Your practice data should never be a mystery.

Exampaper is an independent assessment-practice service. It is not JAMB, WAEC, NECO, IELTS, TOEFL or any other examining body, and those bodies do not operate or endorse this service.

The data controller is the legal operator of Exampaper. Its registered legal name and service address have not yet been supplied to this technical draft and must be added before publication. Until a dedicated privacy contact is appointed, questions and requests can be sent to support@exampaper.com.ng.

Account and profile

• Email address and authentication records needed to create an account and send a sign-in code.
• Display name, birth year, a derived under-18 flag, locale and country. We ask for a birth year, not a full date of birth.
• Study preferences such as target exam, target date, subjects, language or voice register and notification choices.
• An optional public avatar for an eligible adult account. Minor accounts cannot set a public avatar.

Practice, simulation and study

• Papers opened, questions shown, answers, written responses, correctness, marks, timing, confidence and session status.
• Topic mastery, revision schedules, daily-practice history, progress, streaks and other study-plan state.
• Predicted scores, the inputs used to calculate them and any actual result a candidate chooses to report for calibration.
• Questions asked of the tutor, generated explanations, reports, correction requests and teacher notes connected to the account.

Classes, payments, support and referrals

• School or organisation membership, cohort membership, role, join and leave dates, assignments and the progress shared with an authorised teacher.
• Purchase amount in kobo, currency, product, entitlement, payment status, Paystack reference, payer email where supplied, reconciliation events and payment-request activity. Exampaper does not receive or store a complete payment-card number.
• Referrer and referred-account relationship, reward state, support messages and the information someone chooses to put in them.

Technical and device information

• Security and delivery records such as IP address, timestamps, browser or device information, request logs and errors that infrastructure providers generate when the service is used.
• A local copy of questions, stimuli, answers and unsent progress on the device so an interrupted connection does not destroy an attempt.

The lawful-basis analysis below is proposed for professional review; it is not a final legal conclusion. The final version must consider the particular safeguards required for children and educational records.

Where processing relies on consent, it must be as easy to withdraw as to give. Removing consent does not make earlier lawful processing unlawful. Some features cannot work without the information they are built from; we will explain that before collection.

Some free-text answers, tutor questions and requests for explanations may be sent from an Exampaper server to the configured model provider. The payload can include the candidate's answer or query, the relevant question or stimulus, a marking rubric and the minimum context needed to return useful feedback. Provider credentials never reach the browser or mobile app.

The current model integration is configured for Moonshot/Kimi, with an alternate provider possible through server configuration. The live provider and its contractual retention and training terms must be verified before this draft becomes final; changing provider also requires changing this notice. Generated output and the model identifier may be stored with the response so a result can be explained and audited.

AI feedback can be incomplete or wrong. It is practice feedback, not an official exam result, admission decision, employment decision or other decision with legal effect. Candidates can report a questionable item or mark for human review through the result and correction routes.

Joining a class lets authorised organisation staff see the information needed to run that class: the candidate's display name, membership, assignments, completion, results, readiness and relevant progress. A teacher does not receive the candidate's payment-card details or unrelated support conversations.

Class access is bounded by recorded membership dates. A person who joins later should not gain an unlimited view of activity from before joining, and a person who leaves should not keep generating new class-visible activity. Schools and centres must use class information only for legitimate educational administration and protect their own staff accounts.

Web payments are initiated with Paystack. Exampaper sends the transaction amount, currency, reference, payer email and limited product or account metadata needed to complete and reconcile the purchase. The payment page that collects full card details is operated by Paystack, not Exampaper.

Exampaper stores payment state and the provider response, including the raw webhook payload received for verification and fraud investigation. That payload does not yet have an approved deletion schedule; setting one is a launch action. Payment-request links may record when and how often they were opened so the requester can understand whether a request reached its recipient.

A referral connects the referring account to the referred account and records whether a reward was earned or claimed. Referral data is not sold to an advertising network.

We do not sell personal information. Current service-provider categories are:

• Supabase — authentication, database, object storage and server-side functions. The configured project region is Ireland.
• Vercel — website hosting, delivery, request logs and deployment infrastructure.
• Paystack — payment collection, verification, reconciliation and fraud controls.
• Moonshot/Kimi — the currently configured AI model integration for written marking, explanations and tutor answers when those features are invoked.
• Chatway — optional live support. It receives nothing merely because an Exampaper page opened. An eligible visitor first sees an Exampaper disclosure and must choose “Continue to Chatway”. Signed-in minor accounts never receive the widget.
• Authentication email infrastructure — delivery of sign-in and account messages through the mail configuration attached to Supabase. The exact mail subprocessor must be confirmed in the final notice.

We may also disclose information when required by a valid legal process, to protect a person or the service, or as part of a business reorganisation subject to appropriate safeguards and notice. Public sponsor placements receive no account identifier from Exampaper; a sponsor receives information only if a visitor deliberately follows an external link and then interacts with that sponsor.

Chatway says its widget may collect pages visited, links clicked, non-sensitive text, mouse movement, IP address, referring URL, browser, operating system and cookies. Read its privacy policy before choosing to load it. Email remains available instead.

Some providers process information outside Nigeria. The current Supabase database region is in Ireland; Vercel uses global delivery infrastructure; AI and support providers may process in other countries, including countries whose laws differ from Nigeria's. A support conversation can also be routed to the country in which the support provider operates.

The final notice must identify the live destinations and the transfer mechanism relied upon for each one. Those contractual and adequacy checks have not yet been completed, so this draft does not claim that a particular safeguard has been approved.

Exampaper has not yet approved a record-by-record retention schedule. The database currently keeps account, assessment, transcript, tutor, class, prediction, report and transaction records unless a specific workflow changes or removes them. Raw Paystack provider payloads also remain stored. This is the current technical reality, not the intended final policy.

The offline cache is different. Submitted attempts with nothing left to sync are eligible for pruning, and stale local attempts are eligible after three days when the app next runs. A browser, operating system or user may clear local storage sooner.

Account deletion is not yet a complete, tested product workflow. Payment and organisation ownership records cannot simply be deleted without preserving required audit records or transferring ownership. A request can be made now and assessed manually, but the final deletion, anonymisation, backup and exception rules remain a launch blocker. We will replace this paragraph with definite periods and a tested process before treating the notice as final.

Exampaper is designed for candidates who may be 15–18. Age is therefore handled before account creation, not inferred later from study behaviour. The profile stores a birth year and derives an under-18 flag. An unknown or incomplete age is treated conservatively as minor until the account is certainly adult.

For an account treated as under 18:

• there are no personalised ads or third-party behavioural analytics;
• no persistent advertising identifier is created;
• a public avatar is not available;
• the Chatway widget is not loaded; and
• class visibility is limited to the educational information described above.

Optional voice processing for minors is unresolved and will not be enabled merely because the recorder code exists. The correct consent or other lawful basis for a child account, guardian involvement and any educational-service exception require review under Nigerian law before launch. A parent or guardian with a concern can write to the privacy address above.

Essential first-party cookies keep an account signed in, refresh a secure session and remember a referral long enough to attribute it. The web app may use local storage and the mobile app may use device storage for the offline cache, reading preferences and unsent progress. Blocking essential storage can prevent sign-in or offline recovery.

Exampaper does not load Chatway cookies or scripts until an eligible visitor explicitly continues after reading the disclosure. Declining leaves ordinary email and the contact page available. We do not currently use a third-party behavioural analytics tag.

Offline data remains on the device and is protected by the device's own account, screen lock and storage controls. Anyone with access to an unlocked shared phone may be able to see cached questions or progress, so sign out and clear site/app data before giving the device to someone else.

Subject to Nigerian law and applicable exceptions, a person can ask to access their personal data; correct inaccurate data; receive portable data; object to or restrict certain processing; withdraw consent; or ask for deletion. A person can also ask for the reasoning behind an AI-assisted practice mark and report an incorrect question.

Send the account email, the request and enough information to verify the account to support@exampaper.com.ng. Do not email a password, one-time code, full payment-card number or a copy of an identity document unless we have first provided a secure and necessary route. We will acknowledge the request and explain any identity check, legal exception or information we must retain.

Because automated self-service erasure is not yet implemented, this draft must not be read as a claim that pressing a button instantly deletes every record. That workflow must be built and tested before public launch and app-store submission.

Exampaper uses row-level database policies, role-limited server functions, TLS in transit, restricted storage paths and server-only provider credentials. Answer keys, listening transcripts and administrative fields are not granted to ordinary clients simply because another column in the same table is readable.

No online system is completely secure. If we confirm a personal-data incident, we will contain and investigate it, preserve the facts needed to understand it, and notify the affected people and the Nigeria Data Protection Commission where the law requires.

Material changes will be dated on this page and, where appropriate, explained in the product or by account email. A new processor, a live voice feature or a materially different purpose requires a notice update before the new processing begins.

Start with Exampaper's contact routes so we can investigate and put something right. A person may also complain to the Nigeria Data Protection Commission. Nothing in this notice removes a statutory right or remedy.

This notice should be read with the Terms of use and the plain-language data-use page.