Privacy policy

SmarTest Community (“we”, “us”) is a free study network for Nigerian students preparing for JAMB, WAEC, NECO and Post-UTME, operated by SmarTest. We are the data controller for the information described here, and we handle it in line with the Nigeria Data Protection Act (NDPA) 2023 and the NDPR.

We deliberately collect as little as we can:

• Account data — your email address, username, display name, and a securely hashed password. We never store your password in readable form.
• Optional profile data — avatar, bio, school, and exam track. Every one of these is optional and you can remove them at any time.
• Content you create — posts, comments, votes, saves, hub memberships and reports.
• Technical data — basic server logs (IP address, browser type, timestamps) kept for security and abuse prevention, and deleted on a rolling basis.

We do not collect your phone number, exact location, contacts, or payment details on this site, and we do not run third-party advertising trackers.

• To provide the service — showing your posts, building your feed, and letting people follow you. This is necessary to perform our agreement with you.
• To keep the community safe — moderation, spam and malpractice prevention, and rate limiting. This is our legitimate interest in a safe platform.
• To communicate with you — account emails such as verification and password resets.

Your username, display name, avatar, bio, school, exam track, karma, and everything you post or comment are publicand visible to anyone on the internet. Your email address is never shown publicly. Please do not post personal contact details — yours or anyone else's.

This community is built for exam candidates, many of whom are under 18. You must be at least 13 to hold an account. If you are under 18, you should have your parent or guardian's permission to use SmarTest Community, and we ask you to be especially careful never to share your full name, address, school timetable, phone number or photographs of yourself. If we learn that we hold data from a child under 13, we delete it. A parent or guardian can contact us through the Support Centre to review or delete their child's data.

We do not sell your data, ever. We share it only with the infrastructure providers needed to run the service:

• Our own servers, which host the database and application.
• Our email provider, solely to deliver account emails.

We may also disclose data where we are legally required to do so.

We keep your account data for as long as your account exists. Server logs are kept for a short period for security purposes. When you delete your account, see the next section.

Under the NDPA you have the right to access, correct, export, or delete your personal data, and to object to how we use it. You can exercise most of these yourself:

• Correct your profile at any time in Settings.
• Delete your account in Settings → Delete account. This permanently removes your profile, posts, comments, votes, saves, follows and notifications, and releases your username. It cannot be undone.
• Export or query your data by contacting us through the Support Centre.

The site is served exclusively over HTTPS. Passwords are hashed, sessions use secure HTTP-only cookies, and access to your data is enforced at the database level by row-level security policies. No system is perfectly secure, but if a breach ever affects your data we will notify you and the regulator as required.

If we make a material change to this policy we will update the date above and tell you in the app before the change takes effect.