Privacy Policy & Data Safety
ExamHub (Application ID: com.softcare.examhub) is committed to safeguarding student, faculty, and institutional data with end-to-end encryption, transparent data safety, and verifiable academic integrity.
Last Updated & Effective: September 20, 2026
Summary of Key Privacy Principles
Zero Commercial Sale
We do not sell, rent, or monetize your personal information or assessment results to third parties or advertisers.
Encrypted Offline Storage
Assessment papers and responses are saved in an encrypted SQLite database on your mobile device during offline testing.
Full Deletion Rights
You can delete your account and personal data anytime in-app or via our verified web request portal.
1Information We Collect
When you use ExamHub on the web or via the Android mobile application (com.softcare.examhub), we collect only the information necessary to administer computer-based tests (CBT), grade submissions, and verify official academic records:
- Account Credentials & Identity: Full name, email address, school/institution affiliation, role (Student, Candidate, Teacher, Administrator), and Candidate Admission IDs with 4-digit PINs. Passwords and PINs are cryptographically hashed using PBKDF2 / bcrypt.
- Assessment Responses & Submissions: Selected multiple-choice answers, text theory inputs, programming code sandbox solutions, and completion times.
- Anti-Cheat & Proctoring Telemetry: To uphold examination fairness, our CBT environment monitors and logs application focus changes, screen backgrounding, and tab-switch counts during active examinations. We also overlay a visible diagnostic watermark bearing your candidate identifier to prevent unauthorized photo distribution.
- Offline Device Data: Local encrypted SQLite files storing downloaded past examination papers and pending sync queue items.
2How We Use Your Information
We process your data solely for educational and institutional evaluation purposes:
- Facilitating scheduled examinations and self-paced past exam practice.
- Compiling automated and examiner-graded scorecards and rankings.
- Generating verifiable digital certificates secured by HMAC SHA-256 cryptographic signatures.
- Enabling automatic synchronization of offline test submissions when internet connectivity is re-established.
- Investigating question disputes and reporting institutional malpractice.
3Device Permissions & Network Usage
The Android mobile app (com.softcare.examhub) requests only minimal, non-sensitive runtime capabilities:
- INTERNET: Required to communicate with the ExamHub API server for authentication, question retrieval, and result synchronization.
- ACCESS_NETWORK_STATE: Used by our offline synchronization engine to detect connectivity restoration and sync pending exam submissions automatically.
We do NOT request access to contacts, precise GPS location, SMS, camera, microphone, or external shared storage.
Account & Personal Data Deletion (Google Play Compliance)
In strict accordance with Google Play User Data policies and global privacy regulations (GDPR, NDPR, CCPA), ExamHub provides full self-service account and data deletion options.
Option A: In-App Deletion
Open the mobile app, tap your user profile avatar in the top AppBar, select "Delete Account & Data", and confirm your request. All local caches and server records will be purged immediately.
Option B: Web Request Portal
If you have uninstalled the app or lost your device, you can request account deletion directly on the web at examhub.ng/account/delete.
What Data is Deleted vs. Anonymized:
- Permanently Deleted Immediately: Your full name, email address, password hashes, candidate PINs, active sessions, practice attempts, and local device storage.
- Anonymized Academic Record Retention: For official accredited examinations, institutions require immutable integrity under education regulatory laws. When an account is deleted, official grade entries are irreversibly stripped of all personal identity and decoupled from the user profile, leaving only a pseudonymous HMAC verification seal on the institution's ledger.
5Security & Encryption Standards
ExamHub enforces modern cryptographic controls across the entire infrastructure:
- All web and API traffic is encrypted via HTTPS with TLS 1.3.
- Authentication tokens are stored inside platform hardware-backed secure storage (iOS Keychain and Android EncryptedSharedPreferences via KeyStore).
- Offline SQLite databases use file-level sandboxing isolated to the application container.
- Certificate outputs are validated against HMAC SHA-256 digital seals to prevent grade tampering.
6Contact & Data Protection Inquiries
If you have any questions regarding your data privacy, need an export of your personal information, or wish to report a security finding, contact our Data Protection Officer:
ExamHub Data Protection Team
Email: raphaelraymondproduct@gmail.com
Application Identifier: com.softcare.examhub
Physical / Administrative Address: SoftCare Educational Technologies, Abuja, Nigeria