Privacy Policy

myHoodora (“we”, “us”) runs the myHoodora neighbourhood network. We are the data controller for the personal data described here. We process personal data in line with the Nigeria Data Protection Act 2023 (NDPA). You can reach us about anything in this policy at hello@myhoodora.com.

• Account details: your name, email address and how you sign in (email and password, or Google or Apple, who share your name and email with us).
• Where you live: the address you enter and your device's location when you confirm your neighbourhood, and the neighbourhood we place you in.
• Profile: anything you add, such as a photo or short bio.
• What you share: posts, comments, reactions, poll votes, event RSVPs, listings, group activity, messages and reports.
• Settings: your notification and privacy choices, and people you block.
• Technical data: your IP address, device and browser type, and logs needed to keep the service secure and working. We may use your IP address to estimate your general area so we can suggest your neighbourhood during sign-up.

• To provide myHoodora (performance of our contract with you): create your account, place you in your neighbourhood, show your feed, deliver messages and notifications.
• To keep neighbourhoods safe and genuine (legitimate interests): verify that members live where they say, prevent fake accounts, spam and fraud, review reports and enforce our community guidelines.
• To improve the service (legitimate interests): understand how features are used and fix problems.
• With your consent: precise location from your device, optional notifications, and anything else we ask your permission for. You can withdraw consent at any time.
• To meet legal obligations: for example, responding to lawful requests from Nigerian authorities.

Neighbours see your name, photo (if you add one), neighbourhood, and what you post or share with them. We never show your address, street, house number or exact location to anyone. You can choose who can see your full profile and who can message you in Settings → Privacy & blocking. Private group posts are visible only to that group's members, and messages only to the people in the conversation.

We do not sell your personal data. We share it only with:

• Service providers who run myHoodora for us, under contracts that require them to protect it:
  • Google Firebase: sign-in and file storage (for example, photos you upload)
  • MongoDB Atlas: our database hosting
  • Map and address services (OpenFreeMap map tiles, maps.co address lookup, ip-api.com general location) to show maps and find your neighbourhood
• Authorities, when the law requires it or to protect someone from serious harm.
• A new owner, if myHoodora is merged or sold. We'll tell you first, and this policy will continue to protect your data.

Some of our service providers store or process data on servers outside Nigeria. When that happens, we rely on the safeguards the NDPA allows, such as contractual protections, to make sure your data gets the same level of protection as it would in Nigeria.

• We keep your data while your account is active.
• If you deactivate your account, your profile and posts are hidden straight away. You can restore them by logging back in within 30 days. After that, we delete or anonymise your personal data.
• We may keep some records for longer where the law requires it, or to resolve disputes, prevent fraud and enforce our terms, and only for as long as needed.

Under the NDPA you have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that is wrong or incomplete (you can edit most of it yourself in Settings);
• ask us to delete your data;
• object to, or ask us to restrict, how we use it;
• receive your data in a portable format;
• withdraw consent you have given, at any time;
• complain to the Nigeria Data Protection Commission (NDPC) if you think we have mishandled your data.

To use any of these rights, email hello@myhoodora.com. We'll respond within the time the law requires.

We use a small number of essential cookies and browser storage to keep you signed in, remember your settings, and keep the pages you've already loaded available when your connection drops. We don't use advertising cookies. Cached posts are cleared from your device when you log out.

Data is encrypted in transit, and access is limited to people and services that need it. No system is perfectly secure, so please use a strong password and keep your login details to yourself. If a data breach is likely to put your rights at risk, we'll notify you and the NDPC as the law requires.

myHoodora is for people aged 18 and over. We don't knowingly collect data from children. If you believe a child has joined, tell us and we'll remove the account.

We'll update this policy as myHoodora grows. If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows when it last changed.