TweleTwele Privacy Policy

This page summarises the privacy policy published by TweleTwele. The full, current policy is at www.tweletwele.com/privacy (see also the Cookie Policy), and applies if the two differ.

Who we are

TweleTwele is operated by Peresoft Digital Innovations Ltd, a company in Nigeria, which is the data controller under the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Commission’s General Application and Implementation Directive 2025. Contact for anything about your data, including our Data Protection Officer: privacy@tweletwele.com.

What we collect

Account details — name, email, password (stored only as a one-way hash), phone number, gender, profile photo, the role you choose (member, organiser, supplier or advertiser) and your confirmation that you are 18 or over.
Location — the area, city and state you choose, and an approximate position used to show groups near you. Other people only ever see a neighbourhood name and a rough distance, never your address or exact position.
Activity — groups you create, join, request, save or review; shares; collection records; alerts; posts; and messages in group chats, direct messages and to support.
Payments for TweleTwele’s own services — what you paid for, amounts, references, receipts, refunds, TweleConnects balances, plans and add-ons. Card and bank details are entered on our payment providers’ pages; we do not receive or store your card number.
Verification (organisers and suppliers) — government ID type and number, phone, address, business details and payout bank details, seen only by our verification team.
Advertisers — company and contact details, campaign content and payment records.
Sign-in with Google and WhatsApp — your Google name, email and photo if you choose it; your WhatsApp number only if you add and verify it.
Devices and usage — sign-in sessions; notification tokens if you use the mobile app; and, only if you accept optional cookies, visits, searches, device type, approximate location from your IP address and which link, campaign or advert brought you.
Questions you ask the dashboard guide and what you send to support.

Why we use it

We use personal data only for a stated purpose and a lawful basis under section 25 of the NDPA: to provide the service you asked for (contract); to take payment of TweleTwele service fees and keep tax and accounting records (contract and legal obligation); to verify organisers and suppliers (your explicit consent and our legitimate interest in keeping members safe); for safety, fraud prevention and moderation (legitimate interests and legal obligation); and, only with your consent, for WhatsApp messages, marketing email, and analytics and advert measurement through optional cookies. The live policy sets out the full table.

Other members see what is needed to coordinate with you: your name, photo, approximate area and what you post in groups. Organisers see the members of their groups and their status; phone numbers are shown only where you chose to share them.
Sellers and suppliers receive what they need to fulfil an order.
Our team (support, moderation, verification, finance) sees what their role needs. Every admin action on an account is recorded in an audit log.
Service providers process data for us, and authorities receive it where the law requires.

We do not sell personal data and we do not share it with advertisers. Advertisers only see totals, never who you are.

Service providers and transfers outside Nigeria

TweleTwele uses Supabase (database, Frankfurt), Vercel (website and API hosting), Paystack and Korapay (card and bank payments), Resend and Hostinger (email), Meta WhatsApp Business (if you opted in), Google (if you use Google sign-in), Expo (push notifications), OpenAI or Anthropic (answering dashboard-guide questions and drafting marketing text) and ipinfo.io (approximate location for analytics, only with optional cookies). Some of these transfer data outside Nigeria; we transfer only what each service needs and rely on the provider’s contractual protections.

How long we keep it

Your account and what you post are kept while your account is open. Payment and revenue records are kept as long as Nigerian tax and accounting law requires (generally 6 years), with your identity removed if you delete your account. Analytics data is kept for 13 months, advert and share-link measurement for 25 months, delivery logs for 12 months, and expired sign-in sessions and codes for 30 days. Old records are deleted automatically every day.

Your rights

You can download your data any time from Settings → Privacy & your data, correct it in your profile, delete your account from Settings, withdraw consent for marketing, optional cookies and WhatsApp, object to or restrict processing, and complain to the Nigeria Data Protection Commission (ndpc.gov.ng). Email privacy@tweletwele.com or use the Privacy requests page; we answer within 30 days, free of charge.

Age

TweleTwele is for people aged 18 and over. If we learn that an account belongs to someone under 18, we close it and erase the data.

How we protect it

Passwords are stored only as strong one-way hashes, sign-in and email links are single-use and expire, all traffic is encrypted, database tables are locked so only our server can read them, staff see only what their role needs, and ID numbers and documents are never shown publicly. If a breach is likely to put your rights at risk, we will notify the Nigeria Data Protection Commission within 72 hours and tell you without undue delay.

Trust and safety

The verified badge means we checked an organiser’s or supplier’s identity and area; it is not a guarantee of any single purchase. TweleTwele makes the connection; you do the checks. We do not hold group money or pay sellers. Meet the organiser in a public place, check the people and the goods, and never share a password or one-time code. Every group, member, post and message can be reported.

Changes to this policy

We will update the live policy when our practices change and show the date at the top. For important changes we will tell you by email or in the app, and ask for your consent again where the law requires it.