1. Who we are
iHandyApp is operated by iHandyApp Technology Ltd, a company based in Lagos, Nigeria ("iHandyApp", "we", "us"). We run a marketplace app that connects customers with independent local service providers and food vendors. This policy explains what personal information we collect through the app and this website, why we collect it, and the choices you have.
We are the data controller for the personal information described here under Nigeria's Data Protection Act 2023 (NDPA).
2. Information we collect
We collect information you give us directly, information created when you use the app, and information needed to keep the platform safe.
Account information
- Name, email address, phone number, and password, when you register.
- A referral code, if one was used to sign you up.
Identity verification (service providers and food vendors)
- Government-issued ID and a selfie photo, to confirm you are who you say you are before you can accept jobs or orders. These are stored privately and are never shown publicly.
- Business details for food vendors, such as store name, address, and the categories you sell.
Location
- Your approximate location, to show nearby service providers, food vendors, and delivery options, and to help a rider find a delivery address.
- Live location during an active delivery or an in-progress job, shared only with the other party to that specific job or order.
Payment information
- We do not store your card or bank details ourselves. Payments are processed by Paystack, a licensed Nigerian payment processor; see their own privacy policy for how they handle your payment details.
- We keep a record of transactions, amounts, and payout history so we can run the escrow system, resolve disputes, and meet our accounting and tax obligations.
Messages and photos
- Chat messages and photos sent between a customer and a provider or vendor about a specific job or order. Photos are stripped of location metadata (EXIF data) before storage.
Device and usage information
- Basic technical data (device type, app version, crash logs) so we can keep the app working correctly.
- A push-notification token, if you allow notifications, so we can tell you about order and job updates.
3. How we use it
- To create and run your account, and let you use the marketplace as a customer, provider, or vendor.
- To verify the identity of providers and vendors, so customers can trust who they're dealing with.
- To process payments, hold funds in protected (escrow) status until a job or order is confirmed complete, and pay out providers and vendors.
- To connect customers with nearby providers, vendors, and riders.
- To send order, job, and account notifications.
- To investigate disputes, safety reports, and suspected fraud or policy violations.
- To meet our legal, tax, and regulatory obligations.
- To improve the app based on how it's actually used.
4. Our legal basis for processing
Under the NDPA, we rely on: performing our contract with you (running your account and the transactions you make); your consent (for example, location access and push notifications, which you can withdraw in your device settings); our legitimate interests (keeping the platform safe and working); and our legal obligations (such as financial record-keeping).
5. Who we share information with
We do not sell personal information to anyone. We share it only where it's needed to run the marketplace:
- The other party to a job or order: a provider or vendor sees what they need to fulfil your request (name, delivery or job address, chat messages); a customer sees the provider or vendor's verified profile. Phone numbers and other direct contact details stay hidden in chat until a payment is protected.
- Paystack, to process payments and payouts.
- Infrastructure and notification providers we use to host the app's data and deliver push notifications.
- Regulators and law enforcement, where we're legally required to.
- A buyer, successor, or adviser, if iHandyApp is ever involved in a merger, acquisition, or sale of assets. You'd be notified first.
6. How long we keep it
We keep account and transaction records for as long as your account is active and for a period after, to meet our legal and accounting obligations. Chat photos are archived and then deleted from active storage after a fixed period. Identity verification documents are kept only as long as needed to verify and re-verify you, and as required by law. You can ask us to delete your account at any time, as described below.
7. Your rights
Under the NDPA, you have the right to:
- Ask what personal information we hold about you, and get a copy of it.
- Ask us to correct information that's wrong or incomplete.
- Ask us to delete your information, subject to what we're legally required to keep.
- Object to, or ask us to restrict, certain processing.
- Withdraw consent you previously gave (for example, turning off location or notifications).
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we've mishandled your information.
To exercise any of these, write to us at the contact below.
8. How we protect it
We use encryption in transit, private (non-public) storage for sensitive documents and photos, and access controls that limit who on our team can see what. No system is perfectly secure, but we treat your information as something we're responsible for, not just something we store.
9. Children
iHandyApp is not directed at children, and you must be old enough to legally enter into a contract in your jurisdiction to create an account.
10. International transfers
Some of the infrastructure providers we use to run the app may process data outside Nigeria. Where that happens, we take steps to make sure your information is still protected to the standard the NDPA requires.
11. Changes to this policy
We'll update this page as the app changes, and update the date at the top when we do. For significant changes, we'll let you know directly, such as by email or an in-app notice.
