1. Who We Are
JambKit is a JAMB UTME preparation platform operated by JambKit Ltd. When this Policy refers to "JambKit", "we", "us", or "our", it means JambKit Ltd and the JambKit platform accessible at jambkit.com.
For questions about this Policy or how we handle your data, contact us at the details provided in Section 13.
2. Information We Collect
2.1 Information You Provide
- Account registration: full name, email address, phone number, and a password.
- Academic profile: JAMB subjects selected, target universities, O'Level grades (optional), and year of examination.
- Payment information: when you subscribe to a paid plan, billing is processed entirely by Paystack. We do not store your card details — only a transaction reference and the subscription tier activated.
- Support communications: any messages, feedback, or enquiries you send us.
2.2 Information Collected Automatically
- Usage data: questions answered, scores, exam mode selected, study streaks, XP earned, badges unlocked, and live class attendance records.
- Device and technical data: device type, operating system, browser type, IP address, and app version — used for security and compatibility.
- Log data: dates and times of access, pages or screens visited, and error logs.
2.3 Information We Do Not Collect
- We do not collect biometric data, financial account numbers, or government ID numbers.
- We do not use third-party advertising networks that track you across other websites.
3. How We Use Your Information
We use your information to:
- Create and manage your JambKit account.
- Deliver the features you use — practice sessions, AI Tutor responses, live class access, admission calculations, and progress analytics.
- Process subscription payments through Paystack and activate your plan.
- Send transactional messages: account confirmation, password resets, payment receipts, and subscription reminders.
- Send service updates and educational tips (you may opt out at any time).
- Monitor platform security and detect fraudulent or abusive behaviour.
- Improve the accuracy of our question bank, AI Tutor, and admission calculator.
- Comply with applicable Nigerian law and regulatory requirements.
4. Legal Basis for Processing
Under the NDPA 2023, we process your personal data on the following lawful grounds:
- Contract performance: processing necessary to provide the service you signed up for.
- Legitimate interests: security monitoring, fraud prevention, and service improvement — where these do not override your fundamental rights.
- Consent: for optional marketing communications, which you may withdraw at any time.
- Legal obligation: where we are required to retain or disclose data by Nigerian law.
5. Sharing of Personal Data
We do not sell, rent, or trade your personal data. We share it only in these circumstances:
- Paystack: our payment processor. When you subscribe, your email address and transaction details are shared with Paystack to process and verify payment. Paystack's privacy policy governs their handling of your data: paystack.com/privacy.
- Cloud infrastructure: we use reputable hosting providers to store app data. These providers are bound by data processing agreements that prohibit them from using your data for their own purposes.
- Legal disclosure: if required by a court order, regulatory authority, or applicable Nigerian law, we may disclose your data to the extent required.
- Business transfer: in the unlikely event of a merger, acquisition, or sale of JambKit Ltd, user data may transfer to the successor entity, subject to the same privacy protections described in this Policy.
Any third-party processors we engage are contractually required to protect your data and process it only on our instructions.
6. Data Retention
We retain your personal data for as long as your account is active or as needed to provide our services. Specifically:
- Active accounts: data is retained for the life of your account.
- Deleted accounts: we delete or anonymise personal data within 90 days of an account deletion request, except where we are required by law to retain records longer (e.g., financial records are kept for 7 years under Nigerian tax law).
- Support records: retained for up to 2 years after the matter is resolved.
7. Security
We implement technical and organisational measures to protect your personal data, including:
- HTTPS encryption for all data in transit.
- Encrypted storage of passwords (we never store passwords in plain text).
- Access controls that limit which staff can view personal data.
- Regular security reviews of our infrastructure.
No system is completely secure. In the event of a data breach that is likely to harm your rights or freedoms, we will notify the Nigeria Data Protection Commission (NDPC) and affected users in accordance with the NDPA 2023.
8. Your Rights Under the NDPA 2023
As a data subject, you have the following rights:
- Right of access: request a copy of the personal data we hold about you.
- Right to rectification: request correction of inaccurate or incomplete data.
- Right to erasure: request deletion of your personal data ("right to be forgotten"), subject to legal retention obligations.
- Right to data portability: receive your data in a structured, machine-readable format.
- Right to object: object to processing based on our legitimate interests, including direct marketing.
- Right to restrict processing: request that we limit how we use your data in certain circumstances.
- Right to withdraw consent: where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, contact us at the details in Section 13. We will respond within 30 days. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at ndpb.gov.ng.
9. Children's Privacy
JambKit is designed for JAMB candidates, who are typically 15 years of age and older. We do not knowingly collect personal data from children under 13. If you believe a child under 13 has provided us with personal data, please contact us immediately and we will delete it.
For users aged 13–17, we encourage parents or guardians to supervise account creation and to contact us if they have concerns about their child's data.
10. Cookies and Tracking
Our website (jambkit.com) uses only essential cookies necessary for the site to function — such as session authentication and security tokens. We do not use advertising cookies, cross-site tracking, or analytics services that send your data to third parties.
You can disable cookies in your browser settings. Disabling essential cookies may affect your ability to log in or use certain features.
11. International Data Transfers
Your data is primarily stored and processed within Nigeria. Where data is processed outside Nigeria (e.g., by cloud infrastructure providers), we ensure that adequate data protection safeguards are in place, consistent with NDPA 2023 requirements.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will:
- Update the "Last updated" date at the top of this page.
- Notify active users by email or via an in-app notice.
Continued use of JambKit after the effective date of a revised Policy constitutes your acceptance of the changes.
13. Contact Us
For privacy enquiries, data subject requests, or to report a concern about how we handle your data, contact us: