Privacy Policy

Gidigigs Limited  |  Last updated: 12 June 2026  |  Effective: 12 June 2026

Gidigigs Limited ("Gidigigs", "we", "us", or "our") operates the Gidigigs mobile and web application (the "Service"), a Nigerian on-demand local-task marketplace that connects customers with verified local helpers. This Privacy Policy explains what personal information we collect, how we use it, and your rights regarding that information.

1. Information We Collect

We collect information you provide directly and information generated when you use the Service:

• Account information: name, email address, phone number, and password (stored as a salted hash).
• Profile information (helpers): professional bio, skills, service city, NIN or BVN masked identifier for identity verification.
• Transaction data: booking details, task descriptions, scheduled dates and times, payment references, and wallet balances.
• Communications: in-app messages between customers and helpers.
• Device data: device push-notification token (for booking and payment alerts), approximate location (when you grant permission, used to show nearby helpers).
• Usage data: pages visited, features used, crash reports, and performance metrics collected via Sentry and PostHog analytics.
• Photos: before/after job photos uploaded by helpers to confirm task completion.

2. How We Use Your Information

• Create and manage your account and authenticate your sessions.
• Match customers with helpers and facilitate bookings.
• Process payments via Paystack and manage escrow for completed tasks.
• Send booking confirmations, payment receipts, and service updates by push notification, SMS, or email.
• Verify helper identities to maintain a trusted marketplace.
• Improve the Service through aggregated, anonymised analytics and crash reports.
• Comply with Nigerian law (FCCPA, NDPR) and resolve disputes.

3. Sharing of Information

We do not sell your personal data. We share information only as necessary:

• Between users: a customer's first name, booking details, and address are shared with the helper assigned to their task, and vice versa.
• Payment processor: Paystack receives payment card or bank details required to process transactions.
• Identity verification: for helpers who choose KYC verification, masked identity data is shared with our KYC provider solely for verification purposes.
• SMS provider: Twilio processes phone numbers to deliver OTP verification codes and Safety Shield alerts.
• Analytics & crash reporting: anonymised usage data is sent to Sentry (crash reports) and PostHog (product analytics).
• Legal requirements: we may disclose information if required by Nigerian law or a valid court order.

4. Data Storage and Security

Data is stored in Supabase (PostgreSQL) hosted on servers within the European Economic Area. Passwords are never stored in plain text — we use scrypt with a random salt. All data is transmitted over HTTPS/TLS. We use rate limiting, CSRF protection, and session expiry to guard against unauthorised access.

5. Data Retention

We retain your account and transaction data for as long as your account is active and for up to 7 years thereafter to comply with Nigerian financial regulations. You may request earlier deletion (see Section 7).

6. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe a minor has created an account, please contact us immediately.

7. Your Rights (NDPR)

Under the Nigeria Data Protection Regulation (NDPR) you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data ("right to be forgotten").
• Withdraw consent for optional processing.
• Lodge a complaint with the National Information Technology Development Agency (NITDA).

To exercise these rights, contact us at gidigigslimited@gmail.com.

8. Cookies and Local Storage

The Service uses a session cookie (HttpOnly, Secure) to maintain your login and a CSRF token cookie to protect against cross-site request forgery. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users by email or in-app notification at least 14 days before material changes take effect.

10. Contact Us

Gidigigs Limited
Email: gidigigslimited@gmail.com
Support: gidigigslimited@gmail.com
Nigeria