Privacy
Plain English. This is what we do, and nothing more. Last changed 18 September 2026.
What we store, and why
When you make an address, we store the GPS pin you drop, any photos you add, and any voice notes you record for directions. We also store the label you give the address, any typed directions text, the written address if you add one, and — once you have one — Nigeria’s national digital address code. We store these for one purpose: to show them to the people you send your link to, so they can find you. The legal basis is the agreement you make with us when you create an account, and the consent you give at sign-up for storing your data outside Nigeria (see below).
Your email
You sign in with your email instead of a password. We store the address and use it only to send you a one-time sign-in code. We never send you marketing, and we never sell or share your address with anyone else. When you sign up we also keep a random id in a cookie on your browser, a hashed copy of your internet address and the name of your browser, so that one person cannot open free trial after free trial. We do not fingerprint your device.
Where your data lives
Your account, addresses, photos and voice notes are stored on a server in Germany run by Hetzner Online GmbH, and files are stored by Cloudflare. Germany is covered by the EU General Data Protection Regulation (GDPR). We have signed a data-processing agreement with Hetzner. Nigeria’s Data Protection Act 2023 (sections 41 to 43) allows this transfer with your consent, which you give when you create an account. Sign-in codes are emailed through Resend. Payments go through Paystack (Nigeria); we never see your card number. You can see, correct, export or delete all of your data from Settings. If we ever suffer a data breach we will tell the Nigeria Data Protection Commission within 72 hours and tell you if it puts you at risk. Data-protection contact: privacy@<domain>.
Who handles your data for us
Four companies touch your data, each for one job. None of them may use it for anything else.
- Hetzner Online GmbH (Germany) — runs the server and the database.
- Cloudflare, Inc. — stores your photos, voice notes (R2 storage, in a private bucket), keeps our database backups, and runs the invisible “are you a person” check on the sign-in screen (Turnstile).
- Resend, Inc. — delivers the sign-in code to your email address.
- Paystack (Nigeria) — takes your card payment and tells us it succeeded. Your card details stay with Paystack.
Who can see it
Your address is private by default, and a private link is never picked up by Google or any other search engine. Only someone you send the link to can open it. Any paid account can apply to list an address publicly — a person on our team checks it before it appears in search — and that is the only way an address becomes visible to people you have not shared the link with.
What we track
We count how many times a link is opened, so you can see it was used. We do not track who opened it, and we do not use that count for anything other than showing you the number. We set three cookies, all needed to run the app: the one that keeps you signed in, the random device id above (400 days — it is also how Settings → Devices tells your phone from your laptop), and a two-minute note that tells you when an old device was signed out to make room for a new one. There are no advertising or analytics cookies.
Ads
We do not run ads, and we do not sell your data to anyone.
Your rights
Under the Nigeria Data Protection Act you can, at any time and for free:
- See everything we hold about you — it is all on your dashboard and in Settings.
- Correct it — edit any address, photo, caption or direction from the dashboard.
- Export it — while signed in, open /api/account and your browser downloads one file (JSON) with your account, addresses, links, payments and download links for every photo and recording. The download links in it work for one hour. You can do this three times an hour.
- Delete it — Settings → “Delete my account” removes everything for good, at once, with no copy kept in the live database (a backup ages out within 30 days).
- Withdraw consent to storing your data in Germany — deleting your account is how you do that, because we have nowhere else to store it.
- Complain — write to privacy@<domain> first; we answer within 30 days. You can also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).
How long we keep things
| What | How long |
|---|---|
| Account row (your email, name, plan, when you agreed to this notice, your public listing code) | Until you delete the account. Then gone at once. |
| Addresses (the pin, written address, label, directions text, business details) | Until you delete the address or the account. |
| Photos and voice notes | Until you delete the address or the account. The file is removed before the record. |
| Share links (the /a/… addresses you send to people) | Until you turn them off, they expire, or the address is deleted. |
| Link opens and "Navigate" taps (a count, no names) | While the address exists. |
| Sign-in code (the 6 digits we email you) | Unusable after 5 minutes. |
| Signed-in session | 180 days, or until you sign that device out in Settings. |
| Sign-up signals (a hashed copy of your internet address, browser name, email domain) | Until you delete the account. |
| Household invite (the email you invited and its one-use link) | 7 days, or until used. |
| Household membership (which account you share addresses with) | Until the owner removes you, you leave, or either account is deleted. |
| Payment record (reference, amount, status, date) | Until you delete the account. Paystack keeps its own copy of the transaction. |
| Driver reports on a public page (the reason, and a hashed id for who reported — never their address) | Until a person on our team resolves them, or the address is deleted. |
| Database backups | 30 days. A backup taken before you deleted something still holds it until it ages out. |
| Server logs (no photos, no codes) | Until the next update of the app replaces the server process. |
| Emails we send you (the sign-in code) | Resend, the company that delivers them, keeps its own log of the email for its own period. We do not store the email body. |
Deleting your account
You can delete your account at any time from Settings. That removes your addresses, photos, voice notes, and links for good — there is no way to undo it, and no copy is kept in the live database.