Privacy policy

9jaCycle is a trading name of THE WILSBAY LIMITED (RC 9955075), a company registered in Nigeria, at Lakeview Park, Orchid Road, Lekki Phase 2, Lagos, Nigeria. We decide how your data is used, which makes us its controller under the Nigeria Data Protection Act 2023. For anything on this page, email soassecurelimited@gmail.com.

• Your phone number. It is how you sign in: we text it a code, which expires after 10 minutes.
• Your profile: the name you choose, a bio and a photo if you add them, and your area — one of six you pick from a list, such as Ikeja or Yaba/Surulere.
• What you sell: photos, descriptions and prices. We keep a fingerprint of each photo to catch the same picture being reused by someone else.
• Orders: what you bought or sold, the amounts, and the delivery or pickup address — the name, phone number, street and landmark you give for it.
• Your bank account if you sell, so we can pay you: the bank, the account number and the name the bank returns for it.
• Messages you send other members, reviews, reports, and disputes with the photos you attach as evidence.
• How you use the shop: items you heart or put in your bag, saved searches, a listing you have started but not finished, and which help tips you have seen.
• A notification token for each phone where you allow notifications, so we can send you order and message alerts.

The app asks for your camera only when you choose to take a photo, and for notifications when you choose to turn them on. Photos you pick from your gallery go through your phone’s own picker, which shares only the ones you pick.

• To run the marketplace you signed up for — signing you in, showing your listings, holding a buyer’s money until delivery is confirmed, paying sellers, and settling disputes. This is the contract between us.
• To keep people safe — catching fraud, reused photos and fake discounts. Messages are checked automatically so phone and account numbers, emails, social handles and foul language are hidden from the reader; a person reads a conversation only when it is part of a report or a dispute. This is our legitimate interest, and yours.
• Because the law requires it — keeping records of payments, and answering lawful requests from regulators or the police.
• Notifications, with your permission, which you can turn off at any time in your phone’s settings.

Other members see your name, area, photo, listings, rating and reviews. When you buy something to be delivered, the seller sees the delivery name, phone number and address so they can send it. Phone and account numbers typed into a chat are hidden.

Companies that do a job for us, each only for that job:

• Paystack — payments, refunds and payouts to your bank.
• Termii and Africa’s Talking — the text messages carrying your sign-in code and order updates.
• Expo and Google Firebase — delivering notifications to your phone.
• Cloudinary — storing and resizing photos.
• Vercel and Neon — the servers and database the service runs on.
• Sentry — reports of errors on our servers, so we can fix them.
• GitHub — keeping encrypted copies of the database for recovery.

Some of these keep data on servers outside Nigeria, currently in the United States and Europe. We use providers that protect it under contract, as the Act requires for transfers abroad.

Your profile and listings for as long as you have an account. Sign-in codes expire after 10 minutes. Encrypted backups are replaced after 30 days, so something deleted is gone from them within that time.

Payment and order records are kept for as long as Nigerian tax and anti-money-laundering law requires, which is usually six years, even after you delete your account.

In the app or on the website, open Account and choose Delete my account, at the bottom. You will not be able to while there is an order that is still open, or a withdrawal on its way to your bank, or money left in your wallet, because that money belongs to someone; finish it first.

Lost the phone your account is on? Email soassecurelimited@gmail.com from any address with the number and we will help. More on the delete your account page.

Under the Act you can ask us for a copy of what we hold about you, to correct it, to delete it, to stop using it for a purpose you object to, or to have it in a form you can take elsewhere. You can withdraw a permission you gave at any time. Email soassecurelimited@gmail.com; we answer within 30 days. If you are not satisfied, you can complain to the Nigeria Data Protection Commission at ndpc.gov.ng.

9jaCycle is for people aged 13 and over. If you are under 18, you may use it only with the permission of a parent or guardian, who should help with anything involving money — paying, and the bank account a seller is paid into. We do not knowingly hold data about anyone under 13, or anyone under 18 without that permission; if you believe we do, email soassecurelimited@gmail.com and we will remove it.

Everything between your phone and our servers is encrypted. Backups are encrypted. Staff sign in with a second step, can see only what their job needs, and what they do is logged. No system is perfect: if a breach affects you, we will tell you and the Commission as the law requires.