Legal
Privacy policy
The app never asks who you are. Your practice stays on your phone. This policy explains the few things that do leave it, and when. It covers the Awajis CBT app for Android (com.awajiscbt.utme) and this website, and is written to the Nigeria Data Protection Act 2023. There is no iPhone version yet; when one ships, this policy will cover it too.
Who we are
The data controller is Awajis CBT Limited (RC 9120788), No. 34 Udoekpomkpor Street, by Nekede Children Hospital, Uyo, Akwa Ibom State, Nigeria. It was registered in Nigeria on 24 December 2025. Awajis CBT is its practice app for the UTME. In this policy "we" and "us" mean that company.
We are an independent publisher. We are not JAMB or any examination body.
The short version
- The app works offline. It never asks for your name, email address or phone number.
- There are no accounts, no adverts, and no analytics or tracking software in the app.
- Your answers, scores and settings stay on your phone.
- Data leaves your phone only when you send a problem report or rating, when you unlock the app or it checks that unlock, and when the app crashes.
- We do not sell data and we do not share it with advertisers.
What stays on your phone
The question bank, your attempts and scores, the answers you choose, your bookmarks, the reports you write before they are sent, and your settings are kept in the app's private storage. We cannot see them. Uninstalling the app, or clearing its data in your phone's settings, deletes all of it.
Your phone's own backup may include your practice history so a new phone keeps your progress. That copy goes to your Google account under Google's terms. It does not come to us.
What we receive, and when
Problem reports and explanation ratings
Sent only when you report a problem with a question or rate an explanation. Each record contains the question's identifier, its subject and year, the reason you chose, any text you typed, the answer you suggested and the answer the app showed, the app and question-bank versions, your phone model, your language setting, and a random installation ID. We also store the country your connection came from, worked out from your IP address. The IP address itself is not stored.
The installation ID is made up by the app. It is not tied to you, your phone's hardware or your Google account. You can see it on the app's About screen.
Unlocking the app
When you unlock the app, it sends our licence server a device code and either the Google Play confirmation of your purchase or the activation key you entered. The device code is a one-way scramble of an identifier on your phone (the Android ID). It cannot be turned back into that identifier.
About once a week, when you are online, the app asks the server whether the unlock is still valid. With each answer the server notes the date, a shortened form of your IP address that only identifies a network block, your mobile network, and your country. We use this to spot one key shared across many phones.
The server keeps an activation record: the device code, how it was unlocked, when, and a scrambled copy of your recovery code. That record is what lets you move your unlock to a new phone.
Purchases
Payments happen inside Google Play. We receive Google's confirmation that a purchase was made and is valid, so we can unlock the app. We never see your card or bank details. Google holds your payment details under its own privacy policy.
Crash reports
The app uses Firebase Crashlytics, a Google service. If the app crashes, it sends a crash report: your phone model, Android version, what the app was doing when it crashed, the technical crash log, and an identifier Crashlytics creates for the installation. It never includes your answers or scores. We use it only to fix crashes.
This website
If you use the "Report a problem" form on the support page, we receive your message, the topic you chose, the installation ID and email address if you give them, the page you sent it from, and your browser's user-agent string. The form does not pass on your IP address. If you email us, we receive your email address and message. The website sets no cookies and runs no adverts. It may use Cloudflare Web Analytics, which counts page views without cookies and without identifying you.
What we never collect
Your name, phone number, contacts, precise location, photos, IMEI, advertising ID, or your scores and answer sheets. We do not build profiles of you and we make no automated decisions about you.
Why we are allowed to use it
The Nigeria Data Protection Act 2023 lets us use data on these grounds:
- Contract. Unlocking, purchase checks and the weekly check deliver the full app you paid for.
- Consent. Problem reports and ratings are sent only when you choose to send them. You can ask us to delete what you have sent.
- Legitimate interests. Crash reports keep the app working, the shortened network data stops key sharing, and website security logs protect the site. These uses are small and expected, and they do not override your rights.
Companies that process data for us
- Cloudflare hosts this website, the licence server and the storage where problem reports land.
- Google runs Google Play, which handles purchases, and Firebase Crashlytics, which handles crash reports.
Each processes data only to provide its service. Some of this processing happens outside Nigeria. We rely on these providers' contractual data-protection commitments for those transfers, as the Act allows.
How long we keep it
| Data | Kept for |
|---|---|
| Problem reports and explanation ratings | 75 days, then deleted automatically |
| Website "Report a problem" messages | 75 days, then deleted automatically |
| Weekly check records: network block, mobile network, country | 30 days |
| Activation record | As long as the unlock exists. A cancelled unlock is kept so the app can be told it was cancelled, until you ask us to delete it. |
| Crash reports | 90 days, the Crashlytics limit |
| Support emails | 12 months after your last message |
Your rights
Under the Act you can ask us to:
- tell you what data we hold about you and give you a copy;
- correct data that is wrong;
- delete your data;
- stop or limit how we use it, or object to a use based on legitimate interests;
- withdraw consent you gave, without affecting what happened before.
There are no accounts, so we need a way to find your records. For problem reports, quote the installation ID from the app's About screen. For an unlock, quote the device code the app shows on its activation screen. Email support@awajiscbt.com. We answer within 30 days.
Children
Many UTME candidates are under 18. The app collects no personal details from anyone. Report text is free text, so please do not type your name, school or phone number into it. A parent or guardian can contact us about any data a child has sent.
Security
Everything the app sends travels over an encrypted connection. Reports carry no name, email or phone number. Activation records hold scrambled codes, not your phone's real identifiers. Access to stored data is limited to the people who maintain the app.
Changes to this policy
When this policy changes, the date at the top changes with it. A change that affects what the app collects ships with an app update.
Contact and complaints
Awajis CBT Limited, No. 34 Udoekpomkpor Street, by Nekede Children Hospital, Uyo, Akwa Ibom State, Nigeria. Email support@awajiscbt.com.
If you are not satisfied with our answer, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.