Privacy policy
Effective 13 November 2026. This page explains what TechGym collects, why, who helps us run it, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and the NDPC's General Application and Implementation Directive 2025.
- Who we are
- What we collect
- Why
- What's public
- Who helps us
- Data outside Nigeria
- How long
- Your rights
- Browser storage
- Security
- Age
- Contact
Who we are
TechGym (techgym.quest) is a practice app where people learn technical skills through games. It is run by Moses Afolabi, Lagos, Nigeria, who is the data controller for the personal data described here.
Questions or requests about your data: themosesafolabi@gmail.com.
What we collect
| Data | When |
|---|---|
| Name, email address | When you sign in |
| Track (for example Product Manager) and experience level | When you sign in, if you choose them |
| Scores, which challenges you solved, and when you last played | As you play |
| Your reminder email choice | When you sign in or change it under "Your data" |
| A 6-digit sign-in code, stored only in scrambled (hashed) form | When you ask for a code |
| Feedback you write, the topics and mood you pick, which game you were on, your browser type, and your name and email if you're signed in | Only when you send feedback |
| IP address | Every visit, handled by our hosting provider to deliver the site. We also hold it briefly in memory to stop feedback spam. We don't save it in our database. |
We don't collect BVN, NIN, payment details, location, contacts or any sensitive personal data. We don't use advertising or analytics trackers.
Why we use it, and our lawful basis
| Purpose | Lawful basis |
|---|---|
| Running the games, saving your progress, syncing it across your devices and showing the leaderboard | Contract: providing the service you signed up for |
| Signing you in with an emailed code and keeping your name tied to your email | Contract, and legitimate interests in keeping accounts secure |
| Reminder emails when you haven't played for a few days | Consent: only if you tick the box. You can turn them off in "Your data" or with the link in any reminder. |
| Reading and replying to feedback | Consent: you choose to send it |
| Understanding which tracks and experience levels use TechGym, to improve the games | Legitimate interests. You can leave these fields out of your profile. |
| Preventing abuse and spam | Legitimate interests |
We don't sell your data, and we don't use it for advertising. We make no automated decisions about you that have legal or similar effects. Scores are calculated automatically, but they only rank the game.
What other people can see
Who helps us run TechGym
These providers process data for us, only to run the service:
| Provider | What they do | Where |
|---|---|---|
| Vercel Inc. | Hosts the website and runs the server code | United States, with a global delivery network |
| Supabase Inc. | Database for accounts, scores and sign-in codes | European Union region |
| Resend Inc. | Sends sign-in codes, reminders and feedback emails | Ireland (EU) sending region |
We may also disclose data if the law requires it.
Data stored outside Nigeria
Our providers are outside Nigeria, so your data is transferred to and stored in the United States and the European Union. We rely on each provider's data processing terms to protect it. We send only what each provider needs to do its job.
How long we keep it
- Account and scores: until you delete your account, or ask us to.
- Sign-in codes: deleted as soon as you use them, and they stop working after 10 minutes.
- Feedback: kept in our inbox for as long as it helps us improve TechGym. Ask us and we'll delete it.
- Hosting logs: kept by our hosting provider for a limited time, under its own retention rules.
- If TechGym closes, we'll delete the database.
Your rights
Under the NDPA, you have the right to:
- be told how your data is used (this page)
- get a copy of your data in a common electronic format, and move it elsewhere
- correct data that's wrong
- have your data deleted
- restrict or object to how we use it, including stopping reminder emails
- withdraw consent at any time. This doesn't affect what we did before you withdrew it.
Do it yourself: on the TechGym start screen, open Your data to download your data, turn reminders on or off, or delete your account. Deleting removes your name, email, track and every score from our database straight away.
Or email us at themosesafolabi@gmail.com. We'll reply as soon as we can, within the time the law allows.
Complaints: you can complain to the Nigeria Data Protection Commission (NDPC) at any time. You don't need to contact us first.
Cookies and browser storage
TechGym doesn't use tracking or advertising cookies. It keeps a few items in your browser's local storage to make the app work: your progress, your sign-in, the game and level you last chose, and whether you've seen the guide. These are needed to run the service, so we don't ask for cookie consent. To remove them, clear this site's data in your browser settings.
How we protect your data
- Every connection uses HTTPS.
- The database is locked to the public. Only our server code can read or write it, using a secret key that never reaches your browser.
- Sign-in codes are hashed, expire after 10 minutes, and lock after 5 wrong tries.
- If a breach puts your data at risk, we'll tell the NDPC within 72 hours and tell you without undue delay.
Age
TechGym is for people aged 18 and over. If you're under 18, please don't sign in. If we learn that we hold data about someone under 18, we'll delete it.
Changes and contact
If we change this policy, we'll update the date at the top. If a change is significant, we'll tell signed-in players by email or in the app.
Moses Afolabi, Lagos, Nigeria · themosesafolabi@gmail.com