Privacy policy

AjoQuest is owned, built and operated by Niyexdroid Technologies, a business name registered with the Corporate Affairs Commission (BN 3503933), Iba Housing Estate, Ojo, Lagos, Nigeria. We decide how your data is used, so we are the data controller under the Nigeria Data Protection Act 2023. You can reach us at admin@niyexdroidtechnologies.com or 0816 881 9022.

• Account details: your email address, full name, phone number, date of birth and a scrambled (hashed) version of your password. We never store your password itself.
• Social login: if you sign in with Google, Facebook, GitHub or Apple, we receive your account id with that provider, your name and your email address. We do not receive your password, friends list or posts.
• Identity check: when you verify your NIN we send it to our verification partner, then keep only a one-way hash of it and its last four digits. We do not store the full NIN.
• Face check: before you start a plan, withdraw, or collect a payout, we ask for a selfie and send it with your NIN to our verification partner, who compares it with the photo on your NIN record. We keep only whether it matched and when. We do not store the selfie.
• Parent or guardian (users under 18): your parent or guardian's email address, and when they approve, their full name and the date they gave consent.
• Payout details: your bank name, account number and account name, so withdrawals reach you.
• Savings activity: your plans, groups, deposits, withdrawals, fees, dividends and support tickets.
• Game activity: trivia answers, scores, challenges, streaks, badges and your AjoScore.
• Technical data: login cookies that keep you signed in, and basic request logs (such as IP address and time) used to keep the service secure.
• Sign-in and activity log: each sign-in attempt (time, IP address, browser and device, and whether it worked) and important account actions such as bank changes and withdrawal requests. You can see your recent sign-ins on your Profile page, under Signed-in devices.

• To create and secure your account, and to log you in.
• To run your savings plans and groups, take deposits and send withdrawals.
• To verify your identity and stop one person holding several accounts.
• To check your age, and to ask a parent or guardian for consent if you are under 18.
• To run the trivia arena, challenges and rewards.
• To send emails and notifications you need: login codes, receipts, invites and replies to your enquiries.
• To keep financial records we are required to keep, and to investigate fraud or disputes.

We do not sell your data. We share only what each service needs to do its job:

• Payment processor (Flutterwave): to take deposits and send withdrawals.
• Identity verification (Dojah): to check your NIN and match your selfie to your NIN photo.
• Hosting and database (Railway, Supabase): where the app and its data run.
• Email delivery (Amazon Web Services): to send login codes, receipts and notifications.
• Social login providers: only when you choose to sign in with them.
• Authorities: when the law requires it.

Some of these services store data outside Nigeria. We use providers that protect data to a standard at least as strong as Nigerian law requires.

We keep your data while your account is open. When you delete your account we erase your profile, login details and game activity. Records of money moving (deposits, withdrawals and fees) are kept for as long as the law requires for financial records, then deleted. Sign-in and activity logs are deleted automatically after 12 months. Records of actions our staff take on accounts and money are kept for 6 years.

Under the Nigeria Data Protection Act 2023 you have the right to:

• Be informed: know what personal data we hold about you, why, and who we share it with (this policy).
• Access and portability: get a copy of your data in a format you can take to another service. Use Download my data on your Profile page.
• Correction: have wrong or incomplete data fixed. You can edit most details on your Profile page, or ask us.
• Erasure: have your data deleted, except money records the law makes us keep (see below).
• Objection and restriction: object to, or ask us to limit, how we use your data, including for news emails.
• Withdraw consent: at any time, without affecting what we did before you withdrew it.
• Complain: to the Nigeria Data Protection Commission (NDPC) if you are not happy with how we handle your data.

For anything you can't do from your Profile page, email admin@niyexdroidtechnologies.com. We reply within 30 days.

To delete your AjoQuest account and the data linked to it, including data from Facebook or another social login:

1. Withdraw any money left in your savings plans and finish any rotating group first. We cannot delete an account that still holds funds.
2. Log in, open your Profile page and choose Delete my account. We email you a code to confirm it's you.
3. Your account is frozen for 30 days. You can log in and choose Keep my account at any time in those 30 days.
4. After 30 days we erase your profile, contact details, NIN record, bank details, login details and game activity, keeping only the financial records described above, without your name on them.

Can't log in? Email admin@niyexdroidtechnologies.com from the email address on your account, with the subject "Delete my AjoQuest account".

If you signed in with Facebook, you can also remove AjoQuest from your Facebook account under Settings & privacy > Settings > Apps and websites. That stops Facebook sharing data with us; email us as above to delete what we already hold.

Data is sent over encrypted connections, passwords and NINs are stored only as hashes, and staff access is limited to what support needs. Nobody from AjoQuest will ever ask for your password, card PIN, OTP or BVN.

AjoQuest is for people aged 13 and over. We do not knowingly collect data from children under 13.

If you are under 18, you can play the trivia games straight away, but savings plans, groups, deposits and withdrawals stay locked until a parent or guardian approves. When you sign up we email the parent or guardian you name a link (valid for 7 days). They see your name, email and date of birth, then confirm their full name and give consent.

Once approved, any payouts or withdrawals go to a bank account in your parent or guardian's name, not yours, and they are responsible for the money you save with us.

A parent or guardian can ask us to see, correct or delete their child's data at any time by emailing admin@niyexdroidtechnologies.com. If we learn that someone under 18 is saving without consent, we may pause their savings until a parent or guardian confirms.

If we change this policy we update the date at the top, and we email you about any big change.