Privacy Policy
Last updated 6 September 2026
The short version. To practise with JAMBUDDY we store your Telegram ID, the subjects you pick, one contact detail (an email address or a phone number), and a record of the questions you answer. We use that last part to work out which topics you are weakest at. That is the entire product. We do not sell any of it, and we do not share it with anyone except the services listed below that are needed to run the bot.
1. Who we are
JAMBUDDY is a study bot for candidates sitting Nigeria's Unified Tertiary Matriculation Examination. It runs inside Telegram as @jamb_buddy_bot.
We are not affiliated with or endorsed by the Joint Admissions and Matriculation Board.
For anything in this policy, contact us at privacy@jambuddy.xyz.
2. This website
This site has no advertising pixels and no advertising trackers. It counts page views in two ways, and the difference between them is the reason you are asked about cookies at all:
- Vercel Web Analytics counts from the server that sends you this page. It sets no cookie and stores nothing on your device, so it needs no permission and is always on. It records the page, the referrer and a rough country.
- Google Analytics tells us more — whether the same person came back, and the path they took through the site — and it needs a cookie to do that. So it loads only if you allow it in the cookie notice. Decline, and nothing is requested from Google at all: not a cookie-free version, nothing.
Where Google Analytics is allowed, it is configured not to collect advertising signals and your IP address is anonymised. Neither tracker is connected to your bot account.
Apart from a Google Analytics cookie if you allow one, the only thing stored on your device is your answer to the cookie notice itself, kept in your browser's local storage so you are not asked again. You can change your answer at any time via Cookie settings.
3. What the bot collects
| What | Why |
|---|---|
| Your Telegram user ID | To know whose progress is whose. We do not store your name, username or profile photo. |
| Your chosen subjects | To send you the right questions. |
| An email address or a phone number | Whichever you give at registration. Used for your payment receipt and to reach you about your account. One or the other, not both. |
| Every question you answer, and whether you got it right | This is the product. It is how we work out which topics are costing you marks. |
| Your streak, rank and daily challenge results | To show your progress over time. |
| Which commands you use | To see which parts of the bot people actually use, so we know what to improve. |
| Payment records | A reference, an amount, a plan and a date. We never see or store your card details or bank details. Those go directly to Paystack and never reach us. |
4. Who else sees it
Only the services required to run the bot:
- Telegram delivers every message. Your use of Telegram is governed by their own privacy policy.
- Paystack processes payments. They handle your card or transfer details directly; we receive only a reference and a confirmation.
- Railway hosts the bot and the database.
- Vercel serves this website and counts page views, without cookies or any device identifier.
- Google Analytics counts page views on this website — not in the bot — and only if you allow it in the cookie notice. It never receives anything from your bot account.
- DeepSeek generates the study tip shown by
/progress. Worth being precise here: what is sent is a list of subjects and topics with percentage scores, and nothing that identifies you. No ID, no name, no email, no phone number.
We do not sell your data. We do not share it for advertising. There is no advertising.
5. Legal basis
Under the Nigeria Data Protection Act 2023, we process your data on two bases: performance of a contract (we cannot run a study bot without recording what you answered) and consent, which you give by registering and can withdraw by asking us to delete your account.
6. If you are under 18
Many JAMB candidates are 16 or 17. If you are under 18, please check with a parent or guardian before signing up, and they are welcome to contact us on your behalf about anything in this policy. We do not knowingly collect more from a minor than from anyone else. The bot asks everyone for the same two things: subjects and one contact detail.
7. How long we keep it
- While you use the bot. Your answer history stays, because it is what makes the weak-topic tracking work.
- If you ask us to delete your account. Your record and answer history are removed.
- Payment records. Kept as long as required for accounting and tax, even after account deletion.
8. Your rights
Under the NDPA 2023 you can ask us to:
- show you what we hold about you
- correct anything that is wrong (you can change your contact detail yourself with
/contact) - delete your account and history
- stop sending you the daily challenge (
/dailyoffdoes this immediately)
Email privacy@jambuddy.xyz from the address you registered with, or message the bot. We will respond within 30 days.
9. Security
Data is held in a hosted PostgreSQL database, reached only over encrypted connections. Payment details never touch our systems. No system is perfectly secure, and we will tell affected users if that ever changes for the worse.
10. Changes
If this policy changes materially, we will say so through the bot rather than quietly updating the page. The date at the top always reflects the current version.