Privacy Policy

1. Information We Collect

We collect several types of information to provide and improve our services:

1.1 Personal Information You Provide

• Account Information: Username, email address, device ID (automatically generated), and display name.
• Profile Information: Full name, email address (optional, can be updated in Account page).
• Payment Information: Transaction details for license purchases processed securely through Flutterwave. We do not store full payment card details.
• Communications: When you contact our support team, we collect your messages and contact information.

1.2 Information Automatically Collected

• Device Information: Device ID, device model, operating system version, and unique device identifiers.
• Usage Data: Exam results, practice session data, answer selections, accuracy rates, and test completion statistics.
• License Information: License key, activation status, purchase date, and expiry date.
• IP Address and Network Information: IP address, connection type (WiFi/Cellular), and network provider.
• App Version and Platform: Version of EduSaint+ you are using and your platform (Android/Windows).

1.3 Offline Data Storage

• Local Database: Practice sessions, answers, and user data are stored locally on your device using SQLite.
• Secure Storage: Authentication tokens are stored securely using encrypted storage.
• Downloaded Materials: Study materials downloaded for offline use are stored on your device.

2. How We Use Your Information

We use your information for the following purposes:

• Account Management: Create and manage your account, authenticate your identity, and provide customer support.
• License Management: Process license purchases, activate licenses on your device, and verify license status.
• Service Delivery: Provide CBT practice exams, track performance, generate statistics, and offer personalized recommendations.
• Offline Functionality: Enable offline access to downloaded study materials and practice sessions.
• Payment Processing: Securely process payments through Flutterwave for license purchases.
• Analytics and Improvements: Analyze usage patterns to improve app performance, fix bugs, and enhance user experience.
• Communications: Send important updates about your license, account status, or service changes.
• Legal Compliance: Comply with applicable laws, regulations, and legal processes.
• Security: Detect, prevent, and address technical issues or fraudulent activities.

3. Legal Basis for Processing

We process your personal information based on one or more of the following legal grounds:

• Contractual Necessity: To provide our services and fulfill our agreement with you.
• Legitimate Interests: To improve our services, prevent fraud, and ensure security.
• Legal Obligations: To comply with applicable laws and regulations.
• Consent: When you have provided explicit consent for specific purposes.

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following limited circumstances:

• Service Providers: Third-party vendors who assist with payment processing (Flutterwave), hosting, and analytics. These providers are contractually obligated to protect your data.
• License Verification: License status is verified with our server to ensure compliance with license terms.
• Legal Requirements: When required by law, court order, or government regulation.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Protection of Rights: To protect the rights, property, or safety of Edusaint, our users, or the public.
• With Your Consent: When you have explicitly consented to the sharing.

5. Data Security

We implement industry-standard security measures to protect your information:

• Encryption: Data transmitted between your device and our servers is encrypted using SSL/TLS technology.
• Secure Storage: Authentication tokens are stored using Flutter Secure Storage (encrypted storage on your device).
• Access Controls: Strict access controls limit who can access user data.
• Regular Audits: We regularly review our security practices and update them as needed.
• Offline Data Protection: Your local data is protected by your device's built-in security features.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information as follows:

• Account Information: As long as your account is active or as needed to provide services.
• Practice Data: Retained to track your progress and provide performance analytics.
• License Information: Retained for the duration of your license plus a reasonable period afterward for legal and tax purposes.
• Payment Records: Retained for 7 years to comply with financial regulations and tax laws.
• Deleted Accounts: When you request account deletion, we will remove your personal information within 30 days, except where retention is required by law.

7. Your Rights and Choices

Depending on your location, you may have the following rights:

• Access: Request a copy of your personal information.
• Correction: Update or correct inaccurate information in your account.
• Deletion: Request deletion of your account and personal information.
• Portability: Receive your data in a structured, machine-readable format.
• Opt-Out: Opt-out of certain data collection (e.g., analytics).
• Withdraw Consent: Withdraw your consent for processing where applicable.
• Lodge a Complaint: File a complaint with your local data protection authority.

8. Children's Privacy

EduSaint+ is designed for students of all ages. Our practices regarding children's data include:

• Parental Consent: For users under 13, we require schools or parents to obtain appropriate parental consent where required by law.
• Limited Data Collection: We only collect minimal personal information from student accounts (username, device ID, and academic records).
• No Sharing: We do not share children's personal information with third parties except as necessary to provide our services.
• Parental Access: Parents may request access to, correction of, or deletion of their child's information.
• COPPA Compliance: We comply with the Children's Online Privacy Protection Act (COPPA) where applicable.

If you believe we have collected information from a child without proper consent, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have data protection laws different from your country. We take appropriate safeguards to ensure your data is protected, including using standard contractual clauses approved by relevant authorities.

10. Third-Party Services

Our platform integrates with the following third-party services:

• Flutterwave: Processes payments for license purchases. See Flutterwave's Privacy Policy.
• Google Play Store: For app distribution and updates.
• WebView (for materials): Opens edusaint.ng/materials in your browser for study material access.

These third-party services have their own privacy policies, and we encourage you to review them.

11. Cookies and Tracking Technologies

EduSaint+ does not use cookies directly. However, when you visit our website (edusaint.ng), we may use cookies to enhance functionality. You can control cookie settings through your browser preferences.

12. Offline-First Architecture

EduSaint+ is designed as an offline-first application. This means:

• Your practice data is stored locally on your device by default.
• You can use the app without an internet connection after initial download.
• Your data is only transmitted to our servers when you: add an email address to your account, purchase a license, or sync your progress.
• This design minimizes the amount of personal data transmitted over the internet.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes through:

• Email notification (if you have provided an email address).
• In-app notification when you open the app.
• Updating the "Last Updated" date at the top of this policy.

Your continued use of EduSaint+ after any changes indicates your acceptance of the updated Privacy Policy.

14. Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you within 72 hours of becoming aware of the breach, as required by applicable data protection laws. Notifications will be sent via email (if available) or through in-app notifications.

15. Do Not Track Signals

Our platform does not respond to "Do Not Track" (DNT) signals at this time, as we do not track users across third-party websites.

16. California Privacy Rights (CCPA)

If you are a California resident, you have the right to:

• Request disclosure of categories and specific pieces of personal information collected.
• Request deletion of personal information.
• Opt-out of the sale of personal information (we do not sell personal information).
• Not be discriminated against for exercising your privacy rights.

To exercise these rights, contact us at privacy@edusaint.ng with "CCPA Request" in the subject line.

17. GDPR Rights (European Economic Area)

If you are located in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR), including the right to restrict processing, object to processing, and data portability. Our legal basis for processing your data is primarily contractual necessity and legitimate interests. You have the right to lodge a complaint with a supervisory authority.

18. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: