Facesofnaija Privacy Policy

Effective Date: August 24, 2026 | App Name: Facesofnaija - Connect, Share (com.facesofnaija.tlapp)

Facesofnaija ("we", "our", or "us") operates the website https://www.facesofnaija.ng and the Facesofnaija mobile application. We are committed to protecting your privacy and ensuring transparent, secure handling of all personal and sensitive user data. This Privacy Policy details our data collection, handling, storage, encryption, and deletion practices in accordance with global data protection standards and Google Play Developer Policies.


1. Information We Collect & How It Is Handled

We collect and process personal and sensitive user data strictly to provide, improve, and secure our social networking platform. Below is a comprehensive breakdown of the types of data we collect, access, and handle:

Data Category Specific Data Types Purpose of Collection & Handling Handling & Storage Practice
Personal Information Name, Username, Email address, User ID, Password hash, Profile bio, Birthday, Gender. Account registration, user authentication, profile personalization, password reset, account verification, and account management. Collected directly from user input. Passwords are encrypted using salted bcrypt hashes. Never shared with third parties for marketing.
Photos & Videos Images and video files uploaded by the user, camera access. Enabling users to create timeline posts, share stories/reels, upload profile avatars, and send media in chat. Accessed only when explicitly granted camera/gallery permissions. Transmitted via TLS/HTTPS and stored securely in private cloud storage.
Audio & Microphone Voice notes, audio recordings, voice calls. Allowing users to record and send voice messages in chat and participate in audio/video calls. Microphone is accessed only when actively recording or on a call. Audio is encrypted in transit and not shared externally.
Location Data Approximate location (network-based) and Precise location (GPS-based). Allowing users to tag locations on posts, check in at places, and discover nearby friends/events upon request. Accessed only with explicit runtime permission. Location data is never tracked in the background, never sold, and not shared with data brokers.
Messages & Interactions Direct chat messages, comments, likes, reactions, group chats. Facilitating social networking communication between users and community engagement. Encrypted in transit. Private direct messages are only accessible to the conversational participants.
Device & App Identifiers Device ID, IP address, Operating System version, Push notification tokens (OneSignal ID). Delivering push notifications for chats, mentions, and updates; app security, fraud prevention, and session management. Collected automatically to maintain secure sessions and route push notifications.

2. Secure Data Handling & Encryption Procedures

Facesofnaija enforces stringent technical and organizational security procedures to safeguard user data from unauthorized access, alteration, disclosure, or destruction:

  • Encryption in Transit: All communications between the Facesofnaija mobile application, web application, and backend servers are strictly encrypted using modern Transport Layer Security (TLS 1.2 and TLS 1.3 / HTTPS) protocols. This prevents interception or eavesdropping of user data.
  • Encryption at Rest & Secure Storage: User credentials, authentication tokens, and sensitive data are stored in secure, firewall-protected database servers. Passwords are never stored in plaintext and are protected using industry-standard cryptographic hashing (salted bcrypt).
  • Access Controls & Least Privilege: Access to user database records is restricted strictly to authorized backend services and senior infrastructure personnel using multi-factor authentication (MFA) and encrypted SSH keys.
  • Vulnerability Monitoring: We conduct periodic security assessments, software updates, and server hardening to protect our infrastructure against threats.

3. Third-Party Services & SDK Disclosures

To provide essential app features, we utilize trusted third-party service providers who process data securely in compliance with strict privacy and security standards:

  • OneSignal: Used to deliver push notifications to your mobile device (Processes device identifiers and notification tokens).
  • Google Play Services: Used for core platform services, authentication, and maps/location display.
  • Agora: Facilitates real-time audio and video communications during user-initiated calls.

Strict Policy Against Data Selling: We do not sell, rent, trade, or monetize your personal or sensitive user data to data brokers, third-party advertisers, or marketing agencies.


4. Data Retention and Account & Data Deletion Policy

We retain your personal data only for as long as your account remains active and as necessary to fulfill the services outlined in this policy.

How Users Can Request Data & Account Deletion:

You have full ownership and control over your personal data. You can delete individual posts, photos, videos, and messages directly inside the app at any time. If you wish to delete your entire account and all associated personal data, you can do so through either of the following methods:

  1. In-App Deletion: Open the Facesofnaija App → Go to Settings → Select Delete Account → Enter your password and confirm deletion.
  2. Web Deletion Portal: Visit our dedicated account deletion page at https://www.facesofnaija.ng/setting/delete while logged in.
  3. Email Request: Submit a data deletion request to our Privacy Team at privacy@facesofnaija.ng or support@facesofnaija.ng.

Deletion Timeline & Effect: Upon account deletion confirmation, all your personal information, profile data, uploaded photos, videos, messages, and social connections are permanently and irreversibly purged from our active production databases within 30 days, except where retention is required by applicable law.


5. Children's Privacy & Zero-Tolerance Child Safety (CSAE / CSAM)

Facesofnaija is not intended for individuals under 13 years of age. We do not knowingly collect personal information from children under 13.

We maintain a strict zero-tolerance policy against Child Sexual Abuse Material (CSAM) and Child Sexual Exploitation and Abuse (CSAE). All reports of child endangerment are escalated immediately, resulting in permanent termination and immediate reporting to the National Center for Missing & Exploited Children (NCMEC) and law enforcement authorities.


6. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our legal obligations or application features. When significant changes occur, we will notify users through in-app notices or email, and update the "Effective Date" at the top of this policy.


7. Contact Us / Data Protection Officer

If you have any questions, feedback, or concerns regarding your privacy, data handling practices, or this Privacy Policy, please contact our Data Protection Officer:

Facesofnaija Privacy & Trust Team
Email: privacy@facesofnaija.ng | support@facesofnaija.ng
Website: https://www.facesofnaija.ng
Privacy Policy URL: https://www.facesofnaija.ng/terms/privacy-policy