Privacy Policy

Effective date: August 18, 2026
Last updated: August 18, 2026

This Privacy Policy explains how Magspire Educational Consultant (“we,” “us,” “our”) collects, uses, stores, and protects personal data on the Magspire platform, in line with the Nigeria Data Protection Act, 2023 (NDPA) and guidance issued by the Nigeria Data Protection Commission (NDPC).

This policy is written in plain language because many of our users are secondary school students and UTME candidates. If any part is unclear, contact us using the details at the bottom of this page.

1. What Personal Data We Collect

2. How We Collect Data

• Directly from you when you register, select subjects, take an exam, or contact support.
• Automatically through cookies and session tokens while you use the Platform.
• From our payment processors (Paystack/OPay), who confirm successful payment to us via secure webhook; they do not share your full card details with us.

3. Why We Process Your Data (Lawful Basis)

Under the NDPA, we rely on the following lawful bases:

• Consent: for optional communications (e.g. Learn & Earn winner announcements, update emails) and for processing a minor’s data with parental knowledge.
• Contract: to create your account, deliver the exam practice service you signed up for, and process subscriptions.
• Legitimate interest: to prevent fraud (e.g. single-session enforcement, credential-sharing detection), to improve the Platform, and to maintain platform security.
• Legal obligation: where we are required to retain certain records (e.g. payment transactions) under Nigerian law.

4. How We Use Your Data

• To create and manage your account and role-based access (Standard, Premium, Staff, Admin).
• To generate, score, and time your mock exams.
• To calculate Learn & Earn leaderboard points and process referral bonuses.
• To send transactional emails (welcome, payment confirmation, OTP for password reset, new exam notifications, Learn & Earn results) from contact.magspire@gmail.com.
• To respond to inquiries sent to our support channels.
• To detect and prevent account sharing, fraud, and abuse.
• To improve the Platform based on aggregated, de-identified usage patterns.

We do not sell your personal data to third parties.

5. Who We Share Data With

We share limited data with the following categories of third parties, strictly to operate the Platform:

We do not permit these providers to use your data for their own marketing purposes.

5.1 International Data Transfers

Some of our service providers (including cloud hosting and email infrastructure) may process or store data outside Nigeria. Where this occurs, we take reasonable steps to ensure the receiving provider offers a level of data protection consistent with the NDPA, including relying on contractual safeguards and enterprise security commitments.

6. Data Retention

We retain personal data for as long as your account is active, and for a reasonable period after account closure to comply with legal, accounting, or dispute-resolution obligations. Exam attempt history may be retained longer in de-identified or aggregated form for platform improvement purposes. You may request deletion of your data at any time (see Section 8).

7. How We Protect Your Data

• Passwords and passkeys are stored using industry-standard hashing algorithms (never in plain text).
• Session tokens are used to enforce single-device login and are invalidated on logout.
• Access to the admin dashboard and question bank is strictly restricted by role.
• We take reasonable technical and organizational measures appropriate to the risk, in line with NDPA requirements.

8. Your Rights Under the NDPA

You (or, for minors, your parent/guardian) have the right to:

• Access the personal data we hold about you;
• Correct inaccurate or incomplete data;
• Request deletion of your data, subject to legal retention requirements;
• Object to or restrict certain processing;
• Request a copy of your data in a portable format;
• Withdraw consent where processing is based on consent, without affecting processing carried out before withdrawal;
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your data has been mishandled.

To exercise any of these rights, contact us using the details in Section 11.

9. Children’s Data

Because many of our users are secondary school candidates under 18:

• We only collect data reasonably necessary to provide the exam practice service (we do not profile minors for advertising);
• We require parental/guardian awareness of these Terms and this Policy at registration for users under 18, as described in our Terms of Service;
• We will delete a minor’s account data upon a verified request from a parent or guardian.

10. Cookies

See our separate Cookie Policy for full details on the cookies and similar technologies we use, and how to control them.

11. Contact Us / Complaints

For any question, correction, deletion request, or complaint about how your data is handled:

• Email: contact.magspire@gmail.com
• WhatsApp / Phone: +2349030922105

If you are not satisfied with our response, you may lodge a complaint with the Nigeria Data Protection Commission (NDPC) via ndpc.gov.ng.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notice before they take effect.