Privacy Policy

Account and profile information

When you create or manage an account, we may collect:

• your first name, middle name, and last name;
• email address;
• username or nickname;
• password and one-time verification code used to authenticate your account;
• profile avatar selection;
• institution, selected subjects, study-time preferences, and learning-streak target; and
• account identifiers, authentication tokens, and account status.

Your password is submitted to our servers for authentication. We do not intentionally include it in analytics events.

Learning activity and content

When you use the Service, we may collect:

• subjects, exam years, practice categories, and learning goals you select;
• quiz and CBT attempt identifiers;
• questions viewed, selected answers, bookmarks, issue-report tags, and response timing;
• quiz, CBT, and workout results, accuracy, scores, completion status, and performance history;
• progress, streaks, levels, experience points, gems, achievements, and rewards; and
• paused-session state needed to resume a CBT or retry a completed workout submission.

Some information is stored on your device so progress can be restored or submitted when a network connection becomes available. Account-linked learning information may also be transmitted to and stored on our servers.

Device, network, and diagnostic information

We and our service providers may automatically collect:

• a randomly generated installation or device identifier used by the Service;
• Firebase installation and Crashlytics identifiers;
• IP address and general network information;
• device model, operating-system version, app version, language, and device configuration;
• app launches, screens viewed, button interactions, feature usage, and timestamps;
• crash reports, stack traces, error messages, performance information, and relevant application state; and
• advertising or similar device identifiers when made available to an integrated analytics service by Android or Google Play services.

We do not use this information to provide third-party advertising in the current version of Stuvo Jamb.

Analytics and session replay

We use Firebase Analytics and Mixpanel to understand how the Service is used. After login or email verification, analytics records may be associated with your email address and basic profile information, such as your name and username. Events may include subjects or practice categories selected, screens visited, question or bookmark identifiers, answer counts, scores, time spent, and actions taken.

We also use Mixpanel Mobile Session Replay to reproduce usability problems and improve the app. A replay may capture screen layouts, navigation, taps, gestures, and other interactions. Mixpanel states that replay content starts masked by default. We do not intentionally configure the Service to capture passwords, one-time verification codes, or other text-entry secrets in readable form. Despite masking, session replay remains usage data and may be associated with your analytics profile.

Communications

If you contact us by email, WhatsApp, Instagram, Facebook, or another support channel, we collect the information you choose to provide, such as your contact details, message, attachments, and information needed to investigate your request.

We use information to:

• create, verify, secure, and maintain accounts;
• provide practice questions, CBT sessions, workouts, bookmarks, results, and progress tracking;
• personalize learning content and recommendations based on subjects, goals, and performance;
• preserve paused sessions, synchronize answers, submit completed activities, and retry eligible submissions;
• operate customer support and respond to questions, feedback, and account requests;
• measure usage, evaluate product experiments, understand feature performance, and improve the Service;
• detect, investigate, and resolve errors, crashes, abuse, security incidents, and technical problems;
• protect the rights, safety, and integrity of users, Stuvo, and the Service;
• comply with legal obligations and enforce our agreements; and
• communicate material service or privacy updates.

Where applicable law requires a legal basis, we process information as necessary to provide the Service you request, comply with law, with your consent where requested, and for legitimate interests such as securing, maintaining, analyzing, and improving the Service, provided those interests are not overridden by your rights.

We do not sell your personal information. We may disclose information in these circumstances:

Service providers

We use companies that process information on our behalf to host and operate the Service, deliver API and database infrastructure, provide analytics, diagnose crashes, run product experiments, and provide support. These providers include:

• Google Firebase, including Analytics, Crashlytics, Installations, and Remote Config. See Firebase Privacy and Security and the Google Privacy Policy.
• Mixpanel, including product analytics and Mobile Session Replay. See the Mixpanel Privacy Statement.

These providers may process device identifiers, app activity, diagnostic information, IP addresses, and other information described in this policy, subject to applicable contracts and law.

Legal, safety, and security reasons

We may disclose information when we reasonably believe disclosure is required by law or legal process, or is necessary to protect users, investigate fraud or abuse, respond to a security incident, or protect the rights and property of Stuvo or others.

Business transfers

If Stuvo is involved in a merger, acquisition, financing, reorganization, sale of assets, or similar transaction, information may be disclosed to professional advisers and transaction participants subject to appropriate confidentiality protections. We will provide notice when required by law.

At your direction

We may disclose information when you direct us to do so, such as when you use Android's sharing interface or open an external support or social-media service. Information you provide directly to an external service is governed by that service's privacy policy.

We retain account and learning information while your account is active and for as long as reasonably necessary to provide the Service. We may retain information longer when necessary to:

• complete an account-deletion request and maintain evidence that it was completed;
• comply with legal, tax, accounting, or regulatory obligations;
• resolve disputes and enforce agreements;
• prevent fraud, abuse, or security incidents; or
• maintain limited backups and disaster-recovery systems.

Analytics, crash, diagnostic, and session-replay records are retained according to our configured retention periods and the relevant provider's practices. When information is no longer reasonably necessary, we delete or anonymize it, subject to limited backup cycles and legally required retention.

Local app data remains on your device until the app clears it, you sign out where relevant data is included in sign-out cleanup, you clear the app's storage, or you uninstall the app. Clearing local data or uninstalling does not delete information already stored on our servers.

You may request deletion of your Stuvo Jamb account and associated personal information by emailing officialstuvo@gmail.com with the subject line "Delete My Stuvo Jamb Account." Send the request from the email address registered to the account and include your username if available. We may take reasonable steps to verify that you control the account.

After a verified request, we will delete or irreversibly anonymize the account and associated personal information, except information that must be retained for legitimate security, fraud-prevention, dispute-resolution, or legal-compliance reasons. Retained information will not be used to continue providing or personalizing the Service and will be deleted when the applicable retention need ends.

Signing out, deleting the app, or not using the Service does not constitute an account-deletion request.

Depending on where you live, you may have the right to:

• request access to or a copy of your personal information;
• correct inaccurate or incomplete information;
• request deletion of your account or personal information;
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request portability of information you provided; and
• complain to an applicable data-protection authority.

You can update certain profile and learning-preference information in the app. For other requests, email officialstuvo@gmail.com. We may need to verify your identity before acting. These rights may be subject to exceptions under applicable law.

Android and Google settings may also let you reset or limit certain device identifiers. Changing those settings may not delete analytics or account data already collected; use the request process above if you want us to address existing account-linked data.

We use reasonable administrative, technical, and organizational safeguards designed to protect information. The app is configured to use HTTPS for communication with our API, and Firebase states that its services encrypt data in transit. Access to production systems and provider consoles is limited to authorized personnel.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials and should contact us if you believe your account has been compromised.

Stuvo and its service providers may process information in countries other than where you live. Google and Mixpanel operate global infrastructure, including facilities in the United States and other jurisdictions. Privacy laws in those locations may differ from those in your country. Where required, we use appropriate safeguards for international transfers.

Stuvo Jamb is intended for users aged 16 and older. Persons under 16 are not permitted to create an account. If we learn that we have collected personal information from a person under 16, we will take reasonable steps to delete the account and associated information, subject to applicable legal retention requirements.

Users aged 16 or 17 may still be considered children under applicable law. We process their personal information only as permitted by applicable law and apply any legally required safeguards.

Parents and legal guardians may contact us at officialstuvo@gmail.com to request access to, correction of, or deletion of a child's information, subject to applicable law.

The Service may open external websites or apps, including email, WhatsApp, Instagram, and Facebook. Stuvo does not control those third parties or their privacy practices. Review their policies before providing information to them.

We may update this Privacy Policy as the Service, our data practices, or legal requirements change. We will update the "Last updated" date and provide additional notice in the app or through another appropriate channel when a change is material or applicable law requires notice.