← Back to ExamPass AI

Privacy Policy

Last updated: 15 July 2026

Draft pending legal review. This policy describes accurately how ExamPass AI handles your data today. It is being finalised with legal counsel under the Nigeria Data Protection Act 2023.

1. The short version

  • We collect your phone number, your name, the exams and subjects you choose, and how you perform on questions.
  • We use it to teach you, track your progress, and remind you what to revise.
  • Your messages are sent to an AI provider so it can answer and grade them.
  • We never sell your data. We never share it with advertisers.
  • You can ask us to delete everything, at any time, by messaging DELETE on WhatsApp.

2. Who is responsible for your data

ExamPass AI is the data controller for the personal data described here. Contact us on WhatsApp or at privacy@bamkk.com.

3. What we collect

We collect only what the service needs to work:

Information you give us

  • Your WhatsApp phone number — this is your account identifier.
  • Your name — as you enter it during setup.
  • Your target exams and subjects — the choices you make during setup.
  • Your exam date — if you ask us to build a study plan.
  • Your messages — questions you ask, answers you give, and voice notes you send.

Information created as you study

  • Which questions you answered, and whether you got them right.
  • Your mock exam sessions and scores.
  • Your topic strengths and weaknesses, and your revision schedule.
  • Your study streaks and activity.
  • Your study groups and leaderboard points, if you join one.
  • Who referred you, or who you referred, if referral links are used.

Information we do not collect

  • We do not collect or store your card details. Payments go directly to Paystack.
  • We do not access your WhatsApp contacts, or any chats other than those with us.
  • We do not track you across other websites or apps.

4. Who we share it with

We do not sell your data. We share it only with the providers that make the service work:

WhatsApp (Meta)
Your phone number and messages — WhatsApp is how we talk to you.
AI providers
The text of your questions and answers, so explanations can be generated and written answers graded. Voice notes are transcribed. Processed outside Nigeria.
Cloud hosting & database
Your profile, answers and progress are stored securely with our infrastructure providers.
Payment processor
Paystack handles your card or transfer. We never see your card details.
Error monitoring
Technical fault reports, so we can find and fix problems.

Some of these providers process data outside Nigeria. We rely on their contractual protections for those transfers.

We may also disclose data where the law requires it, or to protect the safety of a user or the public.

5. Why we are allowed to use your data

  • To deliver the service you asked for — teaching, testing, tracking progress, taking payment.
  • With your consent — revision reminders and daily practice prompts. You can withdraw this any time by replying STOP.
  • Our legitimate interests — keeping the service secure, preventing abuse, and fixing faults.

6. Students under 18

Most of our users are secondary school students, and many are under 18. We take that seriously.

  • We collect the minimum needed to teach — a name, a phone number, and study performance.
  • We never ask a student for their address, school, photograph, or financial details.
  • If you are under 18, use ExamPass AI with a parent or guardian's permission.
  • A parent or guardian may ask us to see or delete their child's data — message us and we will verify and act.
  • Progress reports are shared with a parent only through a link the student generates.

7. How long we keep it

  • Your profile and progress — while your account is active, and up to 12 months after your last activity.
  • Session state — hours to days; it expires automatically.
  • Login links — deleted within an hour of use.
  • Payment records — kept as long as tax and accounting law requires.

When you ask us to delete your account, we remove your personal data and keep only what the law requires us to retain.

8. Your rights

Under the Nigeria Data Protection Act 2023 you have the right to:

  • Ask what data we hold about you, and get a copy.
  • Correct anything that is wrong.
  • Ask us to delete your data.
  • Withdraw consent for reminders at any time.
  • Object to how we use your data, or ask us to restrict it.
  • Complain to the Nigeria Data Protection Commission.

To use any of these, message us on WhatsApp. Reply DELETE to start a deletion request. We will respond within 30 days.

9. Security

Our database denies access by default. Messages from WhatsApp are cryptographically verified before we act on them. Login links are single-use and expire quickly. Secrets are never stored in our code.

No system is perfectly secure. If a breach affects you, we will tell you and the regulator as the law requires.

10. AI and automated processing

Explanations, question difficulty, and written-answer grading are produced by AI. These are study aids, not authoritative marks, and they can be wrong.

No decision with legal or similarly significant effect is made about you automatically. If you disagree with a grade, message us and a person will look at it.

11. Changes

We will update this policy as the service changes. The date at the top shows the current version. Significant changes will be announced on WhatsApp.

See also our Terms of Service.