Privacy Policy
Last updated: August 22, 2026
Introduction
PrepFlow is operated by R-Code Technologies. This policy explains what personal information we collect when you use PrepFlow, why we collect it, and the choices you have about it. By creating an account, you agree to the practices described here.
Information We Collect
We collect information in three ways:
Information you give us
When you register, we collect your full name, email address, registration number, department, academic session, and a password (which we store as a one-way hash — we never see or store your actual password). If you upload a profile photo, we store that too.
Information collected automatically
As you use PrepFlow, we record your quiz attempts, the answers you selected, your scores, and timestamps of your activity, so we can show you your own progress and history. We also store a session identifier (see Cookies & Sessions below) to keep you logged in.
Information from payment
Subscription payments are processed by Paystack, a third-party payment processor. We receive confirmation that a payment succeeded, the amount, and a transaction reference — we never receive or store your card number, PIN, or bank credentials. Those are handled entirely by Paystack under its own privacy and security practices.
How We Use It
We use your information to:
- Create and maintain your account, and show you courses relevant to your department.
- Grade your quiz attempts and build your progress history, streaks, and statistics.
- Process your subscription payment and keep your access up to date.
- Send account-related emails — email verification, one-time verification codes, password reset links, and (for staff accounts) welcome emails with login details.
- Respond when you contact us for support.
- Maintain the security of the platform, including detecting misuse of the login system.
We do not use your information for advertising, and we do not sell it.
Cookies & Sessions
PrepFlow sets one essential cookie to keep you logged in. It's marked HTTP-only, meaning it can't be read by JavaScript or third-party scripts. PrepFlow allows only one active session per account — logging in on a new device automatically signs you out everywhere else. We don't use advertising or cross-site tracking cookies.
Data Retention
We keep your account information and quiz history for as long as your account is active. If you delete your account (see below), your profile and quiz history are permanently removed from our active systems. Records of financial transactions may be retained longer where we're required to for accounting or legal reasons.
Your Rights & Choices
- Access and update your name, department, and photo any time from your Profile.
- Change your password from the Security section of your Profile.
- Delete your account permanently, along with your entire quiz history, from the Danger Zone on your Profile page. This cannot be undone.
- Ask us questions about what data we hold on you by reaching out through the contact details below.
Data Security
Passwords are never stored in plain text — we store a one-way cryptographic hash that can't be reversed, even by us. We apply reasonable technical safeguards to protect your data, but no online service can guarantee absolute security. Please use a unique, strong password and avoid sharing your login with anyone.
Children's Privacy
PrepFlow is built for tertiary-level students and is not directed at children. We do not knowingly collect information from anyone under the age required to enroll in the academic programs PrepFlow supports.
Changes to This Policy
If we make material changes to this policy, we'll update the "Last updated" date at the top of this page. Continuing to use PrepFlow after a change means you accept the updated policy.
Contact Us
Questions about this policy or your data? Email us at support@prepflow.com.ng.