Legal
Privacy Policy
This page explains, in plain language, what CBT-Practice stores about you and why. It is a summary rather than a lawyer-reviewed document, and it describes the app as it works today.
What we collect
When you create an account we store your email address, your display name (or the name on your Google account if you sign in with Google) and a unique account ID. If you sign in with Google, we receive only the basic profile details Google shares for sign-in — never your Google password.
We also store your subscription status, the date your access expires, and any messages you send us through the contact form.
Your practice history
Your answers, paused sessions, scores and practice history are saved to your account in our database. That is what makes History and Stats the same on every device you sign in from, and what lets you resume a paused set on a different phone.
The app also keeps a copy in your browser's local storage (IndexedDB). That cache is what lets the app keep working with no network; anything you do offline is uploaded the next time you connect. Clearing your browser data removes the copy on that device, not the copy on your account.
Messages you send us
When you use the contact form we receive the name, email address and message you type, and the message is delivered to our support inbox at contact@cbtpractice.ng. We keep it only as long as we need it to answer you.
To keep the form free of spam, the server stores a one-way hash of your IP address and email address for up to 24 hours and issues a short-lived signed token to the page. The hashes cannot be turned back into your address; they exist only to block repeated automated submissions.
Account emails
We send a welcome email when you create an account, and occasional progress emails about your own practice — for example when you have used up your free questions, when you have an unfinished practice set waiting, or when you have signed up but not started yet.
Those progress emails are about your account, not advertising, and every one of them includes an unsubscribe link. We never sell or share your address with advertisers.
Payments
Card and bank payments are processed by Paystack. Paystack receives the payment details needed to complete the transaction; CBT-Practice never sees or stores your card number or CVV. We store only the payment reference, the amount and whether the payment succeeded, so we can grant and support your access.
If you pay by direct bank transfer or OPay, you send your proof of payment to our support channel and we record the confirmation against your account.
Cookies and local storage
We use browser storage to keep you signed in and to store your practice data offline. We do not run advertising or third-party tracking on this site.
Your choices
You can ask us to delete your account and the data attached to it at any time. Send the request from the email address on the account so we can verify it. Deleting an account also deletes its practice history and any paused sessions.
You can unsubscribe from progress emails from the link in any of them without losing access to your account.
Questions or requests
Reach us from the contact page and we will respond as quickly as we can.