Privacy Policy

Last Updated: February 19, 2026

Introduction

At PrepOS, we take your privacy seriously. This Privacy Policy explains how Brimbytes ("we", "us", or "our") collects, uses, and protects information from schools, administrators, and students using the PrepOS platform.

Information We Collect

We prioritize the principle of data minimization—only collecting what is essential for academic performance tracking.

1. School Selection

We collect school names, official email addresses, and contact information for authorized administrators.

2. Student Information

We collect student names, class levels, and target examination types (e.g., JAMB, WAEC) to provide personalized testing experiences and analytics.

3. Performance Data

We record student responses in CBT simulations, score metrics, and time spent on specific topics to generate readiness diagnostics.

How We Use Information

We use the collected information to:

  • Generate real-time analytics for school administrators.
  • Identify student academic weaknesses at a topic level.
  • Maintain the security and integrity of examination sessions.
  • Provide technical support and product updates.

Data Protection & Security

We implement industry-standard encryption and security protocols to protect your data from unauthorized access, alteration, or disclosure. Our servers are secured and access is strictly limited to authorized personnel only.

Student Data Protection

As an EdTech provider, student privacy is our highest priority. We never sell student data to third-party marketers or advertisers.

Student data is strictly used for school-authorized academic purposes. Parental consent is managed through the school's existing administrative policies.

Third-Party Services

We may use third-party analytics and hosting providers (such as Cloudinary for media or cloud infrastructure) to deliver the service. These partners are vetted for their privacy standards and are contractually bound to protect your data.

Data Retention

We retain academic records for the duration of the school's subscription. Upon termination, records are kept for a grace period of 90 days to allow for data export before permanent deletion.

Your Rights

Authorized school administrators have the right to access, correct, or request the deletion of the data associated with their institution. Requests can be submitted through the admin dashboard or via our support channels.

Contact Information

For any privacy-related inquiries, please contact our Data Protection Officer at:

privacy@brimbytes.com