Privacy Policy

MyTijaara Ltd, based in Lagos, Nigeria, operates the MyTijaara mobile application, website, waitlist, and related marketplace services. In this policy, “MyTijaara”, “we”, “us”, and “our” refer to MyTijaara Ltd. This policy describes personal data handling across those services; the data involved depends on the features you use.

For privacy questions or requests, contact privacy@mytijaara.com. Do not send passwords, one-time passcodes, full payment-card numbers, or other authentication secrets by email.

We collect information you provide, information generated when you use a feature, and technical information sent by your device or browser. We do not collect every category from every user.

• Account and contact details: name, email address, phone number, authentication and verification records, profile details, and profile image.
• Orders and marketplace activity: products or services viewed or ordered, order status and history, delivery or service instructions, reviews, loyalty or wallet activity, and payment status or transaction references.
• Addresses and location: saved addresses and, if you enable a location feature, device location used to select a service area, find nearby services, or support delivery. The app also lets you enter or select an address yourself.
• Content you submit: messages to support or marketplace participants, reviews, photos, and files you choose to upload, including prescription files when you use that feature.
• Voice search: if you choose voice search, the app accesses microphone input to turn your spoken query into search text. Your device or speech-recognition service may process that audio under its own terms.
• Device, log, and usage information: IP address or a derived value, device and app/browser details, push-notification token, pages or screens used, session and referral information, campaign parameters, and event or security records.
• Waitlist information: name, email, optional phone number, city or state, selected role or interests, referral details, and signup source or campaign information.

• Create and secure accounts, verify contact details, and provide requested marketplace features.
• Match orders with vendors, riders, or service providers; coordinate delivery; and provide order, payment, and support updates.
• Process payments through the payment method and provider you select, and maintain necessary transaction, refund, wallet, and dispute records.
• Use location, address, and voice-search input when you choose features that need them.
• Send service messages, account notices, and push notifications; send marketing only where permitted and provide an opt-out.
• Operate, troubleshoot, secure, and improve the services; measure website and app usage; detect abuse or fraud; and meet legal obligations.
• Administer the waitlist, referrals, invitations, and launch communications.

Some features request access to device location or the microphone for location selection and voice search. You can decline or later change permissions in your device settings; the related feature may then be unavailable. We use location or microphone input for the feature you invoke, not as a substitute for your choice to enable that feature.

Where consent is the applicable basis, you may withdraw it. Withdrawal does not affect processing that took place before withdrawal or processing based on another lawful ground.

We do not sell personal data. We disclose only information needed for the purposes below, subject to applicable law:

• Vendors, riders, artisans, and other service providers involved in a transaction receive relevant contact, order, and delivery details so they can fulfil it.
• Payment providers receive information needed to authorize or complete a payment, refund, or wallet transaction. The provider shown for your chosen payment method handles information under its own terms.
• Technology providers help us host and secure the services, process email or SMS, provide maps or location features, authenticate users, deliver push notifications, and measure usage. Examples of services integrated in the app or website include Google Maps, Firebase services, and Vercel Analytics; the data each receives depends on the feature and configuration.
• Professional advisers, regulators, courts, and law-enforcement authorities may receive information where necessary to establish or defend legal claims, protect people or the services, or meet a legal requirement.
• Business transfers may involve relevant data if the business or its assets are reorganized or transferred, subject to applicable safeguards and notice.

Service providers may process data on our behalf or under their own privacy terms. We require appropriate handling for the role they perform and remain responsible for our disclosures and use of integrated services.

Where required, we process personal data on grounds such as performing a contract or taking steps you request, complying with law, pursuing legitimate interests such as security and service operation, or your consent. We apply the Nigeria Data Protection Act 2023 and other applicable data-protection laws. This description is not a claim of certification or a substitute for the rights available under those laws.

Our service providers may process information in countries other than the country where you use MyTijaara. Where required, we use an appropriate legal basis and safeguards for that transfer.

We keep personal data only for as long as needed for the purposes described here, to provide the service, and to meet applicable legal, accounting, safety, fraud-prevention, or dispute-resolution requirements. Account data is kept while the account is active and is subject to deletion when a verified deletion request is completed. Some transaction, payment, security, or legal records may need to be retained for a limited period; where possible, we restrict access or remove direct identifiers when they are no longer needed for the original service.

Waitlist information is kept while it is needed to administer the waitlist and related communications, unless you unsubscribe or request deletion, subject to records we must retain by law. Retention periods can differ by data type and provider.

In the app: sign in, open your Profile, and choose the delete-account option. The app may require an active order to be completed before it accepts an in-app deletion. Deleting an account removes access to it and revokes its app session.

On the web, without signing in: email privacy@mytijaara.com with the subject “Request MyTijaara account and data deletion”. Send the request from the email address on the account and include the account phone number or email so we can locate and verify it. If you cannot access that address, explain that in your request. You do not need to reinstall or access the app to submit this request.

After verifying a request, we will delete or de-identify personal data that is no longer needed, including data held by service providers where applicable. We may retain specific records when required by law or needed for an active order, payment, refund, dispute, security, or fraud-prevention matter. We limit any retained data to that purpose and delete it when the reason for retention ends. We will explain any material limitation when responding to your request.

You can use the same email address to request deletion of waitlist information or other personal data without deleting a marketplace account. Unsubscribing from marketing does not by itself delete an account or transaction records.

Subject to applicable law, you may ask to access or correct your personal data, request deletion or restriction, object to certain processing, request a copy or transfer where available, and withdraw consent where processing relies on consent. You may also complain to the Nigeria Data Protection Commission or the relevant supervisory authority.

To make a request, email privacy@mytijaara.com. We may ask for information reasonably needed to verify your identity and will respond within the period required by applicable law.

We use technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, or alteration. No internet service or storage method can be guaranteed completely secure. Contact us promptly if you believe your account or information has been compromised.

If a parent or guardian believes a child has provided personal data without any permission required by law, contact us. We will review the request and take any steps required by applicable law.

We may update this policy as our services, data practices, or legal requirements change. We will post the current version here and update the date above. If a change requires notice or renewed consent, we will provide it through an appropriate channel.

For questions, privacy-rights requests, or account and data deletion requests, email privacy@mytijaara.com.