Legal

Privacy Policy

We are committed to protecting your personal data. This policy explains what we collect, how we use it, and the choices you have.

Last updated: May 19, 2026

Plain-language summary

We collect your name, email, practice scores, and basic device info.
We never sell your data or use it for advertising.
Passwords are hashed - we cannot read them.
You can request deletion of your account and data at any time.
If you join a school, that school's admins can see your progress.

1. Who We Are

UTMEprep ("we", "our", "us") is a digital learning platform that helps Nigerian students prepare for the Unified Tertiary Matriculation Examination (UTME). Our platform is accessible at utmeprep.app. Any questions about this policy can be directed to privacy@utmeprep.app.

2. Information We Collect

Information you provide directly

Account details - name, email address, and password
Profile information - state of residence, UTME subject choices
Communications - messages sent to our support team

Information collected automatically

Exam and practice session data - subjects attempted, scores, time taken, answers selected
Usage data - pages visited, features used, session duration
Device and browser information - IP address, browser type, operating system
Cookies and similar tracking technologies (see our Cookie Policy)

Information from third parties

If you sign in using Google, GitHub, or Microsoft, we receive your name and email address from that provider. We do not receive your password.

3. How We Use Your Information

To create and maintain your account
To personalise your learning experience and subject recommendations
To calculate XP, levels, streaks, and leaderboard rankings
To run live competitions and display results
To send verification emails, OTP codes, and important account notices
To analyse platform performance and improve our product
To detect and prevent fraud or abuse

We do not sell your personal data to third parties. We do not use your data for targeted advertising.

4. Data Storage and Security

Your data is stored on Supabase (PostgreSQL database hosted on AWS infrastructure). Passwords are hashed using bcrypt with 12 rounds and are never stored in plain text. Access tokens are short-lived (15 minutes); refresh tokens are stored in Redis with a 7-day expiry.

We implement industry-standard security measures including HTTPS-only access, role-based access controls, and regular security reviews. No method of transmission over the internet is 100% secure; we cannot guarantee absolute security.

5. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it longer (e.g. financial records). Anonymised, aggregated analytics data may be retained indefinitely.

We share your data only in the following circumstances:

Service providers - Supabase (database), Upstash (session caching), Resend (email delivery). These providers process data only on our behalf.
School administrators - If you join a school on UTMEprep, your name, XP, scores, and progress are visible to that school's administrators.
Legal obligations - If required by law or a valid court order.
Business transfer - In the event of a merger or acquisition, your data may transfer to the new entity under the same privacy commitments.

7. Your Rights

You have the right to:

Access - request a copy of the personal data we hold about you
Correction - update inaccurate data via your profile settings
Deletion - request that we delete your account and personal data
Portability - request your data in a machine-readable format
Objection - object to certain types of processing

To exercise any of these rights, email us at privacy@utmeprep.app. We will respond within 30 days.

8. Children's Privacy

UTMEprep is intended for students aged 15 and above. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us and we will delete it promptly.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes by email or by displaying a notice on the platform. The "Last updated" date at the top of this page indicates when the latest revision was made. Continued use of UTMEprep after changes are posted constitutes your acceptance.

10. Contact Us

For privacy-related questions, contact our team at privacy@utmeprep.app or visit our Help Centre.