Privacy Policy
1. Introduction & Legal Compliance
This Privacy Policy governs the use of MyEasySchool, an educational web and mobile platform designed to support students with learning resources, quizzes, and academic progress tracking.
We are deeply committed to protecting your personal data and fully complying with the Nigeria Data Protection Act (NDPA) 2023.
Data Controller:
MyEasySchool is the data controller responsible for all user data collected and stored on its servers and third-party infrastructure.
2. Information We Collect (The “What”)
We collect information necessary to provide, personalize, and improve our educational services. Data is collected directly through the MyEasySchool platform.
A. Personal Information
- Full Name – Used for personalization and account identification.
- Email Address – Used as your unique user ID, login credential, and for secure account recovery.
- Password – Used strictly for account security. Passwords are encrypted and hashed. We cannot view or access your actual password.
B. Academic & Usage Data
- Quiz results and academic scores.
- Subjects accessed and overall practice history.
- Learning progress and activity records.
This data helps us provide performance tracking, learning continuity across your sessions, and highly personalized academic insights.
C. Financial Data (via Paystack)
For users accessing premium/paid features, we track:
- Transaction Reference ID – Used to safely confirm successful payments.
- Payment Status – Used to instantly unlock your premium content.
Important Disclaimer:
We absolutely do not collect or store the following sensitive financial information:
- Debit or credit card numbers
- CVV or PIN codes
- Bank account details
All payments are securely processed and handled directly by Paystack, a fully PCI-DSS compliant payment processor.
D. Device & Technical Data
- IP address – For account security and fraud prevention.
- Device type, browser, and operating system – For debugging, platform optimization, and ensuring a seamless user experience.
3. Lawful Basis for Processing (NDPA Requirement)
We process your personal data under the following legal lawful bases:
- Contractual Necessity: To create your account, authenticate your login, and actively provide our educational services to you.
- Legitimate Interest: To seamlessly track learning progress, improve platform performance, and ensure overall system security.
- Consent: Where applicable, to send essential service-related updates such as academic progress reports or system notifications.
4. Third-Party Data Sharing
We do not sell user data under any circumstances.
We only share limited, strictly necessary data with trusted third parties required to securely operate the platform:
- Paystack (Payment Processor): Used exclusively for secure payment processing. Shared data may include email and transaction amount.
- Hosting Providers: User data is securely encrypted, stored, and managed using globally trusted cloud infrastructure providers.
Each third party we partner with is strictly required to comply with applicable data protection laws.
5. Data Retention & Account Deletion
Retention
We retain user data only for as long as your account remains active or as strictly required to provide our services to you.
Account Deletion
You have full control over your data. You may request account and data deletion at any time by:
- Using the “Delete Account” option directly in your account settings (if available), or
- Contacting our support team directly via email.
Once deleted, your personal data is permanently and irreversibly removed from our active systems, except where temporary retention is legally required by law.
6. Security Measures
We implement strict, industry-standard security measures to keep your data safe, including:
- HTTPS (SSL) encryption for all data transmission.
- Restricted, role-based database access.
- Encrypted and salted/hashed user credentials.
- Secure, token-based authentication mechanisms.
While no digital system is 100% immune to all threats, we continuously take all reasonable and proactive steps to protect your data.
7. Children’s Privacy
MyEasySchool is primarily intended for students preparing for higher academic examinations, typically aged 15–18.
We do not knowingly or intentionally collect personal data from children under the age of 13 without verified parental or guardian consent. If you are a parent or guardian and believe a child under 13 has mistakenly provided personal data to us, please contact us immediately for swift data removal.
8. Your Rights Under NDPA 2023
As a user, you maintain the following rights regarding your data:
- Access: The right to access your personal data.
- Correction: The right to easily correct inaccurate information.
- Deletion: The right to request full data deletion.
- Withdrawal: The right to withdraw consent where applicable.
9. Contact Information
If you have any questions, concerns, or specific requests regarding this Privacy Policy or your data rights, we are always here to help.
Data Protection Contact:
myeasyschoolhelp@gmail.com