Privacy Policy

Overview

EXPO ("we", "us", or "our") is a study assistant application built for university students in Nigeria, initially serving PAMO University of Medical Sciences, Port Harcourt. EXPO is developed and operated as an independent product.

This Privacy Policy explains what information we collect when you use the EXPO mobile app (Android) and desktop app (Windows / macOS), how we use that information, and what rights you have over your data.

Data we collect

We collect the following categories of information:

Account information

• Email address (used to create and identify your account)
• Display name (optional, used to personalise your experience)
• University and level (e.g. PAMO, 100L) — used to serve relevant content

Study and usage data

• Flashcard and quiz activity (which cards you've reviewed, quiz scores, progress percentages)
• Course selections and content accessed
• Session timestamps (when you open and use the app)

Device information

• Device type and operating system version
• App version installed
• Crash logs and error reports (anonymous, used to fix bugs)

Information you choose to provide

• Wishlist submissions and feature requests
• Feedback submitted through the app or website

AI interaction data

• Prompts and messages you send to the AI Tutor feature (processed locally on your device using a downloaded AI model — not sent to our servers)
• AI model preferences and settings (stored locally)
• Content generated by AI features is not stored on our servers unless you explicitly save it

Uploaded educational materials

• Study materials uploaded by institutional administrators (PDFs, documents) are stored on our servers to deliver content to authorised students
• Student-uploaded content (profile photos) is stored to personalise your experience
• Uploaded files are not shared with third parties and are accessible only to authorised users of your institution

How we use your data

We use the data we collect for the following purposes:

• To provide the service: Serve you course-specific materials, flashcards, and past questions relevant to your university and level.
• To track your progress: Save your study history so you can pick up where you left off across sessions and devices.
• To power AI features: Analyse study patterns (in aggregate) to generate exam prediction confidence scores and topic prioritisation.
• To communicate with you: Send beta invites, important app updates, and (if you opt in) study reminders. We do not send marketing emails without explicit consent.
• To improve the app: Use anonymised crash reports and usage analytics to fix bugs and improve performance.
• To respond to your requests: Process account deletion requests and respond to feedback.

Data sharing

We do not sell, rent, or trade your personal information to third parties. We may share limited data only in the following circumstances:

• Service providers: Trusted third-party tools that help us operate the app (e.g. backend hosting, crash analytics). These providers are contractually bound to handle data securely and cannot use it for their own purposes.
• Legal compliance: If required by Nigerian law, court order, or lawful government request, we may disclose the minimum data legally required.
• Business transfers: In the event EXPO is acquired or merged, your data may transfer to the new entity under the same privacy terms. You will be notified in advance.

We never share your personal data with advertisers, data brokers, or other universities without your explicit consent.

Storage & security

Your data is stored on secure servers. We implement industry-standard security measures including:

• Encrypted data transmission (HTTPS/TLS)
• Encrypted storage for sensitive account data
• Restricted internal access — only authorised team members can access user data
• Regular security reviews during the beta period

While we take reasonable steps to protect your data, no system is completely immune to breaches. We will notify affected users promptly if a breach occurs that affects their personal data.

Data retention: We retain your account data for as long as your account is active. If you request account deletion, your personal data is permanently removed within 30 days. Anonymised, aggregated study analytics (with no personally identifiable information) may be retained longer for product improvement.

Your rights

You have the following rights over your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request that we permanently delete your account and personal data. You can do this via our account deletion page.
• Portability: Request your data in a portable format (CSV or JSON).
• Opt-out: Unsubscribe from non-essential communications at any time.
• Withdraw consent: Where processing is based on consent, you can withdraw it at any time without affecting prior processing.

To exercise any of these rights, contact us at diamondbelema78@gmail.com. We will respond within 30 days.

Children's privacy

EXPO is designed for university students aged 16 and above. We do not knowingly collect personal data from anyone under the age of 16. If we become aware that we have inadvertently collected data from a person under 16 without appropriate consent, we will delete that information promptly.

If you believe a minor has registered for EXPO, please contact us at diamondbelema78@gmail.com.

Third-party services

EXPO uses the following third-party services which may process limited data to deliver their functions:

• Google Play Services: Used for app distribution, in-app updates, and beta testing on Android. Subject to Google's Privacy Policy.
• Web3Forms: Used to process waitlist and wishlist form submissions on the website. Your email may be routed through their servers.
• Crash analytics provider: Anonymous crash reports to help us fix bugs. No personally identifiable information is included.

Each of these services operates under its own privacy policy. We encourage you to review them. We only use services that meet reasonable data protection standards.

Policy changes

We may update this Privacy Policy from time to time as the app evolves. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Display a notice inside the app on your next launch
• Email registered users if the changes are significant

Continued use of EXPO after changes are posted constitutes acceptance of the updated policy. If you do not agree with an update, you may delete your account at any time.

Contact us

If you have any questions about this Privacy Policy, want to exercise your data rights, or need to report a concern, please get in touch:

You can also submit an account deletion request directly through our dedicated page.