Privacy Policy

1. Who we are

GURU is an exam-preparation app for Nigerian students. For the purposes of the NDPA, GURU (the operator of this app) is the data controller of the personal data described here. You can reach us at support@gurupoint.ng.

2. Data we collect

Account details — your name, username, email address, password (stored only in a securely hashed form, never in plain text), and optionally your phone number, school, class, state, and a profile picture if you add one.

Your activity — the practice papers and tests you attempt, your scores and progress, and messages you send in study groups.

Device and sign-in information — a device label (e.g. “Chrome on Android”), your approximate IP address, and session times. We use this to keep your account secure and to prevent account sharing.

Payment records — when you buy Premium, we keep a record of the transaction (reference, amount, date, plan). Payments are handled by Paystack; we do not see or store your card or bank details.

3. Why we use your data

We use your data to: provide and run the app; show your progress and results; run study groups; keep accounts secure and prevent login sharing; process Premium payments; send you account emails such as password resets and email confirmation; provide support; and meet our legal obligations.

4. Our legal basis (NDPA)

We rely on: your consent (which you give when you create an account and can withdraw); the performance of our agreement with you (to give you the service you signed up for); and our legitimate interests in keeping the platform safe and preventing abuse — balanced against your rights.

5. Who we share data with

We do not sell your personal data. We share it only with trusted providers who help us run GURU:

• Paystack — to process payments securely. • Resend — to send account emails (like password resets and confirmation links). • Our hosting provider — to store the app and its database on secure servers.

We may also disclose data if required by law, to protect our rights or the safety of users, or as part of a business transfer — in which case we will protect your data as described here.

6. How we protect your data

We take reasonable steps to protect your data: passwords are stored using strong one-way hashing, data is sent over encrypted (HTTPS) connections, sessions use secure cookies, and access to accounts is limited. No system is perfectly secure, but we work to keep your data safe and to fix problems quickly.

7. How long we keep it

We keep your data for as long as your account is active. If you delete your account (or ask us to), we remove your personal data, except for limited records we are required to keep by law, such as payment records for tax and accounting.

8. Your rights

Under the NDPA, you have the right to:

• access the personal data we hold about you; • ask us to correct data that is wrong; • ask us to delete your data; • withdraw your consent at any time; • object to or restrict certain uses; • ask for a copy of your data in a portable form; and • complain to the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your data.

To use any of these rights, email us at support@gurupoint.ng. You can also update your profile or delete your account from within the app.

9. Children and students

Many GURU users are secondary-school students who may be under 18. If you are under 18, you should use GURU only with a parent or guardian's consent. A parent or guardian may contact us to review, correct, or delete their child's data. We collect only the data needed to provide the study service and do not knowingly use children's data for advertising.

10. Cookies

GURU uses only essential cookies — a secure sign-in cookie that keeps you logged in, and a device cookie that helps prevent account sharing. We do not use advertising or third-party tracking cookies.

11. Where your data is stored

Your data is stored on secure servers operated by our hosting provider, which may be located outside Nigeria. Where data is transferred abroad, we take steps to ensure it remains protected to a standard consistent with the NDPA.

12. Changes to this policy

We may update this policy from time to time. We will change the “Last updated” date above and, for important changes, tell you in the app. Please check back so you stay informed.

13. Contact us

For any privacy question or request, email support@gurupoint.ng. If you are not satisfied with our response, you may contact the Nigeria Data Protection Commission (NDPC).