Trustab NGPrivacy Policy
Trustab NG is free to use. We do not process payments inside the app, do not move or hold money, and do not offer paid subscriptions or in-app purchases.
1. Who we are
Trustab NG ("Trustab", "we", "us") provides a service that lets you record informal IOUs, track shared bills ("Pots"), and build a portable Trust Score you can choose to share. This policy explains what we collect and how we handle it. For privacy questions, contact privacy@trustabng.com.
2. Information we collect
| Category | Examples |
|---|---|
| Account & identity | Phone number (used to sign you in via a one-time code); your name, email address, profile photo and country — provided by you or, if you use Sign in with Apple / Google, taken from that sign-in. |
| Identity verification (KYC) — optional | If you choose to verify your identity to raise your Trust Score ceiling: legal name, date of birth, nationality, residential address, and government-ID type/number. This is processed by our verification providers (see Section 4); we store the verification result and a hashed reference, not your raw ID image. |
| Records you create | IOUs (amounts, descriptions, due dates, and the name/phone number of the other person), shared Pots (members, bills, contributions), settlements, confirmations, disputes, and vouches. |
| Contacts | Only the single contact you pick when adding someone to an IOU or Pot. We do not upload or store your address book. |
| Device & technical | A push notification token (Apple APNs or Google FCM), app version, device model/OS, and basic diagnostic/crash data. |
| Trust Score & credentials | Your computed Trust Score and any verifiable credential you choose to issue or share with a third party. |
3. How we use your information
- To create and secure your account and sign you in (one-time codes).
- To record and display your IOUs, Pots and balances, and to notify the other party so they can confirm or dispute a record.
- To compute your Trust Score from your activity, and to issue a shareable credential only when you ask us to.
- To verify your identity, when you choose to, through a regulated KYC provider.
- To send you reminders and notifications you've allowed (you control these in Settings).
- To keep the service safe, prevent fraud and abuse, and meet legal obligations.
4. Who we share it with
We do not sell your personal data. We share it only with service providers who process it on our behalf, and only with parties you choose:
| Recipient | Purpose |
|---|---|
| Supabase | Secure database, authentication and backend hosting. |
| Twilio | Sending one-time verification codes and notifications by SMS / WhatsApp. |
| Dojah, Smile Identity, Onfido | Government-ID / identity verification (KYC). The provider used depends on your country. |
| Apple (APNs) | Delivering push notifications to iPhone. |
| Google (Firebase Cloud Messaging) | Delivering push notifications to Android. |
| People & organisations you choose | When you share your Trust Score or a credential (e.g. with a lender or landlord), they receive only what you disclose, and only with your consent. You can revoke a shared credential at any time. |
We may also disclose information where required by law or to protect the rights and safety of our users.
5. Legal basis & consent
We process your data to perform our agreement with you (providing the service), with your consent (e.g. identity verification, notifications, sharing your score), and to meet legal obligations. You can withdraw consent at any time by changing Settings or deleting your account.
6. Data retention
We keep your data for as long as your account is active. When you delete your account we remove your profile, records, Pots, vouches, disclosures, Trust Score, KYC data and device tokens (see Section 8). Where a record involved another person, that person's own copy of the shared record may remain in their ledger, with your link to it removed. We may retain limited information where the law requires.
7. Your rights
You can access, correct, export, or delete your information, and object to or restrict certain processing. To exercise these rights, use the in-app controls or email privacy@trustabng.com.
8. Deleting your account
You can delete your account and associated data at any time — from Profile → Delete account in the app, or by request. Full instructions and the web request route are here: trustabng.com/delete-account.html.
9. Security
Data is encrypted in transit (TLS) and at rest. On your device, authentication tokens and secrets are stored in the platform secure store (iOS Keychain / Android EncryptedSharedPreferences), and sensitive screens (identity capture, one-time codes, and your Trust Certificate) are protected from screenshots on Android. No method of transmission or storage is perfectly secure, but we work to protect your information.
10. Children
Trustab NG is intended for people aged 18 and over. We do not knowingly collect data from anyone under 18.
11. International transfers
Some of our providers process data outside your country. Where that happens, we rely on appropriate safeguards consistent with applicable data-protection law (including Nigeria's NDPA).
12. Changes
We'll update this policy as the service evolves and revise the "Last updated" date above. Material changes will be highlighted in the app.
13. Contact
Trustab NG — privacy@trustabng.com
← Back to trustabng.com