Legal

Privacy Policy

Effective 14 September 2026

This policy explains how Past Master handles personal information when you use our websites, desktop or mobile applications.

Information we collect

We may collect your name, username, email, school, class, device identifier, subscription and payment references, exam choices, answers, scores, progress, integrity events, feedback, ratings, and technical logs such as IP address, platform and app version. Payment providers process payment-card or bank details; Past Master does not need to store your complete card details.

How we use information

We use information to authenticate accounts, deliver and personalise practice, save results, manage subscriptions, prevent fraud, provide support, collect feedback, improve content, secure the service, communicate essential notices and meet legal obligations.

Legal grounds

Depending on the context, processing is necessary to provide the service you requested, based on consent, required by law, or based on legitimate interests such as security and service improvement. You may withdraw consent where consent is the applicable basis.

Sharing

We share only what is reasonably needed with authorised schools, hosting, analytics, communications, support and payment providers, professional advisers, or public authorities where law requires it. We do not sell personal information. School administrators may access information for students managed by their school.

Retention and security

We retain information while your account is active and as needed for education records, support, security, accounting and legal obligations, then delete or anonymise it where practical. We use reasonable administrative and technical safeguards, but no internet service is completely risk-free.

Children and school users

Schools and guardians should provide any permission required for younger users. We limit collection to information needed to provide and protect the learning service. Contact us if information about a child was provided without appropriate authority.

Your choices and rights

Subject to applicable law, you may request access, correction, deletion, restriction, objection or portability of your information, and may complain to the Nigeria Data Protection Commission or another competent regulator. Some records may be retained where legally required.

International processing and updates

Service providers may process information outside your country with appropriate safeguards. We may update this policy and will change the effective date; material changes may also be shown in the app for renewed acceptance.

Contact

Send privacy questions or requests using the contact details published on Past Master or the in-app feedback form. Include enough information for us to verify and handle the request securely.