Skip to content
AlertNaija
Get the App

Legal

Privacy Policy

Last updated: September 6, 2026

How we collect and use your data — aligned with the Nigerian Data Protection Act 2023 (NDPA).

Who we are

  • Operator: ALERTNAIJA DIGITAL SOLUTIONS LTD, trading as AlertNaija
  • Incorporated with the Corporate Affairs Commission (CAC), Nigeria, under the Companies and Allied Matters Act 2020. RC 9707485.
  • Registered address: Plot 18, Ezekwugo Street, Thinkers Corner, Enugu State, Nigeria
  • Data controller: ALERTNAIJA DIGITAL SOLUTIONS LTD
  • Privacy: privacy@alertnaija.com
  • DPO: dpo@alertnaija.com

1. Information we collect

  • Account: name, email, phone, date of birth (13+), state, LGA, PIN
  • Location: while you use the app — nearby alerts and tagging reports. If you turn on family location share, precise location after a panic or missed check-in even when the app is closed or not in use, until you or family mark you safe. We do not collect background location at other times.
  • Family Circle Map (optional): if you turn it on, we save your location at the moment you check in (“I’m okay”) or use the app, so your direct family can see where you last were. You choose exact or approximate (about 1 km), and turning it off deletes the saved pin. The map keeps only your latest pin, and each check-in appears in your direct family’s Activity with that location for up to 30 days. There is no live or background tracking.
  • Reports: text, photos, voice notes you submit (photos are moderated)
  • Device: push tokens, OS/app version, basic crash data
  • Family circle: contacts you add so we can route alerts
  • Payments: Paystack references and amounts — not your full card number. See Payments

2. How we use it

  • Run the app (alerts, panic routing, reports)
  • Verify accounts and reduce abuse
  • Send important safety and account messages
  • If you later buy Plus on the website, process that payment — store apps do not sell Plus
  • Improve the product with aggregated, de-identified analytics

3. Lawful basis (NDPA §25)

  • Consent — registration and permissions
  • Contract — providing the service you signed up for
  • Legitimate interest — fraud and abuse prevention
  • Vital interest — panic / safety events
  • Legal obligation — valid orders or statutory requirements

4. What we don’t do

  • Sell your personal information
  • Share your location with anyone except your direct family — after a panic or missed check-in if you turned that on, and on the Family Circle Map if you turned that on
  • Run third-party ad trackers in the app
  • Access contacts, camera, mic, or location without permission

5. Who we share with

  • Your family circle — when you panic or miss a check-in
  • Partners you contact — only what’s needed to help
  • Community feed — reports may appear; personal IDs removed by default
  • Processors: AWS (hosting), Amazon SES (email), Paystack (payments), Dojah (optional NIN/BVN/licence match — we do not store the ID number)
  • Law: valid Nigerian process or imminent harm

6. Data stored outside Nigeria

  • Processed on AWS in the United States (us-east-1)
  • Protected by AWS contractual safeguards
  • By using the Service you consent to this processing
  • We may move hot data to AWS Africa (Cape Town) later — we’ll update this page

7. Security

  • Encrypted in transit (TLS) and at rest (AES-256)
  • Restricted, audited access to production systems
  • Audit trails on sensitive registry and dispute records

8. Breach notification

  • NDPC notified within 72 hours when required
  • Affected users notified without undue delay

9. Your rights

  • Access — copy of your data
  • Correction — fix inaccurate data
  • Erasure — delete your account ( how) or request deletion of specific data while keeping your account (request)
  • Restrict / object — limit certain processing
  • Portability — machine-readable copy
  • Withdraw consent — anytime
  • Complain — NDPC at ndpc.gov.ng

Email privacy@alertnaija.com — we respond within 30 days.

10. Retention

  • Profile: while active; deleted within 30 days of account deletion
  • Public reports: kept de-identified for community safety
  • Audit trails: up to 7 years for fraud prevention
  • Server logs: 90 days

11. Children

  • Not for under 13 — date of birth required at signup
  • Report under-13 accounts → we remove within 7 days

12. Website cookies

  • alertnaija.com uses only cookies needed to load the page
  • No advertising or tracking cookies

13. Changes

  • We update this page when practices change
  • Material changes are announced in-app first

14. Contact