What Efiko keeps

Efiko is exam practice for students sitting JAMB UTME and WAEC WASSCE. Most of them are secondary school students, and many are under eighteen. This page is written so it can be checked against the app, not so it can be waved at a form.

Last updated 6 September 2026.

The short version. Efiko needs an account, so that your practice survives a lost or replaced phone. That account is an email address and nothing else — no password, no phone number required, and we never ask which school you attend. There are no adverts, no trackers, and nothing is sold or shared for marketing. You can delete everything from the Profile tab at any time.

Why there is an account at all

Efiko asks for an email address before you start. The reason is narrow: students change phones, lose phones, and share them, and months of practice stored only on one handset is months of practice one drop away from gone. The account is what carries your work to the next device.

It is an email address and nothing more. We send a six digit code; there is no password to forget on exam week. Once you are signed in, the server holds:

your email address, which is the account
your practice history — which question, whether you got it right, and when
the settings that let a new phone carry on: nickname, avatar, subjects, exam, target score, graduation year and phone number if you entered one

Efiko never asks which school you attend. There is no field for it anywhere in the app, on the device or on the server, because a name plus a school is the pair that identifies a child.

Photographed questions

The camera is used for one thing: photographing a question from a textbook or a board so it can be practised or set as classwork. If a teacher shares a photographed question as an assignment, that image is uploaded so the students in that class can see it. Photos are not uploaded otherwise. You can also pick a picture you already have instead of taking a new one, and choosing that opens your phone's picture chooser; Efiko sees the one picture you pick, and never the rest of your library.

Efiko refuses to use a photograph of a person as a profile picture. Students choose a drawn avatar instead.

How long things are kept

Your account and practice history: until you delete it, or until nobody has opened the account for eighteen months.
Sign-in records (that a code was sent, that a device signed in): 90 days.
Sign-in codes: a code works for ten minutes. Only a hash of it is ever stored, never the code itself, and that hash is deleted an hour after the code stops working — by a cleanup that runs whenever anyone asks for a code, and overnight at the latest.
Reports about a question: 180 days. Nothing in a report says who wrote it, which is deliberate — and it means deleting your account cannot reach one, because there is nothing to match it to you. The clock is what clears it, so please do not put anything about yourself in the box.

If nobody opens an account for eighteen months it is deleted automatically, history included. We email you a week before that happens, and signing in starts the clock again. This is done by a job that runs every day, not by a promise on a page.

Deleting everything

Profile → Account → Delete My Account. It removes your account, your practice history and your details from the server. Two things it does not reach: the sign-in log, which holds a line for each code sent, each sign-in and each sync with your email address on it and is erased after ninety days; and work you have sent to a teacher, which is filed under their assignment rather than your account and goes when they delete it. The practice on the device you are holding stays, so leaving Efiko does not erase your own work.

Adverts, analytics and other companies

There are no adverts in Efiko and no advertising identifier is collected: there is no advertising or analytics library in the app at all, so nothing is present to ask for one. No analytics or usage tracking is running: the code for it exists but is switched off in every build that ships.

Two things leave the device with nothing attached to them. The first is a crash report: when something goes wrong, Efiko sends its own server where in the app it happened, the error message, and which version you are running. No name, no email and no account is attached, and it is sent whether or not you are signed in — a crash on the sign-in screen is exactly the kind we need to see. These are kept for 90 days and used only to fix the app.

The second is a report about a question. When you tap the flag on a question and say what is wrong, we get the question, the reason you picked and anything you typed — and nothing else. No name, no email, no account, not even which phone it came from. It is saved on your phone first and sent the next time you are online, so it costs you nothing to write one with no data.

Your data is never sold, and never shared for anybody's marketing. Efiko's own server, on Google Cloud, is the only place it goes. Email is delivered through Google's mail servers, which is how the six digit code reaches you.

Students under eighteen

Efiko is built for candidates sitting a school leaving or university entrance exam, so many users are minors. That is why it collects as little as it does, why it never asks which school you attend, why photographs of children are refused as avatars, and why an unused account is deleted rather than kept.

If you are a parent or guardian and want an account removed, write to us and we will do it.

Contact

Write to ask@efiko.me — tell us the email address on the account and what you need. It is a real inbox that a person reads, and you can write from any address, which matters if the one on your account is not one you can open.

Changes

If this changes in a way that affects what is collected or how long it is kept, the date at the top changes and the app's own data notice changes with it. The two are meant to say the same thing.