🔒 Privacy Policy

1Information We Collect

We follow a "Data Minimization" principle, meaning we only collect what is strictly necessary to provide our service.

• Authentication Data: We exclusively use Google Authentication. When you sign in, we receive your Name, Email Address, and Profile Picture from Google. We do not see or store your Google password.
• Performance Data: We track your practice scores, time spent on questions, and progress to generate your analytics and leaderboard standing.
• Payment Data: Payments are processed via third-party secure gateways (e.g., Squad by GTBank). We do not store your credit card or bank details on our servers.

2How We Use Your Information

We use the collected data to:

• Create and manage your user account.
• Display your rank on the Weekly Leaderboard.
• Process your one-time payment for "Unlimited Access."
• Send automated email notifications regarding your performance or platform updates.

3Legal Basis for Processing (GDPR Compliance)

Under GDPR, we process your data based on:

• Contractual Necessity: To provide the exam prep services you paid for.
• Consent: Given by you when you choose to "Sign in with Google."
• Legitimate Interest: To improve our question bank and maintain a competitive leaderboard environment.

4Data Sharing and Third Parties

We do not sell or rent your personal data. We only share data with:

• Google: To facilitate the OAuth login process.
• Payment Processors: To verify your ₦1,000 transaction.
• Cloud Hosting Providers: To securely store our database.

5Your Rights (The GDPR "Power" Clause)

As a user, you have the following rights:

• Right to Access: You can request a summary of the data we hold about you.
• Right to Rectification: You can update your profile info (via your Google Account).
• Right to Erasure (The Right to be Forgotten): You may request that we delete your account and all associated practice data at any time.
• Right to Withdraw Consent: You can disconnect your Google Account from Prep Genius in your Google Security settings.

6Cookies

We use "Essential Cookies" to keep you logged in during your session. We do not use tracking cookies for third-party advertising.

7Data Retention

We retain your practice history as long as your account is active to help you track your progress. If your account is inactive for more than 24 months, we reserve the right to delete your data.

Note on Refunds: As stated in our Terms and Conditions, all sales are final. Data deletion does not entitle the user to a refund of the ₦1,000 access fee.

8Children's Privacy

Our service is intended for students. If a user is under 13 (or 16 in some jurisdictions), we encourage parental supervision. We do not knowingly collect data from children without the intent of providing educational services.

9Contact Our Data Protection Officer (DPO)

If you have questions about this policy or wish to exercise your data rights, please contact: