JambUp
Sign In Get Started
Legal

Privacy Policy

This Privacy Policy explains how JambUp collects, uses, shares and protects the personal data of every candidate who uses our website, mobile app and WhatsApp channels.

Effective date: 8 October 2026  ·  Last updated: 8 October 2026

At JambUp ("we", "us" or "our"), we are committed to protecting the privacy of Nigerian students who use our gamified JAMB preparation platform to practise past questions, sit mock exams and track their progress. This policy is written to reflect the Nigeria Data Protection Act 2023 (NDPA) and the earlier Nigeria Data Protection Regulation (NDPR), and it applies to jambup.site, the JambUp Android application (com.jambup.app) and our official WhatsApp channel and groups.

By creating an account or continuing to use JambUp, you confirm that you have read and understood this Privacy Policy. Please do not use the platform if you do not agree with it.

1. Who We Are

JambUp is an educational technology product built for JAMB (UTME) candidates across Nigeria. For the purposes of the NDPA, JambUp is the data controller of the personal data you provide to us. Our data protection contact details are provided in section 13 below.

2. Information We Collect

We collect only the information we need to run the service. This includes:

  • Account details — your name, email address, phone number, password (stored encrypted) and the subjects you selected when you signed up.
  • Profile and activity data — the practice questions you attempt, your scores, streaks, XP, rank, mock exam history, referrals and squad or duel participation.
  • Payment data — when you upgrade to a paid plan, payments are processed by Paystack. We never see or store your full card number or CVV; we only receive a transaction reference and confirmation of your plan status.
  • Device and usage data — device type, operating system, browser, IP address, and pages or screens you visit, collected automatically to keep the platform secure and to improve it.
  • Communications — messages you send to our support email or WhatsApp line, and your notification preferences.
  • Optional sign-in data — if you register with Google or Facebook, we receive your name, email address and profile picture from that provider.

We do not collect your JAMB registration number, NIN, bank login details, BVN or any special-category personal data. Please never send us those details, even on WhatsApp.

3. How We Use Your Information

  • To create and manage your account and let you log in.
  • To deliver practice questions, mock exams, leaderboards, duels, streaks and progress analytics.
  • To process subscription payments and manage your plan through Paystack.
  • To send you the updates you asked for — for example, exam reminders, daily practice questions and WhatsApp channel posts.
  • To keep the platform safe, detect abuse, cheating (for example, manipulating scores) and fraud.
  • To understand how the platform is used so we can improve it, and to measure the performance of our advertising.
  • To comply with Nigerian law and to respond to lawful requests from regulators or courts.

We do not sell your personal data, and we do not use it to make automated decisions that produce legal effects about you.

4. Legal Basis and Consent

Under the NDPA we rely on one or more of the following: your consent (for marketing messages and WhatsApp notifications), the performance of our contract with you (to provide the service and process your subscription), our legitimate interests (security, fraud prevention, product improvement), and legal obligation (tax, accounting and regulatory records). You may withdraw consent at any time as described in section 9.

5. Cookies and Similar Technologies

We use essential cookies to keep you signed in and to protect against cross-site request forgery. We also use analytics and advertising tags (including Google Analytics/Google Ads and our in-house analytics) to understand traffic and measure campaigns. You can block or delete cookies in your browser settings; note that some parts of JambUp may not work correctly without essential cookies.

6. Sharing Your Information

We share personal data only with trusted service providers ("data processors") who help us run JambUp, and only as far as needed:

  • Paystack — to process card and bank payments in Nigeria.
  • Cloud hosting and storage providers — to host the platform and keep it running.
  • Meta/WhatsApp — when you join our channel or groups or choose to receive WhatsApp updates.
  • Google and Meta — for sign-in, analytics and advertising measurement.
  • Email and push notification providers — to deliver the messages you have opted into.

We may also disclose personal data where we are required to do so by law, by a valid order of a Nigerian court or by the Nigeria Data Protection Commission (NDPC). If JambUp is ever merged, acquired or sells assets, personal data may be transferred as part of that transaction; we will tell you before that happens and this policy will continue to apply.

7. Data Retention

We keep your account and activity data for as long as your account remains active so that your progress is preserved. If you delete your account, we delete or anonymise your personal data within 30 days, except where we are required to keep certain records — for example, payment and tax records, which we retain for the period required by Nigerian law. Backup copies are purged on their normal rotation cycle.

8. How We Protect Your Data

We use encryption in transit (HTTPS), hashed passwords, access controls, and regular security reviews to protect your data. No online service can promise perfect security, but we act quickly to contain and report any breach. Where a breach is likely to result in a risk to your rights, we will notify you and the NDPC as required by the NDPA.

9. Your Rights

Under the NDPA you have the right to:

  • be informed about how your data is used;
  • access a copy of the personal data we hold about you;
  • ask us to correct information that is inaccurate or out of date;
  • ask us to delete your data (subject to legal retention requirements);
  • object to or restrict certain processing, including direct marketing;
  • withdraw consent at any time;
  • request that your data be transferred to you or another provider; and
  • lodge a complaint with the Nigeria Data Protection Commission (NDPC).

To exercise any of these rights, email us at [email protected] from the address linked to your account. We respond within 30 days.

10. Children and Young Users

JambUp is built for students preparing for JAMB, and many of our users are under 18. If you are under 18, please use JambUp with the knowledge and consent of a parent or guardian. We do not knowingly collect more data from minors than we need to provide the service, and we do not serve targeted advertising based on their personal data. A parent or guardian may contact us to review or delete a minor's account.

11. International Transfers

Some of our service providers store data outside Nigeria. Where personal data is transferred abroad, we take steps to ensure it receives an adequate level of protection as required by the NDPA, including using providers with appropriate contractual safeguards.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in Nigerian law. When we make a material change we will post the new version on this page with a new "Last updated" date and, where appropriate, notify you by email or in-app. Please review this page periodically.

13. Contact Us

Questions, requests or complaints about your privacy should be sent to our data protection contact:

If you are not satisfied with our response, you may escalate your complaint to the Nigeria Data Protection Commission (NDPC).

Back to Home