Privacy Policy

This policy explains what personal data Keepr collects, why, who sees it and how long we keep it. Keepr is the data controller for the Keepr marketplace. We process your data in line with the Nigeria Data Protection Act 2023 (NDPA) and guidance from the Nigeria Data Protection Commission (NDPC).

• Account: email, full name, nickname, matric number, level, department, campus, phone number, lodge, profile picture, role.
• Verification (sellers and riders): student ID photo; riders also vehicle type and proof of ownership.
• Orders: items, prices, delivery point, order status, reviews, disputes and the evidence in them.
• Messages: chats between buyers, sellers and riders about an order.
• Payments: Paystack payment references and amounts (we never see or store your card details); for sellers and riders, bank name, account number and account name for payouts.
• Technical: sign-in records, IP address and device information used for security and rate limits.

• To run the marketplace: accounts, orders, escrow, delivery, chat and payouts (performance of our contract with you).
• To keep trades safe: verifying sellers and riders, preventing fraud, investigating disputes, freezing or banning accounts that misuse Keepr (legitimate interests and legal obligations).
• To meet legal, tax and accounting duties (legal obligation).
• To send you service messages about your orders and account. We don't sell your data or use it for third-party advertising.

• Other members see your nickname (or first name), picture, ratings and reviews. Your full name is never shown to other members.
• Once you share a paid order, the buyer, seller and rider on it see each other's nickname, phone number and lodge so the goods can be handed over.
• Keepr staff (including campus representatives for their campus) see what they need to verify accounts, pay out and resolve disputes. Staff sign in with two-step login.
• Service providers who process data for us: Supabase (database, storage, sign-in), Vercel (hosting) and Paystack (payments). Some of these store data outside Nigeria with safeguards required by the NDPA.
• Authorities, when Nigerian law requires it or to protect members from harm or fraud.

Keepr is built so every trade can be traced. We keep account details, order and payment records, messages, and moderation records for as long as your account is open and for up to six years after your last transaction, to handle disputes, chargebacks, fraud investigations and legal or tax duties. When an account is banned we keep its email, matric number and phone number on a blocked list so the same identity can't sign up again. Verification documents are kept while your account is open and deleted or anonymised when no longer needed.

Under the NDPA you can ask to access, correct or get a copy of your personal data, object to or restrict some processing, withdraw consent where we rely on it, and ask us to delete data we no longer need. Some data must be kept for traceability and legal reasons even after you leave (see above). You can edit your phone, level, lodge, nickname and picture on your Profile page; contact Keepr support for anything else. You can also complain to the Nigeria Data Protection Commission.

Data is encrypted in transit, access is controlled by row-level security in our database, payments are handled by Paystack, and staff need two-step login. No system is perfect; if a breach affects you we will tell you and the NDPC as the law requires.

We may update this policy and will change the date above and ask you to accept important changes in the app. For privacy questions or requests, contact Keepr support.