Privacy policy

Passwella helps students prepare for JAMB, WAEC, NECO, NABTEB, GCE and Post-UTME exams. This policy explains what we collect when you use Passwella, why, and the choices you have. We follow the Nigeria Data Protection Act 2023.

What we collect

• Your account: username, email address and a scrambled form of your password (we can't read it). If you sign in with Google, we receive only your name, email address and Google account number, never your Google password.
• Your study choices: the exam and subjects you pick and your exam date, if you give it.
• Your practice: the questions you answer, your answers, mock results and any question you report as wrong.
• Payments: if you upgrade, payment is handled by Paystack. We see whether a payment succeeded; we never see or store your card details.
• Security records: sign-in records and the network address used for failed sign-ins and password-reset requests, so we can block people trying to break into accounts.

How we use it

• To run your account, keep you signed in and show your progress and results.
• To send emails you need: a welcome email and password-reset links. We don't send marketing emails without asking you first.
• To keep accounts safe. An account can be signed in on one device at a time, so it can't be shared.
• To find and fix mistakes in questions, using the reports students send.

We don't sell your information and we don't show adverts.

Cookies

We use only the cookies Passwella needs to work: one that keeps you signed in, and small ones that keep your session consistent and protect Google sign-in. We don't use advertising or tracking cookies.

Where your information is kept

Passwella runs on Cloudflare, and your information is stored in Cloudflare's data centres, mainly in Western Europe. Emails are sent through Cloudflare, payments through Paystack, and Google sign-in through Google. Each only gets what it needs to do its part.

How long we keep it

We keep your account and practice history while your account is open. Sign-in sessions end after 30 days without use, and password-reset links expire after 30 minutes. If you ask us to delete your account, we delete your information within 30 days, apart from payment records we must keep by law.

Students under 18

Most Passwella users are secondary school students. If you are under 18, please use Passwella with your parent or guardian's permission.

Your rights

You can ask to see the information we hold about you, correct it, delete your account, or object to how we use it. Email us at zicopotential@gmail.com from the email on your account. You can also complain to the Nigeria Data Protection Commission.

Changes

If we change this policy, we will update the date above and tell you in the app if the change is important.