Privacy Policy

MyGradePrep ("we", "us") runs MyGradePrep, a website that helps students prepare for WAEC, JAMB, Post-UTME and other exams. This policy explains what personal data we collect, why, and the choices you have. We follow the Nigeria Data Protection Act 2023 (NDPA).

Who is responsible for your data

MyGradePrep, Lagos, Nigeria, is the data controller. Contact us about privacy at support@mygradeprep.com.

What we collect

• Account details: your name, email address, country and password. Passwords are stored scrambled (hashed) and nobody at MyGradePrep can read them.
• Learning activity: the exams you take, your answers, scores, time spent on questions and your progress, so we can mark your work and show your strengths and weak topics.
• Payments: the plan you bought, the amount, the date and the payment reference. Card and bank details are entered on Paystack's secure page and are never seen or stored by us.
• Activation PINs, referrals and agents: which PIN you used, who invited you or whom you invited, and the agent whose link you signed up through.
• Theory answers: the answers you type in theory (Paper 2) practice and the marks you give yourself.
• Parent details: if you add a parent or guardian, their email address and, optionally, their WhatsApp number.
• School membership: if you join your school with its code, the school and your class.
• Agents and schools: agents give us their phone number and bank details so we can pay commission; school managers give us the school's contact details.
• Device and security data: your IP address, browser type and sign-in times, used to keep your account secure and to allow one signed-in device at a time.

Why we use it

• To provide the service you signed up for: your account, exams, marking, results and Premium access (performing our contract with you).
• To take payments and keep financial records (contract and legal obligation).
• To protect accounts and prevent fraud, cheating and account sharing (legitimate interest).
• To send emails you need: account verification, password resets, receipts and reminders before your Premium ends. We do not send marketing emails without your consent.
• To improve questions and features using overall, anonymous statistics.

We do not sell your personal data, and we do not show third-party advertising.

Who can see your results

• Your school: if you join your school with its code, the school's managers and teachers can see your name, email, class and practice results. Leaving the school stops this.
• Your parent or guardian: only if you add them. They must confirm by email before any report is sent, and every report has a link to stop them.
• Leaderboards and competitions: your first name and the first letter of your surname (for example "Ada O.") may appear in public rankings with your score.

Students under 18

Many of our students are under 18. If you are under 18, please use MyGradePrep with the permission of a parent or guardian, who may contact us at any time to see or delete your data.

Who we share data with

Only with trusted providers who help us run the service, under agreements that protect your data:

• Paystack, to process payments;
• Brevo, to send our emails;
• Anthropic, only when a Premium student chooses "Mark with AI": the theory question, its marking scheme and the student's typed answer are sent to be marked. No name, email or other account details are sent, and Anthropic does not use this data to train its models;
• our hosting and security providers (servers and Cloudflare), which store and protect the website.

We may also disclose data where the law requires it.

Where your data is stored

Our servers may be located outside Nigeria, for example in the United States or Europe. When data is transferred abroad we use providers with appropriate safeguards, as required by the NDPA.

How long we keep it

We keep your account and learning data while your account is open. You can delete your account at any time in Settings → Profile; your personal data is then deleted, except payment records, which we keep for as long as tax and accounting laws require.

Cookies

We only use cookies needed for the website to work: to keep you signed in, protect forms from misuse, remember your country, and remember an invite or agent link until you sign up. We do not use advertising or tracking cookies.

Security

We use encrypted connections (HTTPS), hashed passwords, optional two-factor authentication, limits on sign-in attempts and regular backups. No system is perfectly secure; if a breach affecting you ever happens, we will inform you and the Nigeria Data Protection Commission as the law requires.

Your rights

Under the NDPA you can ask to see the data we hold about you, correct it, delete it, receive a copy in a portable format, object to certain uses, and withdraw consent. Email support@mygradeprep.com; we reply within 30 days. You may also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

Changes

If we make important changes to this policy, we will tell you by email or on the website before they take effect.