Last updated August 1, 2026
Studiengine is an AI-powered CBT exam prep platform built for Nigerian students. This policy describes what we collect, why, and how we handle it, in line with the Nigeria Data Protection Regulation (NDPR).
Account data: email address, password (hashed), display name (if provided), account creation date.
Usage data: quiz counts, scan counts, session scores, feedback you submit anonymously or signed in.
Technical data: browser fingerprint (for guest accounts), device type, IP address (transient, for rate limiting), OS, language.
Payment data: we never see card numbers or bank details — those go directly to Paystack. We store Paystack reference, amount, plan, and expiry on your account.
Uploaded content: notes, PDFs, and past questions you provide so we can generate practice materials.
- Provide and improve the service - Enforce daily usage limits and premium access - Process payments via Paystack - Send transactional emails (payment confirmations, account alerts — not marketing unless you opt in) - Provide AI-generated practice questions and explanations
We do not sell your data. We share only with the third parties that run the service: - Firebase (Google): authentication and database - Paystack: payment processing - Groq / Cerebras / Google Gemini: AI inference (we send only the content needed to answer, not your identity) - Brevo: transactional email - Vercel: hosting We never share your uploaded study materials with third-party AI providers beyond what's needed to process them for you.
We use local storage for your theme preference, notification read state, and guest session tracking. We do not use advertising trackers. Our chatbot (powered by Xeelaa) stores its conversation history locally on your device.
Your account data persists until you delete it. Guest accounts are automatically deleted after 14 days of no activity. You may request deletion of your data at any time via the feedback button or email us.
You have the right to access your data, correct it, or request deletion. Email us at the address below and we'll respond within 30 days.
Studiengine is not directed at children under 13. If a parent or guardian believes their child has provided personal information, please contact us and we will delete it.
We use industry-standard encryption (HTTPS), hashed passwords, and server-side verification for sensitive operations. However, no system is perfectly secure — we cannot guarantee absolute security.
We may update this policy; material changes will be notified in-app 7 days before taking effect.