Privacy Policy

At Sideby, we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Sideby mobile application and platform. This policy operates in strict tandem with our Master Terms of Service and Community Standards.

1. Information We Collect

• Profile & Identity Data: Name, email address, profile photo, and authentication details (we utilize secure hashing and never store or request plain-text passwords).
• Financial & Transactional Data: We collect transaction history for your closed-loop utility wallet (capped at $2,000.00 USD). Actual payment processing is handled securely by independent third-party gateways (e.g., Paystack, Stripe), meaning Sideby does not store your raw credit card numbers or bank credentials.
• Location Data (District-Level): To facilitate nearby cost-splitting, we collect location data. However, to protect your privacy and physical safety, Sideby aggregates and displays this as broad regional or district-level zones (e.g., Kubwa, Manassas) rather than broadcasting precise live GPS pinpoints to other users.
• Communications & Metadata: We collect chat logs, match history, and platform interaction metadata.
• Usage & Analytics Data (Firebase Analytics, optional): If you opt in, we use Google’s Firebase Analytics to collect basic app-usage information, such as the screens you view, when you sign up or log in (and by which method), and key actions like creating a split, requesting to join a split, posting in a community forum, or completing onboarding. These events carry coarse details only (for example, a category or number of seats) and never your name, email address, free-text content, or exact location. Events are linked to your Sideby account ID. Firebase Analytics also automatically collects technical information such as device model, operating system, app version, and an app-instance identifier, and may infer your approximate region from your IP address. See Section 5 for how to control this.

2. How We Use Your Information

• Service Delivery: To connect you with nearby users, facilitate cost-splitting matches, and manage your utility wallet.
• Automated Trust Metrics: We analyze platform activity, match completion rates, and peer feedback to generate algorithmic composite trust scores.
• Trust, Safety & Investigations: As outlined in our Terms of Service, we review account activity, metadata, and stored communications to investigate reports of severe cyberbullying, safety threats, phishing, deepfakes, or financial fraud. We do this to ensure community safety without requesting user credentials.
• Product Improvement (with your consent): If you opt in to analytics, we use it to fix bugs and understand which features people use. We do not use analytics data for advertising.
• Legal Compliance: To comply with applicable laws, respond to legal requests, and protect the rights of Sideby and our users.

3. How We Share Your Information

• With Other Users: Once a split request is mutually accepted, we share your basic profile, trust score, and open a private chat room. Your precise location is never shared.
• Third-Party Service Providers: We share necessary data with authorized vendors, such as payment processors (Paystack/Stripe), cloud hosting infrastructure (e.g., Supabase), and, if you opt in, Google (Firebase Analytics) for usage analytics. These vendors are bound by strict data processing agreements. Data processed by these providers may be stored on servers outside Nigeria, including in the United States.
• Law Enforcement & Safety Bodies: In cases involving immediate threats to physical safety, human exploitation, or child endangerment, we will share data with relevant local authorities (e.g., Nigeria Police Force, NAPTIP) and international bodies (e.g., NCMEC), as mandated by our Community Standards.

4. Data Security & Retention

Sideby implements industry-standard administrative, technical, and physical security measures to protect your personal information. We retain your data only for as long as your account is active or as needed to provide you the Services, resolve disputes, and comply with legal obligations. Financial transaction records may be kept longer as required by tax and accounting laws.

5. Analytics Choices & Your Controls

• Analytics is off by default: Firebase Analytics collects nothing unless you accept it in the prompt shown in the app.
• Change your mind any time: Go to Security & Privacy → Data sharing in the app. Turning it off stops collection and resets the app’s analytics data and identifier on your device.
• Cookies on the website: We use essential cookies to keep you signed in and secure. Optional cookies are only used if you choose “Accept all” in the cookie banner. Your choice is stored on your device and you can clear it in your browser settings to be asked again.
• No ads, no sale: Sideby does not run advertising trackers and does not sell analytics data.
• Download or delete your data: In Security & Privacy you can download a copy of your data or permanently delete your account. You can also delete your account from the web without the app at sideby.org/delete-account. Some financial transaction records may be retained as described in Section 4.

6. Global Privacy Rights & Jurisdictional Protections

Depending on your region, you possess specific rights regarding your personal data:

• Nigerian Users (NDPR): You have the right to access, rectify, or erase your personal data, restrict processing, and object to data use under the Nigerian Data Protection Regulations.
• EU & UK Users (GDPR): You have the right to data portability, the "Right to be Forgotten," and the right to lodge a complaint with a supervisory authority. Sideby does not process EU/UK data for automated decision-making that produces legal effects without human oversight.
• US Users (CCPA/CPRA & State Laws): You have the right to request disclosure of data collection practices, request deletion, and opt-out of the "sale" or "sharing" of personal data. Sideby does not sell your personal data to third-party data brokers.

7. Children’s Privacy

Sideby is strictly intended for individuals 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If we become aware that we have collected data from a minor, we will immediately delete that account and data, and report exploitation matters to relevant bodies (e.g., NCMEC) as required.

8. Third-Party Links & External Scams

In accordance with our Community Standards on anti-phishing, Sideby is not responsible for the privacy practices of external websites. If you click a malicious external link or unauthorized third-party payment gateway shared by another user, your data falls outside Sideby’s protection. We actively ban accounts that share such links.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by updating the "Last Updated" date and providing an in-app notification. Continued use of Sideby after changes implies acceptance.

10. Contact Us

For privacy questions or to exercise your rights, email support@sideby.org.