Note: This Privacy Policy is currently in draft format and subject to final legal review for strict compliance with the Nigeria Data Protection Regulation (NDPR).
At CHIMFY, we take your privacy seriously. This Privacy Policy outlines how we collect, use, store, and protect your personal data in accordance with the Nigeria Data Protection Regulation (NDPR) and other applicable laws.
1. Information We Collect
- Profile Information: When you sign up, we collect your name, email address (via Google OAuth), chosen username, and profile picture.
- Academic Data: To verify your student status and place you in the correct campus community, we collect your institution, department, and academic status.
- User Content: We store posts, comments, messages, marketplace listings, and uploaded media (images, videos) that you share on the Platform.
- Usage Data: We automatically collect basic log data, device information, and interaction metrics to improve the app experience.
2. Lawful Basis and How We Use Your Data
We process your data based on your explicit consent and the necessity to provide our services. We use your data to:
- Create and manage your CHIMFY account.
- Verify your affiliation with a Nigerian university.
- Facilitate social interactions, messaging, and marketplace features.
- Maintain platform safety and prevent abuse.
3. Data Sharing and Storage
We do not sell your personal data to third parties. We may share data with trusted service providers (such as cloud hosting via Supabase and Cloudflare R2) solely for operating the Platform. Your data is stored securely in industry-standard cloud infrastructure.
4. Your Rights (NDPR)
Under the NDPR, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data (Right to be Forgotten).
- Withdraw your consent at any time (which may require account deletion).
5. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you services. If you choose to delete your account, your profile and associated data will be removed from our active systems, though some information may be retained briefly in secure backups or as required by law.
6. Contact Us
If you have any questions or requests regarding your data privacy, please contact our Data Protection Officer at privacy@chimfy.com.
