Pipitrend Privacy Policy

Effective date: February 14, 2026 Last updated: February 14, 2026

Table of Contents

1. Who we are and about this policy
2. What personal data we collect
3. How we use your data and our lawful basis
4. Device permissions
5. Who we share your data with
6. International data transfers
7. How long we keep your data
8. How we keep your data secure
9. Your rights
10. Deleting your account
11. Children's privacy
12. Cookies, website and tracking
13. App Store and Google Play privacy labels
14. Data breaches
15. Changes to this policy
16. Contact us and complaints

1. Who we are and about this policy

1.1 Who we are. Pipitrend is a social networking and creator platform for African users, run by Pipitrend, Olonkola Rd, Lekki, Lagos State, Nigeria ("we", "us"). We are the data controller of your personal data under the Nigeria Data Protection Act 2023 (NDPA).

1.2 What this policy covers. It explains what personal data we collect, why, how we use and share it, and what rights you have. It applies to our iOS and Android apps, our website at pipiafrica.com, and related services (the "Service").

1.3 Plain-language summary.

• We collect the data you give us, the data your device sends us, and data about how you use the Service.
• We use it to run Pipitrend: your account, posts, chat, calls, payments and subscriptions, safety, and notifications.
• We share it only with the specific providers named in section 5, and only for the purposes listed.
• We do not sell your personal data.
• Our app does not track you across other companies' apps and websites (see section 12).
• You can access, correct or delete your data, and withdraw consent, as described in sections 9 and 10.

1.4 Data Protection Officer. Our data protection contact is: Dr Richard Wealth, support@pipiafrica.com.

1.5 Key terms. "Personal data" means information about an identifiable person. "Processing" means anything we do with it, including collecting, storing, using, sharing and deleting. "NDPC" means the Nigeria Data Protection Commission.

2. What personal data we collect

We collect the following categories only.

2.1 Data you give us

2.2 Data collected through device permissions

With your permission, the app accesses:

• Camera (for video calls);
• Microphone (for audio and video calls, and voice notes);
• Photo library (to upload media and save media to your device);
• Precise location, only while the app is in use (to make content more relevant, to let you add a location tag, and to convert your coordinates into a place name using reverse geocoding).

See section 4.

2.3 Data collected automatically

2.4 Data we receive from third parties

2.5 What we do not collect

• We do not store full payment card numbers. Card and bank details are handled by Paystack.
• We do not access your camera, microphone, photo library or location unless you give permission, and we do not collect location in the background.
• We do not knowingly ask for special categories ("sensitive") personal data such as health, religion or political opinions. If you choose to include such information in your posts or profile, it will be visible according to your privacy settings.

3. How we use your data and our lawful basis

Under the NDPA, we may process personal data only if we have a lawful basis. The table below sets out each activity, the data used, and the lawful basis.

Consent. Where we rely on consent, you can withdraw it at any time (for example by turning off a permission in your phone settings). Withdrawing consent does not affect processing already done. It may mean some features stop working.

Legitimate interests. Where we rely on legitimate interests, we have considered the impact on you and do not use them where your rights and interests override ours.

No automated decisions with legal effect. We do not make decisions that have legal or similarly significant effects on you based solely on automated processing.

4. Device permissions

The app asks for your permission before accessing the following. You can say no, and you can change your mind at any time.

How to change permissions:

• iPhone/iPad: Settings > Pipitrend (or Settings > Privacy & Security > select the permission) and toggle it on or off.
• Android: Settings > Apps > Pipitrend > Permissions, and choose Allow or Don't allow.

Location detail. We use location only while the app is open. We do not track your location in the background. When you use a location feature, your coordinates are sent to Google's geocoding service to get a place name.

5. Who we share your data with

We do not sell your personal data and we do not share it for other companies' advertising. We share personal data only in the ways below.

5.1 Service providers (processors)

These companies process data on our behalf, for the stated purposes only, under contracts that require them to protect it.

5.2 Other users and the public

What you post is shared according to your settings. Public posts, reels, stories, blogs, pages, public group content, and your public profile can be seen by anyone, including people without an account, and can be copied by others. Private and secret group content and direct messages are shared only with the people you send or post them to. Other users see your name, username and profile photo.

5.3 Legal and safety reasons

We may disclose personal data when we believe it is necessary to comply with the law, a court order or a request from a competent authority; to enforce our Terms; to protect the rights, safety or property of you, us or others; or to investigate fraud or abuse.

5.4 Business changes

If we are involved in a merger, acquisition or sale of assets, personal data may be transferred to the new owner, who must keep protecting it under this policy or give you notice of changes.

5.5 With your consent

We may share personal data for other purposes if you ask us to or agree to it.

6. International data transfers

6.1 Where data goes. Some of our providers are outside Nigeria (for example, in the United States or other countries where Apple, Google, OneSignal and Agora operate). Your personal data may therefore be stored or accessed outside Nigeria.

6.2 Safeguards. Under the NDPA, we transfer personal data outside Nigeria only if appropriate safeguards are in place. These may include:

• transfers to countries that the NDPC considers to provide an adequate level of protection;
• written data processing agreements with our providers, including contractual clauses (such as standard contractual clauses or equivalent terms) that require them to protect your data to a standard equivalent to the NDPA;
• other lawful grounds under the NDPA, such as your consent (after we tell you the risks), or where the transfer is necessary to carry out our contract with you.

6.3 More information. You can ask us for details of the safeguards for a particular transfer using the contact details in section 16.

7. How long we keep your data

We keep personal data only as long as we need it for the purposes above, and then delete or anonymise it. The periods below apply unless the law requires otherwise or a longer period is needed to deal with a dispute or investigation.

8. How we keep your data secure

We use technical and organisational measures appropriate to the risk, including:

• hashing of passwords (we never store them in plain text);
• two-factor authentication available for your account;
• encryption of data in transit (HTTPS/TLS) and encryption at rest through our cloud provider;
• access controls so that only staff who need data can reach it, and confidentiality duties for staff;
• no storage of full payment card numbers. Card and bank details are handled by Paystack;
• security contracts with providers;
• procedures for spotting and responding to breaches (section 14).

Direct chat is stored on our servers so we can deliver messages between you and other users. We do not record calls.

No system is 100% secure. Protect your account by using a strong, unique password and turning on two-factor authentication. Do not share your login details.

9. Your rights

Under the NDPA, you have the following rights. Some have exceptions where the law allows.

How to use your rights.

• In the app: your account settings let you edit your profile, change your privacy settings and permissions, and delete your account.
• By email: write to support@pipiafrica.com with the subject "Data request" and tell us what you want.

We may need to verify your identity before acting. We will respond within one month, and we usually do not charge a fee unless a request is manifestly unfounded or excessive. If we refuse a request, we will explain why.

10. Deleting your account

10.1 How to delete. In the app, go to your account settings and follow the steps to delete your account. You may be asked to confirm your password or a code.

10.2 Before you delete.

• Cancel your Premium subscription in the Apple App Store or Google Play. Deleting your account or the app does not cancel it.
• Withdraw any Wallet balance.

10.3 What we delete. When you confirm deletion, we delete or anonymise: your account data (name, username, email, phone, date of birth, password hash, profile photo); your profile; your posts, reels, stories, blogs, comments, reactions, groups, pages and events you own; your direct messages stored under your account; your push tokens; your follows and usage data; and your location data. We aim to complete this within 30 days. We also ask our providers to delete data we sent them for you.

10.4 What we keep, and for how long.

Retained data is kept securely, used only for these purposes, and deleted at the end of the period.

11. Children's privacy

11.1 Age limit. Pipitrend is not for children under 13. We do not knowingly collect personal data from anyone under 13. If we learn we have, we will delete it and close the account. If you think a child under 13 has an account, contact us.

11.2 Ages 13 to 17. Users aged 13 to 17 may use Pipitrend only with the consent of a parent or legal guardian. Under the NDPA, a person under 18 is a child and we must have parental or guardian consent to process their data. We collect this consent by parent or guardian email or phone confirmation. A parent or guardian may contact us to see, correct or delete their child's data, or to withdraw consent.

11.3 Restricted features. Financial features (wallet, payouts, subscriptions, funding campaigns, ads, selling) are available only to users aged 18 or over.

12. Cookies, website and tracking

12.1 Our app does not track you across other companies' apps and websites. We do not use your data to track you across apps and websites owned by other companies for advertising or share it with data brokers.

12.2 Website. Our website at pipiafrica.com uses only essential cookies and local storage needed to log you in, remember settings and keep the site secure. You can control or delete cookies in your browser settings. Blocking essential cookies may stop parts of the website working.

12.3 Within the Service. Usage data (such as what you view, react to and search) is used inside Pipitrend to run the Service and show relevant content and ads. It is not used to track you across other apps or websites.

13. App Store and Google Play privacy labels

This policy is written to match the disclosures we make to Apple ("App Privacy") and Google ("Data safety"). The table summarises them.

Data is encrypted in transit, and you can request deletion as described in sections 9 and 10.

14. Data breaches

If a personal data breach happens that is likely to risk your rights and freedoms, we will:

• notify the Nigeria Data Protection Commission (NDPC) within 72 hours of becoming aware of it, as the NDPA requires;
• notify affected users without undue delay where the breach is likely to result in a high risk to them, telling you what happened, what data is involved, the likely effects, and what we are doing and what you can do; and
• take steps to contain the breach, reduce harm and prevent it happening again.

We keep a record of all breaches.

15. Changes to this policy

We may update this policy from time to time. If we make significant changes, we will tell you in the app, by email or by notification before they take effect, and where the law requires it, we will ask for your consent again. The "Last updated" date at the top shows the latest version.

16. Contact us and complaints

16.1 Contact us.

Pipitrend, Olonkola Rd, Lekki, Lagos State, Nigeria

• Email: support@pipiafrica.com
• Support page: pipiafrica.com/support
• Data Protection Officer: Dr Richard Wealth, support@pipiafrica.com

16.2 Complaints. We would like the chance to fix any concern first, so please contact us. You also have the right to complain to the regulator:

Nigeria Data Protection Commission (NDPC) Website: ndpc.gov.ng