Privacy Notice

Who we are

SkulCare is a learning, computer-based testing (CBT) and school management platform for Nigerian secondary schools and learners, at skulcare.ng. We provide practice and mock exams for students, portals for schools to manage classes, exams and results, and registration for competitions.

This notice explains what personal data we collect through our public site and app, why we collect it, and the choices you have.

What information we collect

We collect the information needed to run the service, including:

Account data

• Your name and email address
• A phone number, where you provide one
• Your password — stored only as a secure one-way hash, never as the plain text you typed

School inquiry data

When a school asks to work with us, we collect the school name, the contact person’s name and role, an email and phone number, the school’s state or city, an estimated number of students, a preferred plan and preferred school web address, and any message you include.

School and learner data

When a school uses its portal, we process the records it creates — classes, enrolled students, staff and teachers, exams, exam attempts and results.

Competition and candidate data

For competitions, we process registration details, the access details a candidate uses to sign in, and their attempts and results where applicable. Candidate access codes are stored only as secure hashes.

Payment data

• A payment reference and the payment status
• The amount and currency
• A short summary of the provider’s transaction
• We do not store card numbers or CVV codes — those are handled by our payment provider (see Payments below).

Uploaded school logo

If a school uploads a logo, we store the logo image and basic details about the file so we can display it in the school’s portal.

Operational data

To keep the service running and secure, we keep operational records such as system logs, audit records of important actions, email delivery records, and — where relevant — the IP address and browser (user-agent) associated with a request.

How we use information

We use the information above to:

• Create and manage accounts
• Provide CBT practice and mock exams
• Support school portals, classes, exams and results
• Manage competition registrations and candidate access
• Process payments through Paystack
• Send service emails through Resend
• Respond to school inquiries and to support and privacy requests
• Keep the platform secure and prevent abuse

Student data and schools

Schools add and manage their own student, staff and class records inside their school portal. SkulCare processes that information in order to provide the service to the school.

Schools are responsible for making sure they have the right permission and authority to add and manage the student data they upload. If you are a parent or student asking about a record a school manages, please contact your school first — they control those records and are usually best placed to update them.

We are still finalising the precise legal roles for this data with counsel, so the wording here is deliberately plain and may be refined.

Payments

Payments are processed by Paystack. SkulCare stores the payment reference, status and a short summary needed to support you and reconcile payments. SkulCare does not store card numbers or CVV codes.

Paystack may process your payment information under its own terms and privacy notice.

Service providers

We use trusted service providers to help operate the platform. Today these include:

• Paystack — to process payments
• Resend — to deliver service emails

These providers handle the information needed to perform their service, under their own terms and privacy notices.

How long we keep information

We keep account and school records for as long as we need them to provide the service. Beyond that, we clean up older data over time:

• Some operational logs and old records are cleared after set periods.
• Closed or converted school inquiries may be removed once they are no longer needed.
• Stored copies of payment notifications are minimised over time.
• Audit records may be kept for accountability, with request details such as IP address minimised over time.

These are our current operating practices as the platform evolves, not fixed legal commitments.

How we protect information

We take practical steps to protect personal data:

• Passwords are stored as secure one-way hashes.
• Candidate access codes are stored as secure hashes.
• Card numbers and CVV codes are not stored by SkulCare.
• Access to data is limited by role.
• Sensitive details in our logs are redacted or minimised.
• Older operational data is cleaned up or minimised periodically.

No online service can promise perfect security, and we do not claim any formal security certification.

Your choices and data requests

You can ask us about the personal data we hold. Depending on your situation, you may be able to request:

• Access to your data
• Correction of inaccurate data
• Deletion of data
• Answers to a privacy question

See our data requestspage for how to make a request. We’ll review your request and respond as soon as practical. For records managed by a school, we may direct you to that school.

Contact

For privacy questions or data requests, email us at [email protected], or visit our data requests page. You may also want to read our Terms of Use.

Changes to this notice

We may update this notice as the platform evolves. The “Last updated” date at the top shows when it last changed.