MySabiApp Privacy Policy

MySabiApp ("we," "us," "our," or "the Company") is operated by MySabiApp in Lagos, Nigeria. The app operates as a two-sided marketplace and local services platform, connecting service providers and customers across Lagos, Nigeria.

The app facilitates the discovery and booking of local services across multiple categories through discovery, in-app messaging, trust and verification features, reviews, photo proof, dispute resolution, and a multi-rail escrow system supporting bank transfers, USSD, cards, and mobile money.

2.1 Account Data. When you create a MySabiApp account, we collect your full name, email address, phone number, and profile photograph.

2.2 Identity Verification Data. To establish trust and comply with regulatory requirements, we collect identity verification data from service providers and may collect it from users. This may include government-issued identification information, National Identification Number (NIN), Bank Verification Number (BVN), driver's license information, selfie or facial photograph for liveness verification, and skill proof documents such as certifications, licenses, or credentials. Sensitive identity information may be processed through a verification provider.

2.3 Location Data. To enable local service discovery and provider matching, we collect GPS or geolocation data with your explicit permission through device permissions. We may also collect stored address information for service delivery.

2.4 Transaction Data. To process payments and manage escrow, we collect booking and service request details, payment method information such as payment tokens or bank account data, escrow transaction records, milestone tracking, receipts, invoices, dispute information, and refund information.

2.5 Communication Data. Our in-app messaging system collects chat messages, conversation history, quotation details, specifications, photos and documentation shared during service delivery, appointment scheduling data, and reminders.

2.6 Device Data. To provide, optimize, and secure the app, we collect device type and model, operating system version, IP address, app version and build number, crash logs, diagnostic data, and push notification tokens.

2.7 Usage Data. To improve your experience and analyze app performance, we collect search history, browsing patterns, feature usage, interaction patterns, session duration, session frequency, clicks, taps, and navigation data.

2.8 Camera, Gallery, and Contact List Access. The app may request access to your camera, photo gallery, and contacts for specific purposes, subject to your explicit permission. Camera access is used to capture profile photos, verification selfies, and photo proof of service completion. Photos or gallery access is used to upload verification documents, service photos, and dispute evidence. Contacts access is used only for optional referral features and requires separate consent.

3.1 Camera Permission. Camera permission is used to capture your profile photo, verification selfie for liveness checks, and photos as proof of service completion or dispute evidence.

3.2 Location Permission. Location permission is used to enable local service discovery, match you with nearby service providers or customers, and calculate proximity for accurate service delivery.

3.3 Storage and Photos Permission. Storage or photos permission is used to upload documents, verification credentials, service photos, and evidence materials within the app.

3.4 Notification Permission. Notification permission is used to send booking updates, payment confirmations, new messages, service reminders, and important platform announcements.

3.5 Contacts Permission. Contacts permission is optional and used only for referral features. This permission is never accessed without your explicit consent.

4.1 Service Delivery and Fulfillment. We use your data to enable core MySabiApp functionality, including matching service providers with customers, facilitating bookings, processing payments through escrow, and coordinating service delivery.

4.2 Verification and Trust. Identity verification data is used to verify the legitimacy of service providers and customers, establish trust within the community, prevent fraud, and comply with applicable regulations in Nigeria.

4.3 Payment Processing and Escrow Management. Transaction data is processed to execute payments, manage escrow releases, record financial transactions, process refunds, and maintain audit trails for dispute resolution.

4.4 Dispute Resolution and Customer Support. We use communication data, photos, and transaction records to resolve disputes, mediate conflicts, provide customer support, and enforce our community guidelines.

4.5 Push Notifications. We send push notifications for booking confirmations, payment updates, new messages, service reminders, and important platform announcements. You can manage notification preferences in your app settings.

4.6 Analytics and App Improvement. Usage data and device information are analyzed to understand how users interact with the app, identify improvement opportunities, optimize features, and enhance the overall user experience.

4.7 Fraud Detection and Security. Device data, transaction patterns, and account behavior are monitored to detect fraudulent activity, prevent unauthorized access, protect against abuse, and maintain platform security.

The MySabiApp mobile application integrates with third-party service providers who may access certain data to deliver their services.

5.1 Analytics Services. We use analytics platforms to track usage patterns, measure app performance, and understand user behavior. These services may collect device identifiers, usage data, and crash information.

5.2 Payment Processors. Payment processing partners handle transaction data securely. We do not store full payment card details. Payment information is tokenized and processed by Payment Service Providers in compliance with applicable payment security standards.

5.3 Crash Reporting and Diagnostics. Third-party crash reporting services may receive device data and app diagnostics to help us identify and fix technical issues.

5.4 Push Notification Services. Push notification services receive device tokens to deliver messages. These services operate under data handling agreements with MySabiApp.

All third-party service providers are required to use data only for the purpose of delivering their services and to comply with applicable data protection regulations.

6.1 Encryption. Data transmitted between your mobile device and MySabiApp servers is encrypted using TLS/SSL protocols. Sensitive data is encrypted at rest using appropriate encryption controls.

6.2 Secure Infrastructure. User data is stored on secure cloud infrastructure with restricted access controls, multi-factor authentication, and security monitoring.

6.3 Payment Data Security. Payment card information is not stored directly on MySabiApp servers. We use tokenization through Payment Service Providers so sensitive card data is not exposed to our systems.

6.4 Data Access Controls. Access to personal data is restricted to authorized MySabiApp employees, contractors, and service providers who require it to perform their duties. Personnel with access to personal data are subject to confidentiality obligations.

6.5 Limitations. While we implement security measures designed to protect your data, no system is completely secure. We cannot guarantee absolute security. In the event of a data breach, we will notify affected users as required by law.

We retain personal data only for as long as necessary to provide services, fulfill legal obligations, and resolve disputes.

Account data is retained until account deletion plus 30 days. Identity verification data is retained for the account duration plus 7 years. Real-time GPS location data is not stored, but saved addresses and booking-related location details may be retained as part of account, booking, or transaction records. Transaction data is retained for 7 years for legal and regulatory purposes. Communication data is retained for 2 years or as otherwise required for dispute resolution, support, or legal obligations. Device data is generally retained for 90 days. Usage data is generally retained for 12 months.

After the retention period ends, data is securely deleted or anonymized unless we are required to retain it for legal, regulatory, contractual, fraud prevention, or dispute resolution purposes. You can request data deletion at any time by contacting us, subject to those obligations.

8.1 Device Permissions. You can manage app permissions such as camera, location, contacts, and notifications directly through your device settings. Disabling permissions may limit certain app features.

8.2 Account Data. You can update your account information, profile photo, and contact details within the app settings.

8.3 Communication Preferences. You can manage notification settings and marketing communication preferences within the app. You can opt out of non-essential notifications while maintaining booking confirmations and payment alerts.

8.4 Data Deletion. You may request deletion of your account and associated personal data. Upon deletion, your data will be removed within 30 days, except where we are required to retain it for legal, regulatory, contractual, fraud prevention, or dispute resolution purposes.

8.5 Data Portability. You have the right to request a copy of your personal data in a structured, commonly used format by contacting legal@mysabiapp.com.

8.6 Opt-Out of Marketing. You can unsubscribe from marketing emails and promotional communications by clicking the unsubscribe link in any marketing message or by adjusting your preferences in the app.

The MySabiApp mobile application is not intended for and does not knowingly collect data from individuals under 18 years of age. By using MySabiApp, you represent that you are at least 18 years old.

If we become aware that we have collected data from a user under 18, we will delete such data and take steps to remove the account. If you believe a minor has created an account or provided data to MySabiApp, please contact us immediately at legal@mysabiapp.com.

10.1 Apple App Store Compliance. This Privacy Policy is intended to support Apple App Store privacy requirements, including the App Tracking Transparency framework. When the app requests permission to track user activity across third-party apps and websites, we disclose the purpose clearly and request explicit opt-in consent.

We do not use tracking technologies for advertising or behavioral profiling without your explicit opt-in. Any tracking identifier, such as IDFA on iOS, is requested only with your explicit consent. You can revoke tracking consent at any time through iOS privacy settings.

10.2 Google Play Store Compliance. MySabiApp's data collection practices are intended to align with Google Play Data Safety requirements, including disclosure of what data is collected, how data is used, whether data is encrypted in transit and at rest, and what privacy controls are available to users.

10.3 Platform-Specific Data Handling. Apple iOS and Google Android handle permissions and data access differently. We comply with the security standards and privacy requirements of both platforms and respect the privacy controls built into each operating system.

While MySabiApp is based in Lagos, Nigeria, and data is primarily stored in Nigeria, some data may be transferred to international cloud service providers or technology service providers for redundancy, backup, security, analytics, diagnostics, verification, payment processing, and service delivery purposes.

Any international data transfer is protected by data transfer agreements and safeguards designed to ensure data protection standards comparable to applicable Nigerian data protection laws.

MySabiApp complies with applicable data protection and privacy regulations, including the Nigeria Data Protection Regulation (NDPR), the Nigeria Data Protection Act (NDPA) 2023, Apple App Store privacy guidelines and App Tracking Transparency requirements, and Google Play Store data safety requirements and policies.

Our practices are designed to respect user privacy rights, including the right to access, correct, delete, and port personal data.

MySabiApp may update this Privacy Policy from time to time to reflect changes in our practices, technology, regulations, or other factors. We will notify you of material changes by posting the updated policy in the app and on our website, updating the effective date at the top of this policy, and sending an in-app notification or email notification of significant changes where appropriate.

Your continued use of the MySabiApp application following such notification constitutes your acceptance of the updated Privacy Policy.