Privacy Policy

1. Who We Are

UleBot ("we", "our", "us") is an educational technology service that provides AI-powered examination preparation assistance through the WhatsApp messaging platform. Our service is designed to help students across Africa — principally in Nigeria, Ghana, and Kenya — prepare for national and institution-level examinations including JAMB UTME, WAEC WASSCE, NECO, KCSE, and many others.

This Privacy Policy explains how we collect, use, store, and protect information about you when you use the UleBot service ("the Service"). By using UleBot, you acknowledge that you have read and understood this Policy.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with UleBot via WhatsApp, we collect:

• Your WhatsApp phone number — used as your unique identifier across the Service
• Your display name as set in your WhatsApp profile
• Your exam preferences — the exam body, subjects, and education type you select during onboarding
• All messages you send to UleBot — including questions, answers, commands, and any text or audio content you transmit
• Referral codes — if you use a referral link or enter a referral code

2.2 Information Generated Automatically

As you use the Service, we automatically record:

• Usage data — number of questions answered, explanations requested, handouts generated, mock exams taken, and your scores
• Study activity timestamps — when you study, enabling streak tracking and weekly reports
• AI interaction logs — the questions you ask and the AI responses generated, for quality assurance and abuse prevention
• Points and gamification data — your accumulated points, streaks, and leaderboard position

2.3 Payment Information

When you make a payment, transaction data is processed by Paystack (our payment processor). We store only transaction identifiers, plan types, amounts, and subscription status. We do not store your card numbers, bank account details, or any full payment credentials. See Section 7 for more detail.

2.4 Information We Do Not Collect

We do not collect your location data, access your phone contacts, read any WhatsApp messages outside of your direct conversation with UleBot, or access any data on your device beyond what WhatsApp transmits to us through the Business API.

3. How We Use Your Information

We use the information we collect solely to operate and improve the Service. Specifically, we use your information to:

• Deliver AI-generated exam questions, explanations, and handouts personalised to your exam body and education level
• Track your usage against your subscription limits (questions, explanations, handouts per billing period)
• Process your payments and manage your subscription status
• Send you weekly performance reports, exam countdown reminders, and daily challenge messages
• Award and track points, streaks, and leaderboard rankings
• Detect and prevent abuse, fraud, and misuse of the Service
• Diagnose technical issues and improve AI response quality
• Comply with legal obligations
• Contact you if there is an issue with your account or subscription

We do not use your data for advertising, sell it to third parties, or use it to train third-party AI models without your explicit consent.

4. How We Store and Protect Your Data

Your data is stored on secured servers located in a data centre with restricted physical and electronic access. We implement the following security measures:

• All data in transit is encrypted using TLS 1.2 or higher
• Database access is restricted to authorised personnel only
• Phone numbers displayed in our internal administration panel are masked by default
• API keys and credentials are stored in environment variables, never in source code
• We conduct regular security reviews of our infrastructure

While we take reasonable precautions to protect your data, no system is completely secure. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

5. Sharing Your Information

We share your personal information only in the following limited circumstances:

• Service providers: We share data with Paystack (payments), Anthropic (AI — for generating explanations and handouts), OpenAI (AI — for question generation and marking), and Meta/WhatsApp (message delivery). Each provider processes data only as necessary to perform their service and is bound by their own privacy policies.
• Affiliates: If you were referred by an affiliate, we share aggregate information (e.g., that a new subscriber joined via their referral code) but not your personal details.
• Legal compliance: We may disclose your information if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of UleBot, our users, or the public.
• Business transfers: If UleBot is acquired or merged with another organisation, your information may be transferred as part of that transaction. We will notify you via WhatsApp if this occurs.

We do not sell, rent, or trade your personal information to any third party for marketing or commercial purposes.

6. WhatsApp and Meta

UleBot uses the WhatsApp Business API, a public platform provided by Meta Platforms Inc., to deliver messages to your WhatsApp account. When you interact with UleBot on WhatsApp:

• Your messages are transmitted through WhatsApp's infrastructure and are subject to WhatsApp's Privacy Policy
• We receive message content through the WhatsApp Business API webhook. WhatsApp/Meta may also retain message metadata in accordance with their policies
• WhatsApp end-to-end encryption applies to messages between you and WhatsApp servers, but the Business API allows us to read messages you send to our registered business account — this is necessary for UleBot to function
• By messaging UleBot on WhatsApp, you consent to this message transmission and to WhatsApp's terms of service

For questions about how Meta or WhatsApp handles your data, please refer to their respective privacy policies at whatsapp.com/legal/privacy-policy.

7. Payments and Financial Data

All payment processing for UleBot subscriptions and top-up packages is handled by Paystack, a PCI DSS-compliant payment processor. When you make a payment:

• Your payment details (card number, bank account, USSD PIN) are entered directly into Paystack's secure interface and are never transmitted to or stored by UleBot
• We receive only a transaction reference, amount, status, and your phone number from Paystack after a successful payment
• Paystack's privacy policy governs the handling of your payment data. You can review it at paystack.com/privacy

8. Children's Privacy

UleBot serves students of all ages, including secondary school students who may be under 18 years old. We are committed to protecting the privacy of younger users.

We do not knowingly collect personal data beyond what is necessary to deliver the educational service (phone number, name, exam preferences, and study activity). We do not use children's data for advertising or profiling beyond what is needed for the educational service.

If you are under 13 years of age, you should obtain parental or guardian consent before using UleBot. Parents or guardians who believe their child is using UleBot and wish to review or delete their data may contact us at the address in Section 13.

9. Data Retention

We retain your data for as long as your account is active or as necessary to provide the Service. Specifically:

• Active accounts: Data is retained for the duration of your use of the Service
• Inactive accounts: Accounts with no activity for 18 months may be deactivated. We will send a WhatsApp notification before deactivation
• Conversation logs: Retained for up to 12 months for service quality and abuse prevention purposes, then deleted
• Payment records: Retained for 7 years as required by Nigerian financial regulations
• Upon deletion request: We will delete your personal data within 30 days of receiving a verified request (see Section 10)

10. Your Rights

You have the following rights regarding your personal data:

• Right to access: You may request a copy of the personal data we hold about you
• Right to correction: You may request that we correct inaccurate data (e.g., your name or exam preferences)
• Right to deletion: You may request that we delete your account and personal data. Note that some data may be retained for legal compliance purposes (e.g., payment records)
• Right to restrict processing: You may request that we limit how we use your data in certain circumstances
• Right to data portability: You may request your data in a structured, machine-readable format
• Right to object: You may object to us sending you promotional or non-essential messages

To exercise any of these rights, send a message to UleBot on WhatsApp with the keyword "DATA REQUEST" followed by your request, or contact us directly as described in Section 13. We will respond within 30 days.

11. Cookies and Tracking

The UleBot service itself (delivered via WhatsApp) does not use cookies. Our landing website (this page) may use minimal cookies for basic functionality (e.g., remembering your language preference). We do not use third-party tracking cookies, advertising pixels, or analytics services that track you across other websites.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will:

• Update the "Last updated" date at the top of this page
• Send a notification via WhatsApp to all active users at least 14 days before the changes take effect
• For significant changes, request your re-consent before continuing to use the Service

Continued use of UleBot after the effective date of any change constitutes your acceptance of the updated Policy.

13. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us:

• WhatsApp: Send "PRIVACY" to UleBot or message our support number directly
• Email: privacy@ulebot.com (if configured)

We are committed to resolving complaints about your privacy and our collection or use of your personal information. We will respond to all enquiries within 30 days.