Draft for review
Privacy Policy
This draft covers the ExamTraq website and study app. The legal name and address of the operator, the privacy contact, and the effective date are pending confirmation.
What information we handle and why
- Account and sign-in
- We use your name, email address, and authentication records to create and secure your account, verify your email, and help you regain access. If you choose Google sign-in, we receive the account identifier and basic profile details Google shares, such as your name, email address, and profile image. We use those details to sign you in and connect you to your ExamTraq account.
- Study activity
- We use your exam and subject choices, study goals, answers, scores, and lesson progress to save your work and show you what to practise next. If you use study groups or sharing features, other users can see the profile and study activity those features display. Review the visibility controls in the app before sharing.
- AI Tutor and Brainbox
- When you ask the AI Tutor a question or use Brainbox, we process your prompts, relevant study context, and the materials you provide. Brainbox can extract text from documents and images, use relevant excerpts to generate study resources, and save sources and outputs in your notebook. People you share a notebook with can see the materials made available through that sharing feature. Leave out private information that you do not need for your study task.
- Technical and support information
- We use connection and request information to deliver and secure the service and investigate faults or abuse. If you contact us, we use your message and contact details to respond and follow up.
Lawful bases
For core account and study features, we rely on processing necessary to provide the service you request under our agreement with you. Where applicable, we rely on legitimate interests for proportionate security, abuse prevention, and troubleshooting, taking account of your rights. We process information to meet legal obligations where they apply. We use consent for optional theme storage and in other cases where the law requires it. You can withdraw consent for theme storage in Cookie settings.
Who receives information
Service providers may handle information needed to host the service, store notebook files, or deliver account emails. Google handles its sign-in flow when you choose that option. The AI features can send prompts, study context, or relevant source material through OpenRouter to a model provider to generate answers and study resources. Scanned sources can be sent for text extraction. Where text-to-speech is available and requested, the speech provider receives text to turn into audio.
People you share study materials with receive the information you make available to them. We may disclose information to authorities when the law requires it. The production provider list and provider rules for retaining or reusing AI inputs are pending review.
International transfers and retention
Some providers may process information outside Nigeria. We will confirm the destinations and applicable safeguards before publishing this policy.
Account records keep the account working. Study records and notebooks let you return to your work. Security and support records help us investigate issues. Retention periods for these records, backups, deleted materials, and provider copies are pending confirmation.
Students and guardians
ExamTraq is designed for students preparing for exams. Students should talk to a parent or guardian before creating an account or sharing personal information. When we rely on consent to handle a child’s information, we will seek consent from a parent or legal guardian and verify it as required by Nigerian law. Guardians can use the privacy contact to ask about a child’s information or exercise rights on their behalf.
Your rights and how to contact us
Under Nigerian data protection law, you can ask for access to your information, correction, deletion, or restrictions on its use, where those rights apply. You can also object to certain processing, ask for a portable copy, withdraw consent, or challenge decisions based solely on automated processing where applicable. Study suggestions and practice scores help you decide what to review.
The monitored contact for requests and complaints will be added before this policy takes effect. You can also lodge a complaint with the Nigeria Data Protection Commission.