TYP - Testing Your Preparedness

Privacy Policy

1. Scope

This Policy describes how TYP (“Testing Your Preparedness”) collects, uses, and protects personal data across both parts of the platform — the exam-prep track (schools, independent learners, content admins, super admin) and the course marketplace (tutors and purchasing learners).

TYP is a Ghana-focused product, and we intend to handle personal data consistently with Ghana's Data Protection Act, 2012 (Act 843) and the Data Protection Commission's guidance, in addition to good general data-protection practice.

2. Data we collect

What we collect depends on your role:

  • All accounts: name, email address, password (stored as a salted hash, never in plain text), role, and account activity/audit history.
  • Schools: school name, GES registration number, region/district/town/address, contact details, ownership type, and education level.
  • Learners: class/form, and — for independent learners — date of birth, gender, and address where provided. Exam attempts, answers, scores, and progress history are recorded against the learner's account.
  • Guardians of independent learners: guardian name, phone number, email, and relationship to the learner, collected because independent-learner signup requires a guardian contact and a real emailed confirmation from that guardian.
  • Tutors: bio, headline, and areas of expertise displayed on course listings, plus payout details (a Paystack subaccount reference — TYP does not itself store bank account numbers, Paystack does).
  • Payments: transaction amount, status, and a Paystack reference for every subscription or course payment, plus a masked card summary or mobile-money provider label when applicable. Full card numbers are never collected or stored by TYP — checkout happens on Paystack's hosted page.
  • Usage data: login activity, and — during timed assessments — basic anti-cheat signals such as tab-switch counts.

3. Children's data

Many BECE-track learners are minors. For independent-learner signups, we require a guardian's contact information and only treat the account as guardian-approved once that guardian confirms via a real emailed link (not a self-attestation checkbox). School-provisioned learner accounts are created by the school, which is responsible for its own consent arrangements with parents/guardians under Ghanaian law.

4. How we use data

  • To provide the service: authenticate accounts, run and grade assessments, track progress and leaderboards, deliver and track course purchases.
  • To process payments and payouts, and to detect and prevent fraud.
  • To send account-related email: password resets, invitations, temporary passwords, assignment notifications, and (for super admins) scheduled platform reports.
  • To maintain audit logs of moderation and administrative actions for accountability.
  • To monitor for and diagnose errors, and to enforce basic rate limits against abuse of public endpoints (login, signup, contact forms).

5. Who we share data with

We share data with the following service providers, each acting on our behalf:

  • Paystack — payment processing for subscriptions, course purchases, and tutor payouts (Split Payments).
  • Resend — transactional email delivery (password resets, invites, notifications, reports).
  • Upstash — rate-limiting infrastructure for public endpoints (stores request counters, not account content).
  • Sentry — error monitoring, to help us diagnose bugs and outages.
  • Neon and Vercel — our database and application hosting providers.

We do not sell personal data. Some of these providers may process data on infrastructure located outside Ghana; we select providers that offer comparable data-protection commitments.

6. Data retention

We retain account and academic-history data for as long as the account is active, and for a reasonable period afterward to satisfy record-keeping, dispute, and legal obligations. Payment records are retained as required for financial and tax record-keeping.

7. Security

Passwords are stored as salted hashes, never in plain text. Card and full payment details never touch our servers — they're handled entirely by Paystack's hosted checkout. Access to administrative functions is role-scoped and logged.

8. Your rights

Subject to Act 843, you may request access to, correction of, or deletion of your personal data, and may ask us about how your data has been processed. For a learner under 18, a parent or guardian may exercise these rights on the learner's behalf. To make a request, contact us using the details below.

9. Cookies

See our Cookie Policy for details on the cookies TYP uses.

10. Changes to this Policy

We may update this Policy as the product changes. Material changes will be reflected on this page.

11. Contact

Questions or requests about your data can be sent to support@typ.edu.gh or via our contact page.