Privacy Policy

Last updated: [date]

Draft for legal review

Highlighted details still need to be confirmed before launch.

This policy explains what personal data [company legal name] ("PointPrep", "we") collects when you use the PointPrep website, web app and mobile apps, why we collect it, and the choices you have. Contact us at [support email] with any questions.

Data we collect

  • Account details: your email address, and your name and profile photo if you add them or sign in with Google.
  • Study activity: quizzes you create or take, your answers, scores, question coverage and daily streak.
  • Payments: the plan you buy, the amount and the payment reference. Card and mobile-money details are handled by Paystack; we don't receive or store them.
  • Messages you send us through Report & Feedback.
  • Technical data: IP address and session information used to keep you signed in and to protect accounts, and error reports.

How we use it

  • To provide the service: sign you in, run quizzes, and track your progress.
  • To process purchases and give you access for the plan you bought.
  • To send sign-in codes, receipts and plan reminders by email.
  • To keep the service secure, prevent abuse and fix problems.

We don't sell your personal data or use it for advertising.

Who we share it with

We share data only with providers that help us run PointPrep:

  • Paystack (payments)
  • Google (sign in with Google, cloud hosting and storage)
  • Supabase (database hosting)
  • [email provider] (sign-in codes and notifications)
  • Sentry (error monitoring)

How long we keep it

We keep your data while your account is open. When you delete your account, we erase your profile, study history, feedback and notifications. We keep payment records, without your name or contact details, for [retention period] to meet accounting obligations.

Your choices and rights

  • Update your name any time in Profile.
  • Delete your account in the app or web app under Profile → Delete account.
  • Ask us for a copy of your data, or to correct it, at [support email].

If you're in Ghana, you also have rights under the Data Protection Act, 2012 (Act 843), including the right to complain to the Data Protection Commission. [Data Protection Commission registration]

Children

PointPrep is intended for pharmacy students and professionals and is not directed at children under [minimum age].

Changes

We'll update this page when this policy changes and show the date of the latest version above.