AceLearn Services · NairaCheck

Privacy Policy

Last updated: 15 July 2026

Plain-language notice. This policy was prepared without a lawyer, using the Nigeria Data Protection Act 2023 (NDPA) as a guide, and describes honestly what data we collect and where it is stored. It has not been reviewed by a legal professional or a Data Protection Officer, and AceLearn Services intends to have it formally reviewed when resources allow.

Contents

Who is responsible for your data
What we collect
Why we collect it
Where your data is stored — cross-border transfer
Who we share data with
How long we keep it
Security
Your rights
Photos and public listings
Children
Changes to this policy
Contact / making a request

1. Who is responsible for your data

AceLearn Services (RC 9609478), based in Ijebu-Ode, Ogun State, Nigeria, is the data controller for personal data collected through NairaCheck. AceLearn Services is registered with the Nigeria Data Protection Commission (NDPC) under the MDP-OHL tier.

2. What we collect

Category	Examples	Who this applies to
Identity & contact	Name, phone number	Everyone
Location	State, town, market/area, street address	Sellers, Area Partners
Account security	PIN (stored as a salted cryptographic hash — we cannot see your actual PIN), session tokens	Everyone
Financial	Bank account name, number, and bank code (for receiving payouts); payment references from Korapay	Sellers, Area Partners, Coordinators, Patrons
Listing content	Product/service names, prices, notes, photos	Sellers
Usage	Search terms, messages between Buyers and Sellers, login timestamps, check-in activity	Everyone

We do not collect your card number or full bank login details — these are handled directly by Korapay, our payment processor, and never pass through NairaCheck's own systems.

3. Why we collect it

To create and secure your account, and verify Sellers through Area Partners.
To operate the marketplace — showing Buyers real prices, letting Sellers manage listings, and letting Area Partners, Coordinators, and Patrons see and receive what they are owed.
To process payments through Korapay and send payouts to bank accounts on file.
To respond to support requests and investigate suspected fraud (for example, a fraudulent address approval).

Our legal basis for processing this data under the NDPA is your consent (given at signup) and our legitimate interest in operating the Platform safely, including protecting Buyers from fraudulent Sellers.

4. Where your data is stored — cross-border transfer

NairaCheck's database is hosted by Supabase, on Amazon Web Services servers located in Ireland (eu-west-1). This means your personal data is transferred outside Nigeria as part of normal operation of the Platform.

Under the NDPA, this is only lawful where the destination offers an adequate level of data protection or appropriate safeguards are in place. Ireland is a European Union member state and is subject to the EU General Data Protection Regulation (GDPR), one of the world's more protective data protection frameworks, which we rely on as the relevant safeguard. By using NairaCheck, you consent to this transfer. We are evaluating a move to Nigeria-based hosting; if and when that happens, this policy will be updated.

5. Who we share data with

Korapay — for processing any payment or payout you are party to.
Your assigned Area Partner — sees your name, phone number, and address for the purpose of verifying your Seller account.
Other users, where relevant to the Platform's purpose — a Seller's business name, category, location, and listings are visible to Buyers by design; a Buyer's identity is not shown to a Seller unless the Buyer chooses to message them.
The Nigeria Data Protection Commission and other regulators or law enforcement, where required by law.

We do not sell your personal data to advertisers or other third parties.

6. How long we keep it

We keep account and transaction data for as long as your account is active, and for a reasonable period afterward to meet accounting, tax, and dispute-resolution obligations (generally up to 6 years, in line with standard Nigerian business record-keeping practice). Commission and payout records for Area Partners, Coordinators, and Patrons are kept for as long as any override might still be owed — which, for a qualified Patron, may be indefinite.

7. Security

PINs are never stored in plain text — they are salted and hashed using PBKDF2 before storage. Session tokens expire automatically after 30 days. Access to administrative functions requires a separate secret key that is not present anywhere in the public-facing app. As required by the Cybercrimes (Prohibition, Prevention, etc.) Act 2015 (as amended), we will report any confirmed breach of this system to the appropriate authority promptly.

8. Your rights

Under the NDPA, you have the right to:

Know what personal data we hold about you;
Correct inaccurate data (most of this you can do yourself by editing your profile);
Request deletion of your account and associated data, subject to Section 6 above;
Withdraw consent for optional processing (such as marketing messages) at any time;
Object to processing that is not necessary for operating your account.

To exercise any of these rights, contact us using the details in Section 12. We will respond within a reasonable time, in line with NDPA requirements.

9. Photos and public listings

Photos you upload for a product, service, or Places listing are stored and displayed publicly as part of that listing. Do not upload a photo of a person (including yourself) unless you intend it to be public, and never upload a photo you do not have the right to share.

10. Children

NairaCheck is not intended for anyone under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

11. Changes to this policy

We may update this policy from time to time, particularly as our hosting arrangements evolve. We will note the "last updated" date above whenever we do.

12. Contact / making a request

AceLearn Services (RC 9609478)
Ijebu-Ode, Ogun State, Nigeria
Email: acelearnservices@gmail.com
WhatsApp: +234 907 533 5194

You may also lodge a complaint directly with the Nigeria Data Protection Commission if you believe your rights under the NDPA have been violated.