Privacy Policy
Last updated 6 September 2026
The short version. To practise with JAMB Buddy we store your Telegram ID, the subjects you pick, one contact detail (an email address or a phone number), and a record of the questions you answer. We use that last part to work out which topics you are weakest at. That is the entire product. We do not sell any of it, and we do not share it with anyone except the services listed below that are needed to run the bot.
1. Who we are
JAMB Buddy is a study bot for candidates sitting Nigeria's Unified Tertiary Matriculation Examination. It runs inside Telegram as @jamb_buddy_bot.
We are not affiliated with or endorsed by the Joint Admissions and Matriculation Board.
For anything in this policy, contact us at privacy@jambbuddy.ng.
2. This website
This site is static. It has no analytics, no advertising pixels and no third-party trackers.
The only thing it stores on your device is your answer to the cookie notice, kept in your browser's local storage so you are not asked again. Nothing is stored until you choose. You can change your choice at any time via Cookie settings.
If we add analytics later, it will load only if you have allowed it in that notice. That gate is already built and already working.
3. What the bot collects
| What | Why |
|---|---|
| Your Telegram user ID | To know whose progress is whose. We do not store your name, username or profile photo. |
| Your chosen subjects | To send you the right questions. |
| An email address or a phone number | Whichever you give at registration. Used for your payment receipt and to reach you about your account. One or the other, not both. |
| Every question you answer, and whether you got it right | This is the product. It is how we work out which topics are costing you marks. |
| Your streak, rank and daily challenge results | To show your progress over time. |
| Which commands you use | To see which parts of the bot people actually use, so we know what to improve. |
| Payment records | A reference, an amount, a plan and a date. We never see or store your card details or bank details. Those go directly to Paystack and never reach us. |
4. Who else sees it
Only the services required to run the bot:
- Telegram delivers every message. Your use of Telegram is governed by their own privacy policy.
- Paystack processes payments. They handle your card or transfer details directly; we receive only a reference and a confirmation.
- Railway hosts the bot and the database.
- DeepSeek generates the study tip shown by
/progress. Worth being precise here: what is sent is a list of subjects and topics with percentage scores, and nothing that identifies you. No ID, no name, no email, no phone number.
We do not sell your data. We do not share it for advertising. There is no advertising.
5. Legal basis
Under the Nigeria Data Protection Act 2023, we process your data on two bases: performance of a contract (we cannot run a study bot without recording what you answered) and consent, which you give by registering and can withdraw by asking us to delete your account.
6. If you are under 18
Many JAMB candidates are 16 or 17. If you are under 18, please check with a parent or guardian before signing up, and they are welcome to contact us on your behalf about anything in this policy. We do not knowingly collect more from a minor than from anyone else. The bot asks everyone for the same two things: subjects and one contact detail.
7. How long we keep it
- While you use the bot. Your answer history stays, because it is what makes the weak-topic tracking work.
- If you ask us to delete your account. Your record and answer history are removed.
- Payment records. Kept as long as required for accounting and tax, even after account deletion.
8. Your rights
Under the NDPA 2023 you can ask us to:
- show you what we hold about you
- correct anything that is wrong (you can change your contact detail yourself with
/contact) - delete your account and history
- stop sending you the daily challenge (
/dailyoffdoes this immediately)
Email privacy@jambbuddy.ng from the address you registered with, or message the bot. We will respond within 30 days.
9. Security
Data is held in a hosted PostgreSQL database, reached only over encrypted connections. Payment details never touch our systems. No system is perfectly secure, and we will tell affected users if that ever changes for the worse.
10. Changes
If this policy changes materially, we will say so through the bot rather than quietly updating the page. The date at the top always reflects the current version.