SMASHRITE PRIVACY POLICY

Last Updated: February 13, 2026

1. INTRODUCTION

Smashrite Technologies Limited ("we," "our," or "Smashrite") is committed to protecting the privacy and security of users of our mobile examination platform across Africa. This Privacy Policy explains how we collect, use, store, and protect information when you use the Smashrite Core mobile application and related services.

Smashrite Core is a B2B2C service: we provide our platform to educational institutions ("Institutions") across Africa, who then provide examination services to their students ("Users" or "Students"). This policy covers both institutional and student data.

Geographical Coverage: This policy applies to all users of Smashrite Core services across Africa, including but not limited to institutions and students in Nigeria, Ghana, Kenya, South Africa, Uganda, Tanzania, Rwanda, Ethiopia, and other African countries where our services are available.

2. INFORMATION WE COLLECT

2.1 Student Information (Provided by Institutions)

2.2 Exam Data

2.3 Device and Security Information

2.4 Security Monitoring Data

2.5 Technical and Usage Information

2.6 Information We DO NOT Collect

3. HOW WE USE INFORMATION

3.1 Primary Purposes

3.2 Security and Fraud Prevention

3.3 Service Improvement

4. DATA STORAGE AND LOCATION

4.1 Local Storage (Institution Servers)

Smashrite Core operates on a local infrastructure model designed for African contexts. All student data, exam content, and results are stored on servers maintained by your educational institution within their premises or chosen hosting location in your country. Smashrite Technologies does not store exam content or student personal data on external cloud servers outside your institution's control.

Data Sovereignty: Your institution maintains complete control over where student data is stored. Data typically remains within your country or region, subject to your institution's infrastructure decisions and local data protection requirements.

4.2 Temporary Mobile Storage

The mobile app temporarily stores:

All temporary data is encrypted and automatically deleted after successful synchronization or exam completion.

4.3 Smashrite Technologies Data

We only store:

This limited data may be stored on cloud infrastructure outside your country solely for platform improvement purposes and contains no personally identifiable information.

5. DATA SHARING AND DISCLOSURE

5.1 With Your Educational Institution

All exam data, responses, results, and security monitoring information is shared with your educational institution. Your institution is the primary data controller for your personal and academic information.

5.2 Third-Party Service Providers

We do not share data with third-party marketing companies or advertisers. We may share technical data with:

All third-party service providers are contractually bound to protect your data and use it only for specified purposes.

5.3 Cross-Border Data Transfers

In general, your personal and exam data does not leave your country, as it is stored on your institution's local servers. However, anonymized technical data may be processed outside your country for platform improvement. When data is transferred internationally, we ensure appropriate safeguards are in place, including:

5.4 Legal Requirements

We may disclose information if required by:

5.5 Institutional Transfers

If your institution changes examination platforms, we will work with them to facilitate data transfer or deletion according to their instructions and applicable regulations in your country.

6. DATA SECURITY

6.1 Technical Security Measures

6.2 Organizational Security

6.3 Offline Security

7. YOUR RIGHTS AND CHOICES

Your data protection rights may vary depending on your country's laws. Common rights across African jurisdictions include:

7.1 Access and Correction

You have the right to:

Contact your institution's examination or IT department to exercise these rights.

7.2 Data Deletion and Portability

7.3 Opt-Out Limitations

Because Smashrite Core is an examination platform:

7.4 Withdrawal of Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time. However, this may affect your ability to take exams through the platform.

8. INSTITUTIONAL RESPONSIBILITIES

Your educational institution is responsible for:

9. CHILDREN'S PRIVACY

Smashrite Core is provided to institutions that serve students of various ages across Africa. We do not knowingly collect data from children under the minimum age required by local laws (typically 13-16 years) without institutional authorization and appropriate parental or guardian consent.

Institutions are responsible for:

10. COMPLIANCE WITH AFRICAN DATA PROTECTION LAWS

Smashrite Core is committed to compliance with data protection laws across Africa. We adhere to the requirements of various national and regional data protection frameworks, including:

10.1 Nigeria

Nigeria Data Protection Regulation (NDPR) 2019 and Nigeria Data Protection Act (NDPA) 2023:

10.2 Kenya

Kenya Data Protection Act, 2019:

10.3 South Africa

Protection of Personal Information Act (POPIA), 2013:

10.4 Ghana

Data Protection Act, 2012 (Act 843):

10.5 Other African Countries

For countries with emerging or established data protection frameworks (including Uganda, Rwanda, Tanzania, Ethiopia, and others), we:

10.6 African Union Convention

We align our practices with the African Union Convention on Cyber Security and Personal Data Protection (Malabo Convention) principles, promoting harmonized data protection across the continent.

11. INTERNATIONAL AND REGIONAL STUDENTS

11.1 Students from Other African Countries

If you are studying in a different African country than your country of origin:

11.2 Students from Outside Africa

For students from countries outside Africa studying at African institutions:

12. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically to reflect:

We will notify institutions of material changes, and institutions will notify students. The "Last Updated" date will always reflect the most recent version. Continued use of Smashrite Core after changes constitutes acceptance of the updated policy.

13. DATA RETENTION

Specific retention periods may vary based on your country's education regulations and institutional policies.

14. CONTACT INFORMATION

For privacy questions or concerns:

Smashrite Technologies Limited
Headquarters: 11A Colliery Avenue, G.R.A, Enugu, Enugu State, Nigeria
Email: [email protected]
Phone: +234 902 682 9282
Website: www.smashrite.com

For data access or correction requests:

Contact your educational institution's examination office or IT department first. They are the primary data controller for your academic information.

For regulatory complaints:

You have the right to lodge a complaint with the data protection authority in your country:

15. INSTITUTION-SPECIFIC POLICIES

Your institution may have additional privacy policies governing:

Please review your institution's privacy notice and examination policies for complete information applicable to your specific situation.

ACKNOWLEDGMENT

By using Smashrite, you acknowledge that:

For questions specific to your examination, personal data, or country-specific regulations, contact your institution's examination office.