AceTest is an AI-powered study platform built for Nigerian university students. We provide quiz generation, AI tutoring, and community study resources. We are the data controller for all personal data processed through the Platform.
For data protection enquiries, contact us via WhatsApp support available on any page of the Platform.
We collect the following categories of personal data:
| Data Type | What We Collect | Why |
|---|---|---|
| Account Data | Name and email address from your Google account | Account creation and authentication |
| Profile Data | University, faculty, department | Personalised content and analytics |
| Study Materials | Uploaded PDF, image, and document files | AI quiz generation and tutoring |
| Usage Data | Quiz scores, streak data, chat history, upload history | Service delivery and improvement |
| Payment Data | Payment reference numbers only (no card data) | Subscription management via Paystack |
| Technical Data | IP address, browser type, device type | Security and fraud prevention |
We do not collect your full card number, CVV, or bank account details. All payment data is handled exclusively by Paystack, which is PCI-DSS compliant.
We use your personal data for the following purposes:
We do not use your data for advertising, data brokering, or any purpose not listed above.
Under the NDPR 2019 and Nigeria Data Protection Act 2023, we process your personal data on the following lawful bases:
We share your data only with the following trusted third-party service providers who are contractually bound to protect it:
| Provider | Purpose | Data Shared |
|---|---|---|
| Sign-in and authentication | Name and email address | |
| Supabase | Database, authentication, and file storage | All account and study data |
| Cerebras | AI quiz and chat generation | Document content for processing |
| Paystack | Payment processing | Email address and payment reference |
| Railway / Vercel | Platform hosting | Technical infrastructure only |
We do not sell, rent, or trade your personal data to any third party for marketing or commercial purposes. Ever.
Your data is stored securely on Supabase infrastructure with the following protections:
Despite these measures, no internet transmission is 100% secure. We will notify you promptly in the event of a data breach that affects your personal data, in accordance with NDPR requirements.
We retain your personal data for the following periods:
Under the Nigeria Data Protection Regulation 2019 and Nigeria Data Protection Act 2023, you have the following rights regarding your personal data:
To exercise any of these rights, contact us via WhatsApp support. We will respond within 30 days as required by the NDPR. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
AceTest does not use tracking cookies or advertising cookies. Signing in is handled entirely through Google. We use browser local storage solely to store your session tokens and basic profile preferences. This data:
We do not use Google Analytics, Facebook Pixel, or any third-party tracking scripts on our Platform.
AceTest is designed for university students who are typically 16 years of age and older. If you are under 18, you must obtain parental or guardian consent before using the Platform.
We do not knowingly collect personal data from children under 13. If you believe a child under 13 has created an account, please contact us immediately and we will delete the account and associated data.
We may update this Privacy Policy from time to time to reflect changes in our practices or Nigerian law. When we make significant changes, we will notify you via the Platform. The date at the top of this page reflects the most recent update.
Continued use of AceTest after changes are posted constitutes acceptance of the updated Privacy Policy.
For any privacy-related questions, data access requests, or to exercise your NDPR rights, contact us via WhatsApp support. Include the email address linked to your account and the specific request you are making. We aim to respond within 5 business days and will always respond within 30 days as required by law.