Legal
Privacy Policy
Last updated: July 24, 2026
How we collect and use your data — aligned with the Nigerian Data Protection Act 2023 (NDPA).
Who we are
- Operator: ALERTNAIJA DIGITAL SOLUTIONS, trading as AlertNaija
- Business name registered with the Corporate Affairs Commission (CAC), Nigeria. BN 9517386.
- Data controller: ALERTNAIJA DIGITAL SOLUTIONS
- Privacy: privacy@alertnaija.com
- DPO: dpo@alertnaija.com
1. Information we collect
- Account: name, email, phone, date of birth (13+), state, LGA, PIN
- Location: when you allow it — for nearby alerts and safety features
- Reports: text, photos, voice notes you submit (photos are moderated)
- Device: push tokens, OS/app version, basic crash data
- Family circle: contacts you add so we can route alerts
- Payments: Paystack references and amounts — not your full card number. See Payments
2. How we use it
- Run the app (alerts, panic routing, reports)
- Verify accounts and reduce abuse
- Send important safety and account messages
- Process Plus subscriptions and optional Refundable Finder Reward purchases you confirm
- Improve the product with aggregated, de-identified analytics
3. Lawful basis (NDPA §25)
- Consent — registration and permissions
- Contract — providing the service you signed up for
- Legitimate interest — fraud and abuse prevention
- Vital interest — panic / safety events
- Legal obligation — valid orders or statutory requirements
4. What we don’t do
- Sell your personal information
- Share precise location unless you choose to (e.g. panic to family)
- Run third-party ad trackers in the app
- Access contacts, camera, mic, or location without permission
5. Who we share with
- Your family circle — when you panic or miss a check-in
- Partners you contact — only what’s needed to help
- Community feed — reports may appear; personal IDs removed by default
- Processors: AWS (hosting), Amazon SES (email), Paystack (payments)
- Law: valid Nigerian process or imminent harm
6. Data stored outside Nigeria
- Processed on AWS in the United States (
us-east-1) - Protected by AWS contractual safeguards
- By using the Service you consent to this processing
- We may move hot data to AWS Africa (Cape Town) later — we’ll update this page
7. Security
- Encrypted in transit (TLS) and at rest (AES-256)
- Restricted, audited access to production systems
- Audit trails on sensitive registry and dispute records
8. Breach notification
- NDPC notified within 72 hours when required
- Affected users notified without undue delay
9. Your rights
- Access — copy of your data
- Correction — fix inaccurate data
- Erasure — delete your account ( how) or request deletion of specific data while keeping your account (request)
- Restrict / object — limit certain processing
- Portability — machine-readable copy
- Withdraw consent — anytime
- Complain — NDPC at ndpc.gov.ng
Email privacy@alertnaija.com — we respond within 30 days.
10. Retention
- Profile: while active; deleted within 30 days of account deletion
- Public reports: kept de-identified for community safety
- Audit trails: up to 7 years for fraud prevention
- Server logs: 90 days
11. Children
- Not for under 13 — date of birth required at signup
- Report under-13 accounts → we remove within 7 days
12. Website cookies
- alertnaija.com uses only cookies needed to load the page
- No advertising or tracking cookies
13. Changes
- We update this page when practices change
- Material changes are announced in-app first
14. Contact
- privacy@alertnaija.com
- dpo@alertnaija.com
- Regulator: ndpc.gov.ng