Privacy Policy

1. Information we collect

• Account details: your name, email address and password. Passwords are stored only as salted hashes, never in plain text.
• Study activity: the practice exams you take, questions you answer, scores, topic-level results, TMA answers, downloads, and referral use.
• Payments: when you upgrade to Pro, the payment is processed by Paystack. We receive a transaction reference, amount, status and your email. We never see or store your full card details.
• Messages: the content of messages you send us through the contact form or email.
• Device and usage data: IP address, browser and device type, pages viewed, and actions on the site, collected through our analytics provider (see section 3).

2. How we use your data

• Provide the service: run mock exams, score them, and personalize practice to your weak topics.
• Manage your account, free quotas and Pro access.
• Process payments and keep the records we are required to keep.
• Answer your support requests and send account emails such as password resets and exam reminders.
• Keep the platform secure, prevent abuse, and fix problems.
• Understand how the product is used so we can improve it.

We do not sell your personal data, and we do not share it with advertising networks.

3. Cookies, local storage and analytics

• Your login session token is kept in your browser local storage so you stay signed in. A referral code is stored if you arrive through a referral link.
• We use PostHog (hosted in the EU) for product analytics: pages viewed, actions taken, and session replays that help us find and fix problems. Session replays mask form inputs, so what you type into fields, including passwords and payment details, is not captured.
• You can block cookies and local storage in your browser settings, though you may need to sign in again on each visit. To ask us to stop analytics for your account, contact us.

4. Who we share data with

We share personal data only with the service providers that make NounPrep work:

• PostHog (EU) - product analytics and session replay.
• Paystack - payment processing.
• Resend - transactional and support email delivery.
• Cloudflare - hosting, network and security.

We may also disclose data if the law requires it, or to protect the rights and safety of our users.

5. How long we keep data

• Account and study data is kept while your account is active. If you ask us to delete your account, we remove your personal data within 30 days, except records we must keep for payment or legal reasons.
• Daily database backups are encrypted and rotate off our systems within 5 days.
• Support conversations are kept for as long as needed to resolve the issue and for our records.

6. Security

• All traffic to NounPrep uses HTTPS.
• Passwords are hashed with industry-standard algorithms.
• Backups are encrypted before they leave our servers.
• Access to production systems is limited to the people who operate the service.

7. Your rights

Depending on where you live, including under Nigeria's Data Protection Act and the EU GDPR, you can ask to access, correct, delete, restrict or object to the processing of your personal data, request a copy in a portable format, and withdraw consent at any time. Contact us to exercise any of these rights; we respond within 30 days. You may also complain to the Nigeria Data Protection Commission or your local data protection authority.

8. Children

NounPrep is a study tool for university students and is not directed at children under 16. If we learn that we hold personal data from a child under 16, we will delete it.

9. International transfers

Our service providers process data in the EU (PostHog), Nigeria (Paystack) and other locations (Cloudflare's global network). Where data moves across borders, we take steps to ensure it stays protected.

10. Changes to this policy

If we make material changes, we will update this page and its effective date, and announce significant changes in the app or by email.

11. Contact us

Questions about this policy or your data? Email [email protected] or use the contact page.