Privacy Policy

1. Who we are

PrepPlug (“we”, “us”) provides exam preparation for the JAMB, WAEC and NECO examinations through our website, mobile app, desktop app and WhatsApp service. We operate from Nigeria and are the data controller for the personal data described here.

For anything in this policy, write to info@prepplug.com.

2. What we collect

Your account. Your phone number is your primary identifier, so we always hold it. We also hold your name, your password in hashed form (we cannot read it), and your email address if you add one in your profile. If you sign in with Google, we store the account identifier Google gives us — not your Google password.

How you study. The practice sessions and mock exams you take, the answers you give, your scores, the subjects, boards and years you choose, and the XP, streaks and badges built from them. This is what makes your progress screens work.

Payments. Card and bank payments are processed by Paystack. We never see, receive or store your card number, CVV or PIN. We keep the transaction reference, the amount, the plan and whether it succeeded.

Data bundle purchases. If you buy airtime or a data bundle through us, we store the recipient phone number, the network and the plan so the order can be delivered and supported.

Affiliates. If you join the affiliate programme, we additionally store your bank code, account number and the account name returned when we verify it, so that commissions can be paid.

Technical records. Our servers keep ordinary operational logs, which include IP addresses, timestamps and error details. These are used to keep the service running and secure.

3. What we do not do

We think this is as important as the list above, so we will be specific.

• We do not run advertising networks, pixels or third-party analytics trackers in our apps.
• We do not use tracking cookies. Our apps sign you in with a token kept on your own device.
• We do not sell, rent or trade your personal data to anyone.
• We do not store your card details, and we never ask for your bank PIN or OTP.
• We do not read your WhatsApp conversations with other people.

4. Why we use it

• To provide the service — signing you in, showing questions, marking your answers, tracking progress, and delivering what you have paid for.
• To take payments and keep records of them, which we are required to do.
• To support you when you contact us, and to send service messages such as a welcome message or a notice that your password changed.
• To keep the platform safe — preventing fraud, abuse and account sharing.
• To improve the product, using aggregate patterns such as which topics students find hardest.

5. Who we share it with

We share the minimum necessary with the following providers, each for a single purpose:

• Paystack — to process payments. They receive what they need to charge you.
• Rubies — to confirm that an affiliate’s bank account name matches the account number given, before any payout.
• VTU.ng — to deliver airtime and data bundles you order.
• WhatsApp (Meta) — to deliver messages to you on WhatsApp, if you use that channel.
• Our hosting and storage providers — who run the servers and store question images.
• Google — only if you choose to sign in with a Google account.

We may also disclose data where the law requires it, or to establish or defend a legal claim. Some of these providers operate servers outside Nigeria; where that happens we rely on their contractual data protection commitments.

6. Where your data is kept

Your account and study data are held in a managed database with access restricted to the small number of people who operate the service. Passwords are stored only as salted hashes. Your sign-in token is kept on your own device — in your browser’s local storage on the web, and in the operating system’s secure storage on mobile. Clearing your browser data or signing out removes it.

7. How long we keep it

We keep your account and study history for as long as your account is open, because your progress, streaks and past results depend on it. If you close your account we delete or anonymise your personal data within 90 days, except records we must keep longer — payment and payout records in particular, which are retained for the period required by Nigerian tax and financial rules.

8. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to ask us for a copy of your data, to correct it, to delete it, to object to how we use it, and to withdraw consent you previously gave. You can change your name, phone number and email yourself in your profile at any time.

To make any other request, email info@prepplug.com. We will respond within 30 days. If you are not satisfied with our response, you may complain to the Nigeria Data Protection Commission.

9. Students under 18

Many people preparing for JAMB, WAEC and NECO are under 18, and PrepPlug is built for them. We do not knowingly collect more from a younger student than from anyone else, and we show no advertising to any user.

If you are under 18, you should use PrepPlug with the knowledge and permission of a parent, guardian or school. A parent or guardian may contact us at info@prepplug.com to see, correct or delete a child’s data, and we will act on that request.

10. Security

All traffic between your device and our servers is encrypted in transit. Passwords are hashed. Access to production systems is limited and authenticated. No system is perfectly secure, and we will not pretend otherwise — but if a breach affects your personal data, we will notify you and the Nigeria Data Protection Commission as the law requires.

11. Changes to this policy

If we change this policy we will update the date at the top of this page. If a change materially affects how we use your data, we will tell you in the app or by message before it takes effect.

12. Contact us

Questions, requests or complaints go to info@prepplug.com, or through our contact page. See also our Terms of Service.