Privacy Policy

Introduction

Campus Formula ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our online exam preparation platform, including our website, mobile interfaces, and related services (collectively, the "Platform").

By accessing or using the Platform, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our services.

Data Controller

Depending on your jurisdiction, the data controller may be:

• Campus Formula Ltd. for global platform operations; or
• The registered Tutorial Centre (your "Centre") that provisioned your account, for centre-specific data processing.

For questions about which entity controls your data, contact your Centre administrator or email us at info@campusformula.com.ng.

Information We Collect

3.1 Personal Information You Provide

• Identity: First name, last name, gender.
• Contact: Email address, phone number.
• Academic: School name, course of study, exam type (e.g., WAEC, JAMB, NECO), selected subjects.
• Account: Password (hashed), profile image, plan level (Free, Basic, Premium), activation tokens.

3.2 Automatically Collected Information

• Device & Log: IP address, browser type, operating system, device identifiers, access times, pages viewed.
• Usage Data: Practice sessions completed, mock exam scores, XP points, streak activity, time spent, answers selected.
• Location: Approximate geolocation derived from IP address.

3.3 Proctoring & Exam Integrity Data

For mock exams with proctoring enabled, we may collect:

• Webcam snapshots taken at random intervals during the exam.
• Browser tab-switching events and fullscreen violation logs.
• User-agent and IP metadata to detect suspicious activity.

This data is used solely for academic integrity purposes and is retained only as long as necessary for dispute resolution.

How We Use Your Information

We use your information to:

• Provide, operate, and maintain the Platform (account creation, exam delivery, progress tracking).
• Process payments and manage subscription plans (Basic, Premium).
• Communicate with you about updates, security alerts, and support requests.
• Personalise your learning experience (subject recommendations, difficulty adjustment).
• Ensure exam integrity and prevent fraudulent behaviour.
• Generate anonymised analytics to improve our content and features.
• Comply with legal obligations and enforce our Terms of Service.

Legal Basis for Processing

We process personal data under the following legal bases:

• Performance of a Contract: To provide the services you signed up for.
• Consent: For marketing communications and non-essential cookies.
• Legitimate Interests: For fraud prevention, platform security, and analytics.
• Legal Obligation: To comply with tax, accounting, or regulatory requirements.

How We Share Your Information

We do not sell your personal data. We may share it with:

• Your Tutorial Centre: Administrators and instructors at your registered centre can view your profile, exam scores, and progress to provide academic support.
• Service Providers: Cloud hosting, payment processors, email delivery, and analytics partners under strict confidentiality agreements.
• Legal Authorities: When required by law, court order, or to protect our rights and safety.
• Business Transfers: In connection with a merger, acquisition, or asset sale, with notice to users.

Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specific retention periods:

• Account data: Retained until you delete your account, plus 90 days for backup purge.
• Exam & practice history: Retained for 3 years to maintain academic records and allow score review.
• Proctoring snapshots: Retained for 30 days after the exam date, then automatically deleted.
• Transaction records: Retained for 7 years to comply with financial regulations.

Your Privacy Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your account and associated data.
• Restrict processing under certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object to processing based on legitimate interests or direct marketing.
• Withdraw Consent at any time (without affecting prior lawful processing).

To exercise these rights, contact your Centre administrator or email info@campusformula.com.ng\. We will respond within 30 days.

Security Measures

We implement industry-standard security measures:

• Passwords hashed using bcrypt with automatic salting.
• All database queries use prepared statements to prevent injection attacks.
• CSRF tokens on all state-changing requests.
• HTTPS/TLS encryption for data in transit.
• Role-based access control (RBAC) limiting admin data visibility to your tenant only.
• Regular automated backups encrypted at rest.

No method of transmission over the Internet is 100% secure. We strive to protect your data but cannot guarantee absolute security.

Cookies & Tracking Technologies

We use cookies and similar technologies to operate and improve the Platform. For detailed information, please see our Cookie Policy.

Children's Privacy

The Platform is not intended for children under 13 (or the minimum age of digital consent in your jurisdiction). We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us immediately and we will delete the information.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be notified via email or a prominent banner on the Platform at least 14 days before taking effect. The "Last Updated" date at the top of this page reflects the most recent revision.