Privacy Policy

1. Introduction

Welcome to myexam.ng ("we", "us", "our", "platform"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website, mobile application, and services.

We are committed to protecting your personal information and your right to privacy. If you have any questions or concerns about this policy, please contact us at privacy@myexam.ng.

2. Information We Collect

2.1 Personal Information You Provide

When you register and use our platform, we collect:

• Account Information: Full name, email address, phone number, date of birth
• Educational Information: Matriculation number, department, level of study, institution name
• Profile Information: Profile picture, bio, academic interests
• Payment Information: Transaction history, wallet balance (we do not store full payment card details)
• Communication Data: Messages, support tickets, feedback, survey responses

2.2 Information Automatically Collected

When you use our platform, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent, quizzes taken, contest participation
• Performance Data: Quiz scores, completion rates, study patterns
• Location Data: Approximate location based on IP address

2.3 Information from Third Parties

We may receive information about you from:

• Social Media: When you sign in with Google or Facebook
• Payment Processors: Payment confirmation and status (not full card details)
• Educational Partners: If you access through partner institutions

3. How We Use Your Information

We use your information for the following purposes:

• Account Management: Create and manage your account, verify identity
• Service Delivery: Provide quizzes, contests, tutoring services, and learning materials
• Payment Processing: Process transactions, manage wallet, disburse winnings
• Personalization: Recommend content, adapt difficulty levels, suggest study plans
• Communication: Send notifications, reminders, updates, and promotional materials (opt-out available)
• Analytics: Improve platform performance, analyze usage patterns, develop new features
• Security: Detect and prevent fraud, unauthorized access, and cheating
• Legal Compliance: Fulfill legal obligations, respond to lawful requests

Legal Basis for Processing (GDPR)

For users in the European Economic Area, we process your information based on:

• Contract performance (providing our services)
• Legitimate interests (improving our platform, security)
• Legal obligations (tax reporting, compliance)
• Consent (marketing communications)

4. Information Sharing & Disclosure

4.1 When We Share Information

We may share your information in the following circumstances:

• Service Providers: Third parties who help us operate (hosting, payment processing, email delivery)
• Educational Partners: If you access through a partner institution (with your consent)
• Contest Results: Leaderboard rankings (anonymized where required)
• Legal Requirements: When required by law or to protect rights and safety
• Business Transfers: In case of merger, acquisition, or bankruptcy

4.2 When We Do NOT Share Information

5. Cookies & Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. Cookies are small text files stored on your device.

Managing Cookies

You can control cookies through browser settings. Disabling cookies may affect platform functionality.

To manage cookies:

• Chrome: Settings → Privacy → Cookies
• Firefox: Options → Privacy & Security → Cookies
• Safari: Preferences → Privacy → Cookies
• Edge: Settings → Cookies and site permissions

6. Third-Party Services

We integrate with trusted third-party services to enhance our platform:

7. Data Security

We implement robust security measures to protect your information:

• Encryption: SSL/TLS encryption for all data transmission
• Storage Security: Encrypted databases, firewalls, access controls
• Password Protection: Passwords hashed and salted (never stored in plain text)
• Access Control: Strict employee access policies
• Monitoring: 24/7 security monitoring and regular audits
• PCI Compliance: Payment processing follows PCI DSS standards

8. Data Retention

We retain your data based on the following schedule:

• Active Accounts: Data kept while account is active
• Inactive Accounts: 12 months after last login
• Deleted Accounts: Data anonymized or deleted within 30 days
• Transaction Data: 7 years (legal/tax requirements)
• Quiz Results: 5 years for academic records
• Communication Logs: 3 years

Data may be retained longer if required by law or for legitimate business purposes.

9. Your Rights & Choices

9.1 Your Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data
• Correction: Correct inaccurate or incomplete data
• Deletion: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Portability: Receive your data in a transferable format
• Objection: Object to certain processing (e.g., marketing)
• Withdraw Consent: Withdraw previously given consent

9.2 How to Exercise Your Rights

To exercise your rights:

• Email us at privacy@myexam.ng
• Use the "Delete Account" feature in Settings
• Contact our Data Protection Officer (DPO)

We will respond within 30 days. Identity verification may be required.

9.3 Marketing Communications

You can opt-out of marketing emails by:

• Clicking "unsubscribe" in any marketing email
• Updating notification preferences in Settings
• Contacting support

Essential service communications (e.g., password reset, payment confirmations) cannot be opted out of.

10. Children's Privacy

Our platform is intended for students aged 13 and above. We do not knowingly collect information from children under 13.

For Parents/Guardians:

• If you believe your child under 13 has provided personal information, contact us immediately
• We will delete such information promptly
• We recommend parental supervision for minors using our platform

11. International Data Transfers

Our servers are located in Nigeria and the European Union. If you access our platform from outside these regions, your data may be transferred to and processed in these locations.

We ensure appropriate safeguards for international data transfers:

• Standard Contractual Clauses (SCCs) for EU data transfers
• Data Processing Agreements (DPAs) with service providers
• Compliance with Nigerian Data Protection Regulation (NDPR)
• GDPR compliance for EU residents

12. Updates to This Policy

We may update this Privacy Policy periodically. Changes are effective when posted.

Notification of Changes:

• Minor Updates: Posted on this page with updated "Last Updated" date
• Material Changes: Email notification to registered users + website banner
• Significant Changes: Explicit consent may be required

We encourage you to review this policy regularly.

13. Contact Us

Complaints

If you have unresolved concerns, you may contact:

• Nigeria: National Information Technology Development Agency (NITDA)
• EU: Your local Data Protection Authority (DPA)