Privacy
Last updated 26 October 2026
ExamClash is made by Analytics for Africa (A4A), a data and research organisation with offices in Abuja, Nairobi and Paris. This page says exactly what the app collects from you, who else sees it, and what you can ask us to do about it. It is written to be read, not to be survived.
If anything here is unclear, write to hello@analyticsforafrica.org and a person will answer you.
What we collect
What you type when you sign up
Your email address, and then the profile the app asks for: the name you want shown, your school, your state, your class (SS1, SS2, SS3 or secondary school graduate), your gender, whether you are sitting WASSCE, UTME or both, the year you sit each one, the career you are aiming for, and the subjects you choose.
We ask for class, gender, exam year and career because they are what make the rankings fair and the research useful — an SS1 student beating an SS3 student is a fact about age, not about ability, and we cannot see that unless we know. We do not ask for your date of birth, your phone number or your home address, and you should not put any of them in a free-text box.
What the app records as you play
Which questions you were shown, which answers you picked and whether they were right, how long a round took, your scores, your streak, your XP, the subjects you are strong and weak in, and the day you last played. This is the app: without it there is no streak, no ranking and no review of what you got wrong.
What the home page counts before you sign up
To see where visitors stop, the home page records five steps: that the page was opened, that the first free question was answered, that all five were finished, that the pay button was tapped, and that a sign-in code was asked for. Each record holds the step, the time, whether you arrived from a TikTok advert, and a random ID your browser makes up so one visitor is counted once. It does not hold your email, your name, your answers or anything that says who you are, and we do not link it to your account. It goes to our own database, not to TikTok or anyone else.
What a payment leaves behind
Payments run through Paystack. Your card number, your bank login and your PIN are entered on Paystack's own form and never reach ExamClash — we could not store them if we wanted to. What we keep is the reference for the payment, the amount, whether it succeeded, when it was paid, and the date your access runs until.
What your browser keeps
We set no advertising cookies, and no third-party script runs in this site. The app stores a few things in your own browser so it works: the token that keeps you signed in, an invite code you have typed but not yet used, a note of a sign-in or payment you have started so the app can pick it up if the page reloads, the random ID described above, and an offline copy of the app itself so it opens without using your data every morning.
One more, if you arrived by tapping a TikTok advert: the click ID from that advert, kept for up to 28 days and used only as described under Advertising and measurement. Clearing your browser data removes all of it, including that, and signs you out.
What the servers log
Our hosting and database providers keep ordinary technical logs — IP address, time, which file was requested, error traces — for security and for fixing faults. We do not use those logs to build a profile of you.
What other students can see
ExamClash is a competition, so some of your profile is public to other signed-in students: the name you chose, your school, your state, your scores and your streak. That is what a leaderboard is.
Everything else stays private. Your email address is never shown to another student. Whether you have paid is never shown to another student — access is deliberately held in a separate table from your profile so that it cannot leak onto a board.
Pick a display name you are happy for your classmates and anyone else on the app to see. You can change it at any time from Profile, or by writing to us.
What we use it for
- Running the app — signing you in, drawing your questions, keeping your streak, ranking you against your school, your state and the country, and showing you what you got wrong.
- Taking payment — confirming a payment with Paystack and giving you the year of access you paid for.
- Making it work better — seeing which questions are too hard, where students drop out, and which subjects need more material.
- Research, in aggregate — A4A is a research organisation, and understanding how Nigerian students actually perform is the point of the programme. We may publish findings from this data — by state, by school type, by class, by subject. Anything we publish is aggregated and never names or identifies a student.
We do not sell your data, and we do not hand it to anyone to advertise at you. The one thing that goes to an advertising platform is described in full in the next section.
Advertising and measurement
We advertise ExamClash on TikTok, so we need to know which adverts bring students who actually sign up and pay. Here is exactly how that works, because the usual way of doing it is worse for you.
There is no advertising pixel in this site. No TikTok, Meta or Google tag runs in your browser, no ad-network script loads, and nothing reports your browsing to anyone as you move around the app. The normal approach would have been to drop in TikTok's tracking script, which is 60–100KB downloaded on every visit and reports every page you open. We did not, because you pay for those megabytes.
Instead, one message is sent from our server when you pay. It tells TikTok that a payment of ₦4,950 happened, and it contains two things that relate to you:
- your email address, hashed — put through a one-way scramble so TikTok can check it against an address they already hold without ever reading yours;
- a click ID, if you reached us by tapping a TikTok advert. TikTok puts this on the link; we keep it for up to 28 days and send it back so they can tell which advert it was.
That is the whole message. Your name, your school, your state, your class, your subjects, your scores and your answers are never sent to TikTok or to any other advertising platform, and nothing at all is sent about a student who does not pay.
If you would rather we did not. Write to hello@analyticsforafrica.org and say so, and we will exclude your account — there is nothing to send for a student who has already paid, and we will make sure nothing is sent for a renewal. You can also stop the click ID being kept at all by clearing your browser data, or by typing examclash.com into your browser instead of tapping an advert.
Who else handles your data
We keep this list short on purpose. Each of these does one job, and none of them is allowed to use your data for anything else:
- Supabase — the database and the sign-in system. Your profile, your answers and your scores live here.
- Resend — sends the one-time code that signs you in. It handles your email address and nothing else.
- Paystack — takes the payment. Licensed by the Central Bank of Nigeria, and the only party that sees your card details.
- Hostinger — serves this website and the app files.
- TikTok — receives one message when you pay, holding a hashed email address and an advert click ID, and nothing else. See Advertising and measurement above.
Some of these store and process data on servers outside Nigeria, including in Europe. Where that happens we rely on the providers' standard data protection terms to keep your data protected to the same standard it has here.
If you are under 18
Most of our students are in secondary school, so most of them are children in the eyes of the law. If you are under 18, please show this page to a parent, a guardian or a teacher and get their permission before you sign up or pay. Where a school buys access for a class, we expect the school to have the parents' agreement.
A parent or guardian can ask us at any time to show them what we hold about their child, correct it, or delete the account entirely. Write to hello@analyticsforafrica.org from any address and tell us the student's email, and we will take it from there.
How long we keep it
- Your profile and your results — for as long as your account exists. Delete the account and they go with it.
- Payment records — kept after an account is deleted, for as long as Nigerian tax and accounting law requires a business to keep its financial records.
- Home page step counts — 12 months, then deleted.
- Technical logs — a short period, set by each provider, measured in weeks rather than years.
Your rights
Under the Nigeria Data Protection Act 2023 you can ask us to:
- show you everything we hold about you;
- correct anything that is wrong;
- delete your account and the data in it;
- send you your data in a form you can take elsewhere;
- stop using your data for research, while still using the app.
Write to hello@analyticsforafrica.org from the address on your account. We answer within 30 days, and we do not charge for it. If you think we have handled your data badly and we have not put it right, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
Changes to this page
When we change what we collect or who handles it, we update this page and change the date at the top. If a change is significant — a new category of data, or a new company handling it — we will say so in the app rather than quietly editing this page.
Who to write to
Analytics for Africa — ExamClash
hello@analyticsforafrica.org
ExamClash is made by Analytics for Africa, a data and research organisation with offices in Abuja, Nairobi and Paris.