Your Privacy Matters to Us

1. Who We Are

PrepBeta is an AI-powered exam preparation platform for Nigerian students writing JAMB, WAEC, and NECO. We are operated by PrepBeta Technologies Limited, incorporated in Nigeria (RC Number: 1234567).

Registered address: Plot 45 Wuse II, Abuja, FCT, Nigeria
Data Protection Officer: privacy@prepbeta.ng
Support: support@prepbeta.ng | +234 901 234 5678

For the purpose of this Privacy Policy, "PrepBeta", "we", "us", and "our" refer to PrepBeta Technologies Limited. "You" refers to any user of the PrepBeta platform — whether a student, parent, school administrator, or visitor to our website.

2. Information You Provide to Us

When you register on PrepBeta or use our services, you provide us with the following categories of personal information:

3. Information Collected Automatically

When you use the PrepBeta platform — including our web dashboard and WhatsApp service — we automatically collect certain technical information:

• Device information — device type, operating system, and browser type when you access our web dashboard
• Usage data — pages visited, features used, time spent on the dashboard, and click patterns
• IP address — used for security monitoring and fraud prevention only; not used for profiling
• WhatsApp message metadata — delivery status and read receipts for lessons sent via WhatsApp Business API (we do not read the content of your personal WhatsApp messages)
• Cookies and local storage — used to maintain your login session on the web dashboard. See Section 11 (Cookies) for full details.

4. Children's Data

PrepBeta serves students, many of whom may be under the age of 18. We treat all student data with the highest level of care, regardless of age.

• Where a parent registers a child's account, the parent provides and controls the student's personal data
• School administrators who register students on behalf of their institution take responsibility for ensuring they have appropriate consent from students and parents
• We do not collect more data from students than is strictly necessary to deliver the educational service
• Student academic performance data (test scores, lesson completion) is accessible only to the student, their linked parent, and their school administrator — not to third parties

5. Purposes of Processing

We process your personal data only for the following lawful purposes:

• Service delivery — To create and manage your account, deliver daily lessons and tests via WhatsApp, track your academic progress, and provide your dashboard.
• Communication — To send OTP verification codes, lesson content, test questions, weekly recaps, and important service notifications via WhatsApp or email.
• Parent reporting — To generate and deliver daily progress reports to linked parents or guardians on their child's lesson activity and test performance.
• School management — To enable school administrators to manage student accounts, track access durations, monitor activity, and link parents under their school subscription.
• Payment processing — To verify and record payment transactions for plan activations and renewals. We work with licensed payment processors; we do not store card details.
• Platform improvement — To analyse aggregate usage patterns and improve lesson quality, test design, and dashboard features. This analysis uses anonymised or aggregated data.
• Security and fraud prevention — To detect and prevent unauthorised access, duplicate registrations, and fraudulent payment activity.
• Legal compliance — To comply with applicable Nigerian laws and regulations, including the Nigeria Data Protection Regulation (NDPR) and the Nigeria Data Protection Act 2023.

We do not use your data for:

• Selling or renting to third-party marketers
• Behavioural advertising or retargeting campaigns
• Building profiles for commercial sale
• Any purpose not listed above without your explicit consent

6. Third-Party Service Providers

We share limited personal data with trusted service providers who help us operate PrepBeta. All providers are contractually required to protect your data and may only use it for the specific purpose we engage them for:

7. Sharing Within the Platform

Access to student data within the PrepBeta platform is strictly role-scoped:

• Students can only see their own data — their lessons, scores, and account details
• Parents can only see the data of their directly linked children — no other students
• School admins can only see the data of students enrolled under their specific school account — no other schools' students
• PrepBeta staff access user data only when necessary to provide support, resolve technical issues, or comply with legal obligations — and only with appropriate access controls in place

8. Legal Disclosure

We may disclose your personal information if required to do so by law, or in good faith belief that such action is necessary to:

• Comply with a legal obligation, court order, or government request under Nigerian law
• Protect the rights, property, or safety of PrepBeta, our users, or the public
• Detect, prevent, or address fraud, security vulnerabilities, or technical issues

We will notify affected users of any such disclosure where we are legally permitted to do so.

9. How We Protect Your Data

We implement industry-standard technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction:

• Encryption in transit — All data exchanged between your device and our servers is encrypted using TLS (Transport Layer Security)
• Encryption at rest — All stored personal data and academic records are encrypted at the database level
• OTP authentication — We use WhatsApp OTP for all logins — no passwords are stored, eliminating password breach risks
• Access controls — Role-based access controls ensure staff can only access the data they need for their specific responsibilities
• Payment security — Card details are processed and stored by our PCI-DSS compliant payment partners (Paystack/Flutterwave). PrepBeta never stores raw card data
• Regular security reviews — We conduct periodic security assessments to identify and address vulnerabilities
• Data minimisation — We collect only the minimum data necessary to operate the service

10. How Long We Keep Your Data

We retain your personal data only for as long as necessary to provide the service and comply with our legal obligations:

After the applicable retention period, data is permanently deleted or anonymised such that it can no longer be linked to any individual.

11. How We Use Cookies

PrepBeta uses cookies and similar technologies on our web dashboard to maintain your login session and improve your experience. We use only essential cookies — we do not use advertising cookies, tracking pixels, or third-party analytics cookies on our platform.

• Session cookies — Keep you logged in during your browser session. Deleted when you close your browser.
• Authentication tokens — Remember your login state between sessions if you choose "Remember me".
• Preference cookies — Remember your dashboard preferences such as theme (dark/light mode).

You can control cookies through your browser settings. Disabling essential cookies may prevent you from logging in to your dashboard. Our WhatsApp-based service functions independently of cookies.

12. Exercising Your Rights

To exercise any of the above rights, contact our Data Protection Officer at privacy@prepbeta.ng with:

• Your full name and registered WhatsApp number
• A clear description of the right you wish to exercise
• Any supporting information to help us verify your identity

We will respond to your request within 30 days. In complex cases, this may be extended by a further 60 days with notice. There is no charge for exercising your rights, except in cases of manifestly unfounded or excessive requests.

If you are dissatisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

13. Cross-Border Data Transfers

PrepBeta's primary infrastructure is hosted within Nigeria. In some cases, technical service providers may process data in other jurisdictions (for example, cloud infrastructure with data centres outside Nigeria). Where such transfers occur:

• We ensure the receiving country provides an adequate level of data protection
• We put appropriate contractual safeguards in place with all international service providers
• Data transferred internationally is limited to what is strictly necessary for the service
• All international providers are prohibited from using your data for their own purposes

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes:

• We will update the "Last updated" date at the top of this page
• We will notify all registered users via WhatsApp or email at least 14 days before the change takes effect
• For significant changes affecting how we use your data, we will request fresh consent where required

Continued use of PrepBeta after a policy update constitutes your acceptance of the revised terms.

15. Contact Our Data Protection Officer

For any questions, concerns, or requests related to this Privacy Policy or how we handle your personal data, contact our dedicated Data Protection Officer:

• Email: privacy@prepbeta.ng
• General support: support@prepbeta.ng
• WhatsApp: +234 901 234 5678
• Address: Plot 45 Wuse II, Abuja, FCT, Nigeria

We aim to respond to all privacy enquiries within 5 business days and to resolve all requests within 30 days.