Privacy Policy

1. Who we are

Qozob decides how and why your personal information is used, so we are the “data controller”. For any privacy question, request or complaint, contact our data protection contact at support@qozob.com (subject: “Privacy”).

2. Information we collect

When you create an account or sign in

• Your email address and password (passwords are stored in scrambled form; we never see them).
• If you choose Sign in with Google: your name, email address and profile picture from your Google account. We do not receive your Google password or access your Gmail, contacts, files or any other Google data.
• Details you enter at sign-up, such as your name, phone number, address, state and country.

When you use the map

• Your device location, only if you allow it in your browser, to show nearby stations and distances. Used this way, your location stays on your device. To show adverts for your area, we send only a rough position (rounded to about 1 km) to look up your Local Government Area. It is used for that moment only and is not stored or linked to your account.
• Prices, queue reports and pump-accuracy ratings you submit.
• When you are signed in and submit a price, we record your location at that moment, how accurate it was and your distance from the station, together with the report. We use this to check the price came from someone at the station, to stop fake prices and to award reward coins. It is never shown publicly.

If you join Qozob Rewards (optional, 18+ only)

• Identity: your full legal name, date of birth, ID type, ID number and a photo or scan of the ID. We keep only the last 4 characters of the ID number plus a one-way code (a “hash”) that lets us spot the same ID being used twice. The ID photo is deleted as soon as it has been reviewed.
• Phone number, confirmed with a one-time SMS code.
• Bank details: bank name, account number and account name, so we can pay prizes. The account number is encrypted.
• Your coins, rankings, strikes, review decisions and prize payment records.

We do not ask for your BVN, card details, PINs or passwords for any bank, and we will never ask for them by phone, SMS or email.

If you are a station owner or manager

• Business details you submit to claim a station: applicant name, phone number, company name, CAC registration number and your CAC document.
• Station details and logos you upload.

If you subscribe to email updates (optional)

• Your email address, and optionally your name, state and LGA.
• A record of your consent: when you agreed, where (for example the sign-up page) and the exact wording you agreed to, and when you confirmed or unsubscribed.
• Delivery events from our email provider, such as bounces and spam complaints, so we stop emailing addresses that do not want or cannot receive our emails.

Automatically

• Essential cookies and browser storage (see section 10).
• Counts of how many times each advert is shown or clicked. These counts are not linked to you.
• Basic technical logs (such as browser type, IP address and error reports) kept by our hosting providers to keep the service secure and working.

3. Why we use it and our legal basis

The NDPA only allows us to use personal information when we have a lawful reason. Ours are:

We do not sell your personal information. Adverts are chosen only by area (your LGA or state at that moment); we do not build advertising profiles about you, and advertisers never receive your personal information.

4. Automated checks

When you submit a price, our system automatically checks things like your distance from the station, how often you have updated, and whether the price is far from nearby prices. These checks decide whether coins are awarded straight away, held for a person to review, or not awarded. They never stop your price from being published. Suspicious cases are reviewed by a person before any strike is given, and you can ask for a human review of any decision about your coins or prizes by emailing support@qozob.com.

5. Google user data

If you sign in with Google, we only request your basic profile (name, email address and profile picture) to create and identify your Qozob account. Qozob's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not share Google user data with third parties except the service providers listed below that run Qozob for us, and we never use it for advertising.

6. Who can see your information

• Everyone: station names, locations, prices, queue status and average ratings. Price updates are shown without your name or email. Rewards leaderboards show only your first name and the first letter of your surname (for example, “Chinedu O.”), your coins and active days.
• Only you and authorised Qozob staff: your account details, station claims, CAC documents, Manager requests and Rewards verification details. ID photos and CAC documents are stored privately and can only be opened by authorised administrators. Staff see only the last 4 digits of bank account numbers unless the full number is needed to pay you, and every such view is logged.
• Service providers who run Qozob for us and may only use your information to provide their service: Supabase (database, sign-in, SMS codes and file storage), Vercel (website hosting), Google (Maps, places search and Google sign-in), Resend (sending emails) and the SMS provider connected to our sign-in system (sending one-time codes).
• Banks, to transfer prize money to you.
• Authorities, only where the law requires it, or to report suspected fraud or crime.

7. Transfers outside Nigeria

Our service providers store and process information on servers outside Nigeria (for example in the United States and the European Union). We only use providers that commit, in their data processing terms, to protect personal information and keep it secure, and we rely on the transfer safeguards the NDPA allows. You can ask us for more information about these safeguards at support@qozob.com.

8. How we protect it

• Information is sent over encrypted connections (HTTPS).
• Database rules ensure each person can only see and change what they are allowed to, and administrator actions are checked by the database itself.
• Bank account numbers are encrypted; ID numbers are kept only as the last 4 characters and a one-way code; ID photos are deleted after review.
• Sensitive actions (approving IDs, revealing bank details, paying prizes) are recorded in an audit log.
• If a data breach is likely to put your rights at risk, we will report it to the Nigeria Data Protection Commission within 72 hours of becoming aware of it, and tell you without delay, in plain language, if the risk to you is high.

9. How long we keep it

10. Cookies and browser storage

We only use storage that is needed for Qozob to work or to remember choices you make:

• Sign-in cookies that keep you logged in securely.
• Your preferences saved in your browser: light or dark theme, whether the LGA boundaries are shown, and your saved stations.

We do not use advertising or tracking cookies. If we ever add analytics or advertising cookies, we will ask for your permission first, with an equally easy way to say no.

11. Your rights

Under the NDPA you can ask us to:

• tell you what personal information we hold about you and give you a copy;
• correct information that is wrong or incomplete;
• delete your information, or restrict how we use it;
• give you your information in a common electronic format, or send it to another organisation (portability);
• stop using your information for a particular purpose. You can always stop marketing emails, using the unsubscribe link in any email or the switch in your dashboard settings, and we stop straight away;
• withdraw any consent you gave (this does not affect what we did before);
• have a person review a decision made by our automated checks.

Email support@qozob.com from the address linked to your account. We may ask you to confirm your identity, and we will respond within 30 days. You can also revoke Qozob's access to your Google account at any time at myaccount.google.com/permissions.

If you are not happy with how we handle your information, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC).

12. Children

Qozob is not for children under 13. If you are 13 to 17, you may use Qozob only with the permission of a parent or guardian. You must be 18 or older to join Rewards, and we check this using your ID. If we learn that we hold information about a child without proper consent, we will delete it.

13. Changes to this policy

If we make important changes, we will update the date at the top of this page and, where appropriate, let you know in the app or by email before the change applies. The Rewards Official Rules also explain how Rewards information is used.

14. Contact us

Questions about your privacy? Email support@qozob.com.