictions of minors and facilitating access to such material are prohibited. This includes generated, manipulated or apparently synthetic sexual material involving minors and attempts to normalise or arrange abuse.

Do not request, create, upload, sell, exchange, link to or redistribute such material. Do not threaten to expose intimate material or demand money, sexual acts or more images. Apparent consent is not an excuse for child exploitation.

UNCLARIFIED Report the account or content location through the verified safety route. Do not investigate by contacting the person, download material to build a collection, or repost it as a warning. The Child Protection Policy explains the proposed response process and release requirements.

4. Respect consent, privacy and boundaries

Do not expose another person's private address, phone number, identification documents, credentials, health information or private conversation to harm or pressure them. Do not share intimate material without consent or create sexual deepfakes of a real person.

Do not secretly record, impersonate or misrepresent another person. Stop unwanted contact. Do not evade another person's block or a platform restriction through another account. Ask before adding people to unrelated activity or repeatedly sending promotional messages.

Profile visibility is a choice about a specific feature. It does not give permission to harvest someone's data, identify their location or contact them elsewhere without a lawful basis.

5. Be honest and protect academic integrity

UNCLARIFIED Do not impersonate a student, lecturer, institution, NockBlue employee or support agent. Do not falsely claim official verification, qualifications, endorsement or a partnership. Display names may be expressive but must not deceive people about your identity or authority.

Use study tools in line with your institution's rules. Do not sell leaked examinations, obtain unauthorised access to assessment materials, facilitate cheating, falsify academic records or submit prohibited AI-generated work as your own. Normal discussion, practice, tutoring and permitted collaboration remain welcome.

An AI answer is not evidence that a claim is true. Do not knowingly share fabricated citations or manipulated evidence as authentic. Clearly identify consequential AI-generated or altered material where needed to avoid deception.

6. No scams, abusive commerce or security attacks

Do not run phishing, advance-fee schemes, fraudulent scholarship or job offers, account sales, payment impersonation, spam, pyramid schemes or other deceptive promotions. Do not request someone's OTP, password, PIN, full card number or private keys.

UniMata's paid features are AI tools, including monthly plans and UniMaze coins, through permitted payment channels. Another user's request for a transfer is not an official UniMata charge. Do not claim you can buy grades, guaranteed admission, investment returns or privileged access through NockBlue.

UNCLARIFIED Do not distribute malware, exploit a vulnerability, bypass access controls, scrape personal information, interfere with message delivery or manipulate paid entitlements. If you find a security problem, report the minimum safe evidence through [TODO: security route]; do not access someone else's data to prove it.

7. Respect content ownership and lawful use

Share material you created or are authorised to share. Do not upload pirated textbooks, stolen course recordings or other infringing material. A study purpose does not automatically make every reproduction lawful. Legitimate legal exceptions still apply.

UNCLARIFIED A rights-holder notice should identify the work, the specific content location, the alleged infringement and a contact for follow-up. Knowingly false infringement complaints and retaliation against good-faith reporters are prohibited. [TODO: approve the rights review and counter-notice process under applicable law.]

8. Support people facing distress without creating harm

Do not encourage self-harm, provide instructions for it, glorify dangerous behaviour or exploit a person's distress. Supportive discussion of recovery and seeking help is allowed. Avoid graphic detail and respect the person's privacy.

UNCLARIFIED UniMata is not an emergency or crisis response service. If someone faces immediate danger, seek local emergency assistance or trusted in-person help. Reports to UniMata should not replace immediate real-world assistance. No unverified hotline or response-time promise is provided in this draft.

9. Reporting and taking immediate steps

Publication blocker: the currently inspected native onboarding documentation describes placeholder support pages. Do not publish the following route as operational until it works in the release.

UNCLARIFIED Proposed user flow:

1. UNCLARIFIED Use [TODO: actual report control] on the relevant content or profile, or [TODO: accessible support fallback] if you cannot sign in.
2. Tell us what happened and provide a message/content reference, approximate time and a brief explanation. Share only evidence you may lawfully provide.
3. UNCLARIFIED Use [TODO: verified block/mute controls] to reduce unwanted contact. Preserve essential details safely; do not keep illegal sexual material involving children.
4. For payment problems, use the payment-support route with the transaction reference, without banking secrets.

A report need not prove a legal case. Good-faith mistakes are not abuse of reporting. Deliberately false reports or coordinated attempts to silence others may be investigated. We must protect reporter information as described in the Privacy Policy and avoid promising absolute anonymity that we cannot provide.

10. Fair, proportionate enforcement

UNCLARIFIED Proposed actions include a warning, content removal, temporary restriction, account suspension or closure, and lawful escalation for serious harm. Consider severity, context, recurrence, confidence in the evidence and the risk to people. Urgent protective action may precede a full review.

Where safe and lawful, the affected person should receive the relevant reason and an appeal route. Do not expose a reporter or reveal information that would help an abuser evade safeguards. Severe exploitation or credible imminent threats may justify immediate restrictions; a warning is not guaranteed first.

UNCLARIFIED Moderation can make mistakes. A separate reviewer should assess an appeal where practicable and correct an incorrect decision. [TODO: assign trained reviewers, escalation ownership, response targets, evidence retention and actual appeal channels before publication.]

UNCLARIFIED No automated moderation system, continuous monitoring, human review coverage or service response time is claimed to exist by this draft. The release must state what it actually does, including any relevant AI moderation disclosure.

11. Changes and contact

These rules should evolve with product changes and lessons from safety work. Material changes need a dated notice and a reasonable explanation. Mandatory legal rights remain available.

UNCLARIFIED Report abuse: safety@unimata.app [TODO: activate]
Appeal an action: [TODO: verified route]
Child-safety concern: safety@unimata.app [TODO: activate]
Security concern: support@unimata.app [TODO: activate; implement secure escalation]
Copyright/rights complaint: support@unimata.app [TODO: activate; approve rights review process]

UNCLARIFIED DRAFT - NOT IN FORCE - DO NOT PUBLISH
Prepared 13 November 2026, America/New_York. No effective date has been approved.
This is original proposed language for NOCKBLUE LIMITED (NockBlue), Nigeria. Bracketed TODO items and editorial notes are release blockers. Operational promises below are proposed obligations, not evidence that a control is live. Publish only after the owner confirms the facts, Nigerian counsel reviews the final text, and the matching release passes operational verification. Read README.md for the evidence ledger and decisions.

UniMata Child Protection and Safety Policy

UNCLARIFIED Proposed version: 0.1, 13 November 2026
Effective date: [TODO]
Operator: NOCKBLUE LIMITED, Nigeria
Proposed child-safety email: safety@unimata.app [TODO: activate, test and appoint accountable monitored role]

1. Our scope and current age rule

UNCLARIFIED This policy sets proposed standards for preventing and responding to harm involving children on UniMata. For safeguarding purposes, a child means a person under 18. UniMata is strictly for adults aged 18 and older, confirmed by the owner on 13 November 2026. The current native product contract and source enforce this age threshold. Verify the release behaviour and reflect the rule accurately in the app and store metadata.

UNCLARIFIED UniMata is not currently presented as a child-directed service in this draft. No parental-consent route, teen space or supervised child account is asserted to exist. A parent cannot override the current 18+ rule. The rule is NockBlue's eligibility decision and must not be described as a general statutory ban on student apps for younger people.

We still have responsibilities if a child appears on the platform, is targeted through it, or their information is supplied to us. Adult-only labelling does not replace practical prevention and response.

2. Prohibited conduct and material

UniMata must prohibit child sexual abuse and exploitation (CSAE), including:

• Child sexual abuse material (CSAM), including requests, possession for distribution, uploading, selling, linking to, exchanging or otherwise facilitating access to it.
• Grooming, sexual communication directed at a child, arranging sexual contact, trafficking, exploitation or attempts to normalise those acts.
• Sextortion or threats to disclose intimate material, and coercing someone to create or share such material.
• Sexualised depictions of children, including generated, manipulated or apparently synthetic depictions, and material that promotes or facilitates abuse.
• Impersonation, fraud, harassment or threats used to obtain a child's trust, location, private data, images or money.

These standards cover profiles, private and group communication, uploads, AI requests and outputs, and any other enabled UniMata surface. Claims of humour, research, consent or educational purpose do not authorise exploitation.

3. Prevention and age assurance

UNCLARIFIED The source-inspected native signup flow asks for a date of birth and rejects a date below the 18+ threshold using the Lagos calendar. This is a self-declared age check, not independent proof of adulthood. Email verification is not age or student-status verification.

UNCLARIFIED Proposed release controls must include a clear eligibility message, server-side validation, proportionate review of credible underage reports and a safe correction/appeal route. Avoid prompting users to falsify their age. If an additional identity check is justified, explain its purpose, lawful basis, retention and security before collecting documents; use the least intrusive effective approach.

UNCLARIFIED [TODO: assess whether current age assurance is adequate for the risk, document abuse/bypass handling, and test iOS, Android and backend behaviour. Do not claim government-ID or biometric verification unless a reviewed process is actually adopted.]

UNCLARIFIED If NockBlue later admits minors, this policy must be replaced or revised before enrolment. That change requires a child-impact/privacy risk assessment, legal review of age and consent rules, age-appropriate design, safe communication defaults, vendor eligibility checks and a tested parental/guardian model where lawfully required. Do not infer that a statutory reference to children aged 13 automatically authorises an unsupervised 13+ service.

4. How to report a concern safely

UNCLARIFIED The proposed safety@unimata.app address has not been activated or delivery-tested in this task. Before public release, provide a monitored, working in-app feedback/report mechanism and an accessible fallback for a person who has no account or cannot sign in.

UNCLARIFIED Proposed public instructions:

1. UNCLARIFIED Use [TODO: verified in-app report route] or contact [TODO: monitored child-safety channel]. Choose child safety if that option exists.
2. Provide the account/content reference, approximate time, a short description and a safe way to contact you. You may report something that affected another person.
3. Do not download, forward, publicly repost or attach suspected CSAM to an ordinary message. Content references are safer than circulating the material.
4. Do not confront a suspected abuser or conduct your own investigation. Where immediate danger exists, seek local emergency assistance or trusted in-person protection.

Support must never ask for passwords, payment OTPs or unnecessary intimate material. The reporting interface must explain what information is shared and who may receive it. A confidentiality promise must preserve lawful safeguarding disclosures; absolute secrecy cannot be guaranteed.

UNCLARIFIED 5. Proposed safety response process

The following are operational requirements to implement, staff and test; they are not a statement of live response coverage:

1. Receive and triage. Register the concern securely, assess immediacy and severity, and route suspected exploitation to a trained accountable reviewer. Record only necessary identifiers and context.
2. Protect. Where justified, restrict access to reported material or accounts promptly while avoiding unnecessary exposure of victims, reporters or evidence. A restriction may precede notice when delay creates risk.
3. Review. Evaluate the available information with trained human oversight as appropriate. Do not require a child or reporter to reproduce exploitation material or repeatedly retell traumatic detail.
4. Preserve lawfully. Maintain minimum necessary evidence under access control and a documented legal basis. Do not indiscriminately copy or circulate illegal material. Obtain jurisdiction-specific advice on preservation, disclosure and handling.
5. UNCLARIFIED Escalate. Report confirmed or otherwise reportable matters to the relevant authority when the law requires it, through a verified channel. Assess duties in Nigeria and any other applicable jurisdiction. A specific relationship with NCMEC, police or any reporting body must not be claimed unless actually established and applicable.
6. Act and communicate. Remove prohibited material and enforce proportionate account measures. Provide safe status information where possible without jeopardising a child, a reporter or a lawful investigation.
7. Review the outcome. Provide an appropriate appeal or correction path, assess repeated abuse and improve controls. An appeal does not require re-exposing prohibited material.

UNCLARIFIED [TODO: designate the owner and backup, authority contacts, out-of-hours escalation, evidence handling, reviewer training, access audit, response targets, lawful notices and recovery procedures. No 24/7 monitoring or guaranteed response deadline is promised here.]

6. Underage accounts and children's data

When an account is credibly suspected to be underage, use a proportionate restricted review rather than publicly labelling the person. Confirm the relevant facts without collecting excessive new information. If the person is ineligible, close or restrict the account according to the approved process and provide an appropriate explanation and correction route.

Data collected without a lawful basis must be addressed promptly, including deletion where required. Separate a necessary safety/legal hold from ordinary account data, document why it is retained, restrict access and set review and deletion criteria. Do not promise immediate deletion of evidence where a legal preservation duty applies.

A person presenting as a guardian must be checked proportionately; do not disclose a person's data merely because someone claims to be a parent. Consider whether contacting a guardian could put the person at additional risk and obtain appropriate safeguarding advice.

7. Privacy, AI and payments

UNCLARIFIED Do not send a suspected child's content to an AI provider as an unreviewed default response to a safety report. Any automated safety processing needs a documented lawful basis, necessity assessment, provider approval, transfer safeguards, appropriate notice and human accountability. No teen/adult data separation or exclusion from AI providers is claimed to exist by this draft.

Current source documents retain original optional profile images as well as cropped display images. This needs a necessity and metadata review, especially for any image involving a minor. Access must remain limited and deletion rules explicit.

UNCLARIFIED AI payments are for eligible adults through permitted billing channels. [Editorial: this describes intended finished checkout behaviour; checkout is not yet in the SwiftUI design.] Do not market paid AI tools to children or permit an eligibility bypass by making a payment. Suspected unauthorised payment must have a safe complaint and remedy process; an adult-only label does not by itself resolve a genuine unauthorised-payment concern.

8. Accountability and external standards

UNCLARIFIED Assign an accountable child-safety lead and a monitored point of contact before launch. Maintain a restricted incident record, train relevant personnel, review vendor roles and audit whether reports result in action. Aggregate safety reporting should avoid identifying victims, reporters or private conversations.

Google Play's child-safety requirements may apply to UniMata's social functionality even if its intended users are adults. Public standards alone do not satisfy the requirement for a functional reporting process, appropriate CSAM response, lawful escalation and an accountable contact. Store declarations must reflect implemented controls.

9. Changes and contact

Material policy changes require an updated date and appropriate notice. Reassess this policy when messaging, AI, discoverability, uploads, audience or distribution changes.

UNCLARIFIED Child-safety reports: safety@unimata.app [TODO: activate]
Privacy concern: privacy@unimata.app [TODO: activate]
Appeal/correction route: [TODO]
Legal service address: [TODO]

Internal release gates - remove from the public version after verification

• Apply the owner-confirmed strict 18+ rule and verify all admission routes and store audiences.
• Launch working report, block/mute as applicable, support and appeal controls.
• Designate trained reviewers, safety contact, backup and escalation ownership.
• Approve Nigerian authority reporting/preservation advice and secure handling.
• Complete privacy/child-risk and vendor/AI assessments.
• Test synthetic exploitation reports without using real prohibited material.
• Verify evidence access, protection, audit, deletion and recovery.
• Confirm store certification accuracy and publish final accessible standards.

UNCLARIFIED DRAFT - NOT IN FORCE - DO NOT PUBLISH
Prepared 13 November 2026, America/New_York. No effective date has been approved.
This is original proposed language for NOCKBLUE LIMITED (NockBlue), Nigeria. Bracketed TODO items and editorial notes are release blockers. Operational promises below are proposed obligations, not evidence that a control is live. Publish only after the owner confirms the facts, Nigerian counsel reviews the final text, and the matching release passes operational verification. Read README.md for the evidence ledger and decisions.

UniMata and NockBlue Website Disclaimer

UNCLARIFIED Proposed version: 0.1, 13 November 2026
Effective date: [TODO]

1. Scope

UNCLARIFIED This draft contains separate app and company website disclosures for NOCKBLUE LIMITED, Nigeria. Before publication, place the relevant disclosure beside the activity it explains and align it with final Terms, Privacy Policy and purchase screens. A disclaimer cannot correct a misleading headline or remove mandatory legal rights.

2. UniMata: learning and community information

UniMata supports learning and student connection through the features actually available in the release. Content may come from users or third parties. It may be incomplete, outdated or inaccurate. Check important information with your institution or another authoritative source before acting.

UNCLARIFIED NockBlue does not promise admission, examination results, grades, employment, scholarships or income. A course or institution appearing in UniMata does not by itself establish an affiliation, accreditation or endorsement. Email verification alone is not verification of student status, qualifications or the truth of a profile.

Use learning tools consistently with your institution's academic-integrity rules. You are responsible for understanding which assistance is permitted in your assessment. This does not relieve NockBlue of its own obligations concerning accurate service descriptions or lawful operation.

3. AI output

AI can generate plausible but false statements, references, calculations and recommendations. Outputs can reflect bias or omit relevant context. Review material before relying on it, submitting it, publishing it or sharing it with others.

AI is a study aid and does not replace a qualified professional. Do not rely on it as personalised medical, legal, financial or other regulated advice, or as a crisis service. Obtain appropriately qualified help for a consequential decision.

Outputs may resemble other outputs or existing material. NockBlue does not guarantee exclusive ownership, originality, copyright protection or freedom from third-party rights. Only submit inputs you are lawfully entitled to use. Do not provide unnecessary sensitive information or private information about other people.

UNCLARIFIED [TODO: align this section with actual AI tools and providers. A generic disclaimer does not excuse an unsafe design, unsupported capability claim or failure to disclose provider processing.]

4. Community content and safety

Other users' views are their own. A message or profile appearing in UniMata does not mean that NockBlue endorses it. Community content remains subject to the Community Guidelines and lawful moderation obligations.

Do not assume a stranger is trustworthy because they share an institution or use an official-looking name. Never give another user your OTP, password, PIN or full card details. UniMata's paid features are AI tools through permitted checkout channels; a request from another user is not an official charge.

UNCLARIFIED No guarantee of complete screening or prevention of every harmful interaction is made. Report concerns through [TODO: verified report route]. UniMata is not an emergency response service; if immediate danger exists, seek local emergency assistance or trusted in-person help.

5. Purchases and payments

UNCLARIFIED Charges must be disclosed before purchase. Paystack processes payments through permitted AI checkout channels. [Editorial: intended finished service; no live checkout verified. Coin checkout is not yet in the SwiftUI design.] This does not mean Paystack endorses UniMata or that a Paystack transaction guarantees the accuracy of an AI output.

Price, purchase type, limits, renewal if any and cancellation/refund conditions must appear in the purchase flow. A processor's rules do not override a customer's mandatory consumer rights. Payment processing, entitlement delivery and bank refund settlement can complete at different times; use the transaction reference to seek support.

UNCLARIFIED [TODO: complete the storefront billing review before showing Paystack-only purchase messaging in an iOS or Google Play release. The owner has specified monthly prices of ₦10,000, ₦25,000, ₦50,000 and ₦100,000, plus UniMaze coin purchases from ₦500 for 50 coins, including pay-as-you-go purchases without a plan. The maximum coin overdraft is 50 coins; AI answers pause at a balance of −50 until repaid. Exact allowances, larger-pack/subscription rates and operational repayment conditions remain unresolved; the minimum pack rate does not establish every effective rate. No refund deadline is approved by this draft.]

6. Availability and device data

Access can be affected by maintenance, network conditions, a device, account eligibility or a third-party outage. We will provide appropriate information and remedies where required. No absolute availability or data-recovery guarantee is made.

UNCLARIFIED Device-local chat storage, relay expiry and deleting an account are separate processes. Deleting a local copy does not necessarily delete a recipient's copy or a legally retained record. Do not describe communication as end-to-end encrypted unless that specific claim has been verified for the feature.

7. Company website: design illustrations and future plans

UNCLARIFIED Screens, diagrams and motion demonstrations identified as concepts illustrate a design direction. They are not evidence that every depicted feature is launched, independently verified or available on every device. Identify real screenshots accurately and show dates for material product status claims.

Statements about future development describe present intentions and may change. A roadmap is not a delivery guarantee. The company website must not display invented users, revenue, partner logos, ratings, awards, testimonials, investor participation or store availability. Any metric included later needs a definition, source and as-of date.

8. Investor and commercial enquiries

UNCLARIFIED Company and product information is provided for general discussion. It is not investment, legal or tax advice, a promise of returns or a public securities offer. Any proposed investment or commercial arrangement requires its own due diligence and properly approved documentation, subject to applicable law.

UNCLARIFIED [TODO: obtain advice before adding any fundraising instrument, investor eligibility form, financial forecast, payment link or public invitation to invest. A footer disclaimer alone does not determine securities-law compliance.]

9. Names, logos, third parties and links

NockBlue and UniMata branding belong to their respective lawful owner or licensor. Third-party names and marks belong to their owners. Identifying a vendor, institution or reference site does not imply a partnership or endorsement. Use third-party branding only with a lawful basis and accurate context.

External links lead to services with their own terms, privacy practices and availability. NockBlue must still take responsibility for its own representations and the integrations it chooses.

10. Rights and contact

Nothing here excludes a legal obligation, consumer remedy or liability that cannot lawfully be excluded. Read this disclaimer together with the applicable final Terms and Privacy Policy. Where a mandatory right applies, it prevails over inconsistent general language.

UNCLARIFIED Product support: support@unimata.app [TODO: activate]
Payment issue: billing@unimata.app [TODO: activate]
Privacy: privacy@unimata.app [TODO: activate]
Safety: safety@unimata.app [TODO: activate]
Company: hello@nockblue.com [TODO: activate]
Investor enquiry: investors@nockblue.com [TODO: activate]