1. Who We Are
PrepNus is an exam preparation platform operated by Magnus Sam.
Contact: [email protected]
2. Information We Collect
2.1 Account Information
- Google Sign-In data: Name, email, profile photo
- Phone number: For OTP verification
2.2 Profile Information
- Display name
- Exam type preferences
- Referral code (if applicable)
- Profile photo (optional upload)
2.3 Usage & Learning Data
- Practice attempt history and scores
- Mock exam results
- Study streaks and XP
- Bookmarks and saved items
- Course and lesson progress
- Subject-wise performance data
2.4 Camera & Photos
Camera is accessed only when you:
- Upload a profile photo
- Submit written assessment answers
Camera is never used in the background.
2.5 Device Information
- Device model (e.g. SM-G975F)
- Operating system and version (e.g. Android 14)
- App version (e.g. 1.0.4)
- An opaque per-install ID — a random identifier generated on first launch, scoped to your install of PrepNus, and reset whenever you uninstall or clear app data
- Your IP address and approximate country (derived from IP)
- User agent (the standard browser/app identifier sent by your device)
- Login success/failure timestamps
- Push notification tokens
We do not access or use Android Advertising ID, Android ID, IMEI, MAC address, or any other persistent hardware identifier.
2.6 What We Do NOT Collect
- We do not collect precise location
- We do not access contacts, call logs, or SMS
- We do not collect financial or payment info in-app
- We do not sell your data, run advertising, or use marketing or ad-tracking SDKs. We do use a small set of operational service providers for crash reporting and product analytics — listed in §9.
2.7 Login & Security Logs
Each time you sign in or refresh your session, we record the date/time, IP address, approximate country, device model, OS version, app version, and an opaque per-install ID. We use this exclusively for security, fraud prevention, and account recovery — never for advertising or analytics.
3. How We Use Your Information
- Provide the service: Deliver questions, track progress, personalize learning
- Secure your account: Google Sign-In and phone OTP
- Detect suspicious sign-ins: Alert you to unfamiliar devices, and recover hijacked accounts
- Improve PrepNus: Understand usage patterns
- Communicate: Push notifications (opt out anytime)
- Leaderboards: Display anonymized performance
4. How We Protect Your Information
- All data in transit is encrypted
- On-device data is encrypted at rest
- Access restricted to authorized systems
- Industry-standard security practices
5. Data Sharing
We do not sell, rent, or trade your personal information.
- With service providers who process data strictly on our behalf, under written data-processing agreements, for the operational purposes listed in §9 only
- With your consent for a specific purpose
- Legal obligations if required by law
- Safety to protect rights and property
6. Data Retention
- Personal info deleted within 30 days of account deletion
- Anonymized aggregate data may be retained
- Login & security logs: kept while your account is active. Within 90 days of account deletion, IP addresses are truncated (last octet removed) and user identifiers are nulled, preserving only aggregate security telemetry.
7. Your Rights
- Access your personal data
- Correct inaccurate info
- Delete your account (Account Deletion)
- Opt out of push notifications
- Export data via [email protected]
- Request your full login history at [email protected]
8. Children's Privacy
Not directed at children under 13. Contact us at [email protected] if concerned.
9. Third-Party Services & Processors
PrepNus uses the following third-party services. Each one acts as a data processor on our behalf under a written data-processing agreement — they receive only what is needed for the listed purpose, and they may not use your data for their own advertising or sell it.
- Google Sign-In — account authentication. Subject to the Google Privacy Policy.
- Firebase Cloud Messaging (Google) — delivery of push notifications. Receives a push-notification token tied to your install. Firebase Privacy.
- Firebase Crashlytics (Google) — crash reporting. Receives stack traces, device model, OS version, app version, and the opaque per-install ID at the moment of a crash. Used only to diagnose and fix crashes. Firebase Privacy.
- Firebase Analytics (Google) — product analytics for app stability and feature usage. Records anonymous events (screen opens, feature taps) tied to the opaque per-install ID. PrepNus does not enable Google Signals or ad personalisation, and does not share this data with advertisers. Firebase Privacy.
- Sentry — error monitoring. Receives caught exceptions and the breadcrumbs (recent in-app events) leading up to the error. Used only to diagnose and fix bugs. Sentry Privacy Policy.
The four Google services above are bound by the Google Cloud Data Processing Addendum; Sentry by their Data Processing Addendum. Under both agreements they act as our processors only, never as independent controllers of your data.
10. Changes to This Policy
Significant changes communicated through the app or email.
11. Contact Us
- Email: [email protected]