What we collect, why we collect it, and what we deliberately do not store.
Last updated 14 August 2026
We collect what we need to run the service and almost nothing else. We do not sell your data, we do not run advertising on it, and we do not share it with anyone except the companies that actually operate parts of the platform for us, listed below.
Two things worth knowing up front. We never store your IP address, only the country and city it resolves to. And when you verify a phone number, the code itself never touches our database, so a breach of our systems would not help anyone pass verification.
When you sign in with Google we receive your email address, your name, and your profile picture URL. We use the email to identify your account and to contact you about things you have done, such as a token purchase or a slip you requested. We do not send marketing email.
If you verify a phone number, we store the number and the fact it is confirmed. The number is used to stop one person farming referral rewards across many accounts, and one number can only ever be verified on one account. We do not send you marketing texts, and phone verification is optional for everything except referrals.
We record which pages you visit and which buttons you press, so we can see where the product is confusing and fix it. Each visit is tied to a random identifier stored in a cookie on your device, not to your name. If you are signed in, we can connect that activity to your account.
Alongside each event we store:
Location comes from your connection, not from your device. We never ask your browser for GPS access, and we never keep the IP address that the location was worked out from.
Card payments are handled entirely by Stripe. Your card number never reaches our servers and we never see it. We keep a record of the amount, the currency, and a payment reference so we can match your purchase to your token balance.
For bank transfers we generate a reference code and record which pack you asked for, the amount in naira, and the country the request came from. You send the money through your own bank, so we never handle your banking credentials.
These companies operate parts of the platform on our behalf. Each one only receives what it needs to do its job.
Account details and your token and purchase history are kept while your account exists, and afterwards only where we are required to retain financial records.
Usage data is kept so we can understand trends over time. Because it is tied to a random identifier rather than your name, it stops being linked to you once you delete your account.
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete your account and the personal data attached to it. Reply to any email from us and we will sort it out.
Deleting your account removes your profile, phone number and activity history. Records of completed payments are kept where the law requires it, and any unspent tokens are lost, since tokens have no cash value and cannot be refunded.
If we change how we handle your data in a way that matters, we will update this page and change the date at the top. Continuing to use the service after that means the updated policy applies. See our terms of service for the rules covering the rest of the platform.
Questions about any of this? Reply to any email from us and a person will answer.