MBPrep/Privacy Policy
Your data, handled with care.
What we collect, why we collect it, who we share it with, and the rights you have under the Nigeria Data Protection Act 2023.
In plain words summary
- We collect only what we need: your account, study profile, learning activity and payment status.
- We never use passwords and never see your full card number.
- We don't sell your data or use it for ads.
- Your classmates see only your first name and score on leaderboards, and you can hide yourself.
- You can see, correct, export or delete your data at any time.
This summary helps you read the full text below. The full text is what applies.
01Who we are
This policy explains how MBPrep ("we") collects and uses personal data when you use our website, mobile apps and the @MBPrepBot Telegram bot. We are the data controller for this data.
We follow the Nigeria Data Protection Act 2023 and the guidance of the Nigeria Data Protection Commission (NDPC).
02What we collect
We only collect what we need to run MBPrep for you.
| What | Examples | Why |
|---|---|---|
| Account details | Name, email address; from Google: your name, email and profile photo | To create your account and sign you in |
| Study profile | School, the MB exam you're preparing for, subjects, exam month, drill time, daily goal | To give you the right question bank and plan |
| Learning activity | Answers, scores, mock exams, revision queue, written answers you submit, time spent | To mark your work, track progress and schedule revision |
| Telegram details | Telegram user ID, username and display name, when you link Telegram | To deliver drills and connect Telegram to your account |
| Payment records | Amount, date, plan, payment status and reference from our payment provider | To manage your subscription and receipts |
| Messages to us | Support requests, error reports, feedback | To help you and improve answers |
| Technical data | Device and browser type, app version, IP address, error logs | To keep the Service secure and working |
We never collect your password, because we don't use passwords, and we never see or store your full card number.
03How we use it
- To provide the Service: signing you in, building your bank and plan, marking answers and scheduling revision.
- To take payments and manage your subscription.
- To send you what you asked for: sign-in codes, daily drills and reminders by email or Telegram.
- To improve MBPrep, for example finding questions many students get wrong so we can check and improve those answers.
- To keep MBPrep secure and prevent account sharing and misuse.
- To tell you about important changes to the Service or these policies.
We do not sell your personal data, and we do not use it for third-party advertising.
04Our legal basis
Under the Nigeria Data Protection Act, we rely on:
- Contract: to provide the subscription you signed up for.
- Consent: for optional things such as reminders and marketing emails. You can withdraw consent at any time.
- Legitimate interests: to secure and improve the Service, in ways you would reasonably expect.
- Legal obligation: to keep payment records as the law requires.
05Leaderboards and your class
If you appear on a class leaderboard, other students in your class can see your first name and your score. You can hide yourself from leaderboards at any time in your settings.
We do not share your individual results with your school, lecturers or anyone else without your permission. We may share combined statistics that cannot identify you, such as how many students use MBPrep at a school.
07International transfers
Some of our providers store data on servers outside Nigeria. When this happens, we make sure appropriate safeguards are in place as the Nigeria Data Protection Act requires.
08How long we keep it
- Account and learning data: for as long as your account is open, and for up to 12 months after you close it, unless you ask us to delete it sooner.
- Payment records: for as long as tax and accounting law requires.
- Sign-in codes: they expire after 10 minutes and are deleted soon after.
- Support messages: for up to 24 months.
09Keeping it safe
We protect your data with encryption in transit, access controls, and short-lived sign-in codes. No system is perfectly secure, so if we ever discover a breach that affects you, we will tell you and the NDPC as the law requires.
10Your rights
You have the right to:
- see the personal data we hold about you and get a copy;
- correct anything that is wrong;
- ask us to delete your data;
- object to or restrict how we use it;
- receive your data in a portable format;
- withdraw consent at any time, for example to reminders.
To use any of these rights, contact us. We will reply within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission.
11Students under 18
MBPrep is for students aged 16 and over. If you are under 18, please make sure a parent or guardian knows you use MBPrep. We do not knowingly collect data from anyone under 16; if we learn that we have, we will delete it.
13Changes to this policy
We will update this policy when our practices change. When we make an important change, we will tell you by email or in the app. The date at the top shows the latest version.
14Contact
Questions or requests about your data? Use our contact form or message @MBPrepBot on Telegram.