Privacy Policy
ACE NAIJA is designed with practical privacy controls to support modern expectations across NDPR-aligned, GDPR/UK GDPR-style, and other global data protection principles.
We process only the data needed to provide exam preparation features, improve learning outcomes, secure accounts, and operate the service responsibly.
1) Privacy principles we apply
- Lawful, fair, and transparent processing
- Purpose limitation and data minimization
- Accuracy, storage limitation, and accountability
- Security safeguards, access controls, and auditability
2) Data we collect
- Account data (name, email, optional phone, auth metadata).
- Learning data (exam preferences, study plans, objective-question attempts, scores, streaks, progress trends).
- Community data (group messages, participation, and moderation events).
- Billing data needed for subscription state and transaction verification.
- Technical and security data (logs, device/browser info, and anti-abuse signals).
3) How we use data
- Deliver core product features (planning, objective questions, analytics, reminders, and groups).
- Personalize practice and recommendations based on performance patterns.
- Protect users and platform integrity, including abuse prevention and moderation.
- Operate subscriptions, payment confirmation, and support workflows.
- Meet legal, regulatory, and incident-response obligations where applicable.
4) Legal bases and consent
Depending on jurisdiction, we rely on contract performance, legitimate interests, consent, and legal obligations. Optional communication channels can be managed in your notification settings.
5) Sharing, processors, and transfers
We use trusted processors for infrastructure, authentication, storage, payments, messaging, and email delivery. We do not sell personal data. Cross-border processing may occur with safeguards appropriate for the applicable legal framework.
6) Security and retention
We use technical and organizational controls (for example, access restrictions, transport security, and monitoring). Data is retained only as long as needed for service delivery, compliance, dispute handling, and security operations.
7) Your rights and requests
- Request access to personal data we hold about you
- Correct inaccurate or incomplete profile data
- Request deletion of your account and related personal data
- Object to or restrict specific processing where applicable
- Request export/portability of your account data
- Withdraw consent for optional communications
You can submit privacy-related requests through official ACE NAIJA support channels. We may verify identity before completing sensitive account actions.
8) Policy updates
We may update this policy as features, laws, or operational requirements evolve. Material updates will be reflected on this page with an updated effective date.
Effective date: 2026-03-15