Privacy Policy

GetSurePass is an online exam-preparation platform for Nigerian students, offering JAMB/UTME CBT practice, timed mock exams, result reviews, an AI study tutor, daily questions, leaderboards, and tools for parents, sponsors and schools. GetSurePass is operated by Technest Digital Solutionz (BN 9933822), whose registered address is 12 Bisiolu Street, Agodo, Ikotun, Lagos State, Nigeria (“GetSurePass”, “we”, “us”).

Technest Digital Solutionz is a business name registered with the Corporate Affairs Commission (CAC) under the Companies and Allied Matters Act 2020, registration number BN 9933822, and is owned and run by its sole proprietor, Kingsley Dike.

We are the data controller for the personal data described in this policy. That means we decide why and how it is used, and we are responsible for protecting it under the Nigeria Data Protection Act 2023 (NDPA) and the regulations and guidance issued by the Nigeria Data Protection Commission (NDPC).

This policy applies to our website, our web app (including when installed on your phone), our mobile app, and our emails. It covers students, parents and guardians, sponsors, school and tutorial-centre accounts, and anyone who contacts us.

Our Data Protection Officer is Kingsley Dike, Proprietor. You can reach them through the contact details at the end of this policy.

We only collect what we need to run your account, deliver practice and results, process payments and keep the platform safe.

We do not ask for your National Identification Number (NIN), BVN, home address, religion, ethnicity or health information, and we ask you not to include such details in messages to us or to the AI tutor.

The NDPA only allows us to process personal data when we have a lawful basis. Here is each purpose and the basis we rely on.

Where we rely on legitimate interests, we have balanced them against your rights and expectations. You can object at any time (see section 12).

Many JAMB candidates are under 18. Under the NDPA, a person under 18 is a child, and we need the consent of a parent or legal guardian to process a child’s personal data.

• If you are under 18, you may only create an account with the permission of your parent or guardian. When you sign up, you confirm that they have agreed to our Terms and this Privacy Policy.
• We collect no more about young learners than about anyone else, and we never use a child’s data for advertising.
• Parents and guardians can ask to see, correct or delete their child’s data using the contact details in section 15. We may ask for reasonable proof of the relationship.
• If we learn that we hold a child’s data without the required consent, we will contact the account holder and, if consent is not confirmed, delete the data.

The AI tutor explains questions, reviews results, gives hints and answers questions about using GetSurePass. It is powered by MiniMax, an external AI provider.

• What is sent: your message, the page you asked from, and a learning summary — the subjects, years and scores of your recent exams and the questions you got wrong. Your name, email, phone number, password and payment details are not sent.
• What we keep: GetSurePass does not save your tutor conversations. Once the reply is shown, the conversation exists only on your screen.
• What the provider keeps: MiniMax processes requests under its own terms and may keep them for a limited period for abuse monitoring.
• Hints during exams are designed to give clues without revealing the correct option.

We do not sell your personal data, and we do not share it with advertisers. We share it only in these situations:

Service providers who work for us

These companies process data only on our instructions and only to provide their service to us.

Other people on GetSurePass

• Leaderboard: other learners can see your username, profile photo, rank, accuracy, number of exams and questions answered, and when you last completed an exam. Your email, phone number and wallet are never shown.
• Your school or tutorial centre: if you join an institution, its administrators can see your username, email, profile photo, the date you joined and your average progress.
• Sponsors: when a parent or sponsor links to your account using your email, they can pay for your premium access. The confirmation shows them your username and premium expiry date. They cannot see your results unless you share them.
• Referrers: the person who referred you may see your username in their wallet history when they earn a referral reward.

Legal and safety reasons

We may disclose information when the law requires it, for example to comply with a court order or a lawful request from a Nigerian regulator or law-enforcement agency, or where it is necessary to protect someone’s life or safety, or to prevent fraud.

Business changes

If GetSurePass is merged, acquired or reorganised, your information may transfer to the new operator, who must continue to protect it as this policy describes. We will tell you before that happens.

Some of our service providers store or process data outside Nigeria, including our hosting and database providers, Paystack’s international infrastructure, our email provider and MiniMax. The NDPA (Part VIII) only allows such transfers where the destination provides adequate protection or another lawful ground applies.

We rely on contractual commitments from these providers to protect personal data to a standard equivalent to the NDPA, together with their security certifications, and we limit what is sent to what the service needs. You can ask us for more details about these safeguards.

Wallet funding is processed by Paystack, a licensed Nigerian payment provider. You enter your card, bank or USSD details on Paystack’s secure checkout, never on GetSurePass, and Paystack handles them under its own privacy policy and the PCI DSS card-security standard.

We receive only what we need to credit your wallet: the amount, the time, the payment reference and whether the payment succeeded. Your balance and premium status change only after Paystack confirms the payment directly to our servers.

GetSurePass does not use advertising cookies, cross-site tracking or third-party analytics. We store a small amount of information in your browser so the app works:

Because these items are strictly necessary for the service, they do not require consent. You can clear them at any time in your browser settings; you will be signed out and unsubmitted offline answers will be lost.

• All traffic between your device and GetSurePass is encrypted with HTTPS.
• Passwords are stored only as salted one-way hashes; nobody at GetSurePass can read them.
• Each account can be signed in on one device at a time, and we email you when your account signs in, so you can spot unauthorised access.
• Sign-in, password reset and payment endpoints are rate-limited to stop guessing attacks.
• Exam timing and scoring happen on our servers, and correct answers are never sent to your device before you submit.
• Administrator access is restricted, and important administrator actions are recorded in an audit log.
• Payment card data never touches our systems.

No system is perfectly secure. If a personal data breach is likely to put your rights at risk, we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it, as the NDPA requires, and tell affected users promptly in plain language, including what we are doing and what you can do.

Please protect your account too: use a strong password you don’t use elsewhere, never share your login, and tell us immediately if you see a sign-in alert you don’t recognise.

We keep personal data only as long as we need it for the purposes in this policy:

Statistics that cannot identify you, such as how many learners attempted a subject, may be kept longer.

Under the NDPA (sections 34 to 38) you have the right to:

• Be informed about how we use your data — this policy does that.
• Access the personal data we hold about you and get a copy.
• Correct data that is inaccurate or incomplete. You can change your username and phone number yourself in your profile.
• Delete your data (the “right to erasure”), subject to records we must keep by law.
• Restrict how we use your data while a concern is being resolved.
• Object to processing based on legitimate interests, including being shown on the leaderboard, and to any direct marketing.
• Data portability: receive your data in a structured, commonly used format, or have it sent to another provider.
• Withdraw consent at any time where we rely on consent. This does not affect processing that already happened.
• Not be subject to decisions based solely on automated processing that have legal or similarly significant effects on you.

How to use your rights

To make a request, email technestsolutionz@gmail.com or use our contact form, from the email address on your account if possible. We may ask you to confirm your identity before acting. We respond within 30 days and do not charge a fee unless a request is clearly unfounded or excessive.

Some things happen automatically: marking exam answers, closing exams when time runs out, the free-question allowance, premium access based on your subscription dates, auto-renewal when you have turned it on, and leaderboard rankings. These follow fixed, published rules and do not have legal effects on you. If you think something was applied to your account wrongly, contact us and a person will review it.

If you are unhappy with how we have handled your data, please contact us first so we can put it right.

You also have the right to complain to the Nigeria Data Protection Commission (NDPC), the regulator for data protection in Nigeria, through its website at ndpc.gov.ng.

We will update this policy when our services or the law change. The effective date at the top always shows the current version. If a change significantly affects how we use your data, we will tell you by email or in the app before it takes effect and, where the law requires, ask for your consent again.

For any privacy question or request, email technestsolutionz@gmail.com or use our contact form.

Technest Digital Solutionz (BN 9933822)
12 Bisiolu Street, Agodo, Ikotun, Lagos State, Nigeria