Privacy Policy

Introduction

HandyHelpa ("we", "our", or "us") operates the HandyHelpa mobile application (the "App"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our App. Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the App.

Information We Collect

Personal Information

We collect the following personal information:

• Account Information: Name, email address, phone number, password (encrypted)
• Profile Information: Profile photo, skills, experience, work history, bio
• Identity Verification: Government-issued ID documents (processed via Veriff)
• Payment Information: Bank account details, payment history (processed via Flutterwave)
• Location Data: Precise and approximate location for job matching and service delivery

Automatically Collected Information

• Device Information: Device type, operating system, unique device identifiers
• Usage Data: App features used, time spent on app, interactions, search queries
• Log Data: IP address, crash reports, performance data
• Photos and Media: Images uploaded for profile, job posts, or job completion verification

Information from Third Parties

• Social Media: Profile information from Google Sign-In or Apple Sign-In
• Background Checks: Verification status from identity verification services
• Payment Processors: Transaction data from Flutterwave

How We Use Your Information

We use your information to:

• Provide Services: Facilitate job matching, communication, and transactions
• Account Management: Create and manage your account, authenticate access
• Payment Processing: Process payments, refunds, and withdrawals
• Safety & Security: Verify identities, prevent fraud, ensure platform safety
• Location Services: Match users based on proximity, show nearby jobs/workers
• Communication: Send notifications, updates, job offers, messages
• Improve Services: Analyze usage patterns, improve features, fix bugs
• Legal Compliance: Comply with legal obligations, enforce terms
• Marketing: Send promotional content (with your consent)

Legal Basis for Processing

We process your data in compliance with the Nigeria Data Protection Regulation (NDPR) 2019 and, for EEA/UK users, GDPR:

• Contract Performance: Processing necessary to provide our services
• Legitimate Interests: Platform security, fraud prevention, service improvement
• Legal Obligation: Compliance with Nigerian laws, NDPR, court orders
• Consent: Marketing communications, optional features

Information Sharing and Disclosure

We may share your information with:

Service Providers

• AWS (Amazon Web Services): Cloud hosting and data storage
• Firebase: Push notifications and analytics
• Veriff: Identity verification services
• Flutterwave: Payment processing
• Notifee: Local notification management

Other Users

• Public Profile: Name, photo, ratings, reviews, skills visible to other users
• Job Context: Contact information shared when job is accepted
• Reviews: Your reviews and ratings are publicly visible

Legal Requirements

• Law enforcement, government agencies (when legally required)
• Protection of rights, safety, and property
• Fraud prevention and security investigations
• Business transfers (merger, acquisition, bankruptcy)

Data Security

We implement industry-standard security measures:

• Encryption: Data encrypted in transit (HTTPS/TLS) and at rest
• AWS Cognito: Secure authentication and user management
• Access Controls: Role-based access to user data
• Regular Audits: Security assessments and penetration testing
• PCI DSS Compliance: For payment card data (via Flutterwave)

Note: No method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Data Retention

• Active Accounts: Data retained while account is active
• Inactive Accounts: Data may be deleted after 2 years of inactivity
• Legal Requirements: Data retained longer if required by law
• Transaction Records: Payment records retained for 7 years (legal requirement)
• Deleted Accounts: Data deleted within 30 days of account deletion (except legally required data)

Your Rights

You have the right to:

Access and Portability

• Request a copy of your personal data
• Export your data in a structured, machine-readable format

Correction and Deletion

• Update or correct your information in-app
• Request deletion of your account and data

Consent Withdrawal

• Opt-out of marketing communications
• Disable location services (may limit functionality)
• Revoke third-party integrations

Objection and Restriction

• Object to data processing for direct marketing
• Request restriction of processing under certain circumstances

To exercise your rights: Contact us at privacy@handyhelpa.com

Children's Privacy

HandyHelpa is not intended for users under 18 years of age. We do not knowingly collect information from children. If we discover we have collected data from a child, we will delete it immediately.

Location Services

We collect location data to:

• Match jobs with nearby service providers
• Calculate distance and travel time
• Verify job completion locations
• Improve local search results

You can disable location services in your device settings, but this will limit job matching functionality.

Push Notifications

We send push notifications for:

• New job offers and applications
• Messages from other users
• Payment confirmations
• Security alerts

You can disable notifications in your device settings or app preferences.

Cookies and Tracking

The App uses:

• Essential Cookies: Required for authentication and security
• Analytics: Firebase Analytics for usage insights (anonymized)
• Performance Monitoring: Crash reporting and bug tracking

Third-Party Links

The App may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies.

International Data Transfers

Your data is primarily stored and processed in Nigeria. However, it may also be transferred to and processed in:

• Nigeria (primary data storage)
• AWS Global Infrastructure (cloud backup and redundancy)
• European Union (backup servers for GDPR compliance)

We ensure appropriate safeguards (Standard Contractual Clauses, adequate data protection measures) for international transfers in compliance with the Nigeria Data Protection Regulation (NDPR).

Changes to This Privacy Policy

We may update this policy periodically. We will notify you of material changes via:

• In-app notification
• Email notification
• Updated "Last Updated" date

Continued use after changes constitutes acceptance.

Dispute Resolution

For privacy-related disputes:

• Nigerian Users: Right to lodge a complaint with the Nigeria Data Protection Bureau (NDPB)
• EU/EEA Residents: Right to lodge a complaint with your local supervisory authority
• Contact NDPB: info@ndpc.gov.ng | https://ndpc.gov.ng/

We are committed to resolving complaints in accordance with the Nigeria Data Protection Regulation (NDPR) 2019.

Consent

By using HandyHelpa, you consent to this Privacy Policy and agree to its terms.

Contact Us

For privacy questions or concerns:

Version: 1.0 | Effective Date: March 2, 2026 | Company: Inab Technologies Ltd