At Aceprep, we believe your data belongs to you. This policy explains clearly how we collect, use, and protect your information while you prepare for WAEC, BECE, and JAMB.
Last updated: March 2026
1 Information We Collect
When you create an account and use Aceprep, we collect:
- Account info: Full name, email address, phone number (optional), state of residence (optional)
- Academic data: Grade level, subjects selected, practice scores, study streaks, weak topics
- Usage data: Features used, session duration, AI tutor interactions
- Device info: Device type, OS version, app version
- Payment info: Subscription tier only — we never store card numbers. Payments are handled by Flutterwave and Google Play
2 How We Use Your Data
- To create and manage your account
- To personalise study content by grade and subject
- To generate AI-powered notes and practice questions
- To track academic progress and identify weak areas
- To process subscription payments
- To send study reminders (you can turn these off in Settings)
- To improve content accuracy and app performance
- To comply with Nigerian law (NDPR)
3 Data Sharing
We do not sell your personal data. We share it only with:
- Supabase — our secure database provider
- Google Gemini AI — generates study content (no personal identifiers included in prompts)
- Flutterwave / Google Play — processes payments
- Law enforcement — only when required by Nigerian law or a valid court order
4 Children's Privacy
Aceprep serves secondary school students, including those under 18. We collect only what is necessary for learning. We show no advertisements and share no student data with advertisers.
Parents or guardians may contact us at any time to request their child's data be deleted.
5 Data Security
All data is protected with:
- HTTPS encryption in transit
- Row-level security in our database (users can only access their own data)
- AES-256-GCM encryption for locally cached profile data on your device
We retain your data for as long as your account is active. You may request deletion at any time.
6 Your Rights
Under the Nigeria Data Protection Regulation (NDPR), you have the right to:
- Access the personal data we hold about you
- Correct inaccurate information
- Request deletion of your account and all data
- Withdraw consent for notifications (Settings → Daily Reminder toggle)
- Export your progress data
7 Cookies & Local Storage
Aceprep uses device local storage to cache your progress for offline use. We use no third-party tracking cookies and no advertising cookies.
8 Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes through the app or by email. Continued use of Aceprep after updates constitutes acceptance of the revised policy.
9 Governing Law
This Privacy Policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Regulation (NDPR) 2019.