Privacy Policy

Last updated: July 2026

1. The short version

We collect only what we need to sell you unlock codes and run the site. Your practice history stays on your device — we don't upload it. We don't sell your data to anyone. When you pay, our payment processor (Paystack) sees your card/mobile-money details, not us.

2. What we collect

• Email address — required to deliver your unlock code after payment. Also used to send occasional service messages (never marketing spam).
• Phone number — optional, only if you want your unlock code by SMS.
• Payment reference — a unique ID from Paystack so we can prove you paid. We do not receive or store your card number, PIN, or mobile-money PIN — that stays with Paystack.
• Usage analytics — aggregate, anonymous page view counts via Cloudflare Web Analytics. This does not use cookies or track individuals.
• IP address & device info — briefly, for security (rate limiting, bot detection). Not stored beyond 30 days.

3. What we don't collect

• We do not use tracking cookies for advertising.
• We do not upload your practice history — it's stored on your device only (browser localStorage).
• We do not collect your name unless you email us.
• We do not receive card numbers, CVV, or mobile-money PINs.

4. Where your data lives

• Site hosting: Cloudflare (global CDN, US/EU/AF regions).
• Purchase records & unlock codes: Cloudflare D1 (encrypted at rest).
• Payment processing: Paystack, PCI-DSS Level 1 compliant, licensed in Ghana and Nigeria.
• Practice history & settings: your device (browser localStorage). We do not have access to it.

5. Who we share data with

We share data only with the service providers required to run the site:

• Paystack — for payment processing (email + purchase amount only).
• Cloudflare — for hosting, DNS, and CDN (technical logs only).
• Email delivery (e.g. Cloudflare Email Routing or Resend) — to send you your unlock code.

We do not sell, rent, or trade your data.

6. How long we keep data

• Purchase records: 7 years, for tax and warranty purposes (as required by Ghana law).
• Unlock codes: as long as they remain valid for your entitlement (lifetime for single-exam, subscription period for All-Access).
• IP/security logs: 30 days.
• Analytics: aggregate only, no individual identification.

7. Your rights

You can email us at [email protected] at any time to:

• Ask what data we hold about you
• Request correction of your data
• Request deletion of your data (subject to legal retention obligations)
• Export your data (we'll send you a CSV)

If you are in the European Union, United Kingdom, or another jurisdiction with data-protection legislation, you have additional rights under GDPR (or your local equivalent) including the right to object to processing and the right to complain to a supervisory authority.

8. Children

Nyansahub is designed for students preparing for professional and school-leaving exams. If you are under 16, please use Nyansahub only with the involvement of a parent or guardian. We do not knowingly collect data from children under 13.

9. Cookies

We use a minimum of cookies:

• Essential cookies to store your theme preference and unlock state (stored on your device only, not sent to us).
• No advertising or cross-site tracking cookies.

10. Security

We use industry-standard security: HTTPS everywhere, encrypted storage, minimal data collection, and modern authentication tokens for our API. We enforce strict access controls internally. In the unlikely event of a data breach affecting you, we will notify you within 72 hours as required by law.

11. Changes to this policy

We may update this policy. Material changes will be announced on this page and (if we have your email for purchase purposes) by email.

12. Contact

Privacy questions: [email protected]
General contact: [email protected]