Our Privacy Promise
I DEY VOTE is built on trust. When you use our platform to vote in polls, report civic cases, verify community issues, and earn rewards, you entrust us with your personal data. We take that trust seriously.
Our Commitment: We collect only what we need, use it only for the purposes we state, protect it with industry-leading security, and never sell your personal data to third parties.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights you have over your data. By using I DEY VOTE, you agree to the practices described in this policy.
What Data We Collect
We collect different types of data depending on how you interact with the platform. Here is a breakdown:
Information You Provide Directly
- Account Information: Full name, email address, phone number, date of birth, gender, state, LGA, and ward.
- Verification Documents: PVC (Permanent Voter Card) photos, NIN (National Identity Number) slip, and bank account details for withdrawals.
- Civic Case Content: Text, photos, videos, and location data you submit when reporting or verifying civic issues.
- Communications: Messages you send to our support team, comments on posts, and poll responses.
- Advertising Data: Business information, payment details, and campaign content if you advertise on the platform.
Information Collected Automatically
- Device Information: IP address, device type, operating system, browser type, and screen resolution.
- Usage Data: Pages visited, features used, time spent on the platform, click patterns, and navigation paths.
- Location Data: Approximate location derived from IP address, and precise location when you pin a civic case on the map.
- Cookies & Similar Technologies: See our Cookies Policy for full details.
How We Use Your Data
Every piece of data we collect serves a specific purpose. We do not collect data "just in case." Here is how we use it:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Platform Operation | Name, email, phone, state, LGA, ward | Contract |
| Identity Verification | PVC, NIN, BVN, bank account | Legal Obligation |
| Reward Payments | Bank account, BVN, name | Contract |
| Fraud Prevention | IP address, device info, usage patterns | Legitimate Interest |
| Platform Improvement | Usage data, analytics, feedback | Legitimate Interest |
| Personalisation | Preferences, location, interests | Consent |
| Advertising | Demographics, interests, location | Consent |
| Legal Compliance | All data as required by law | Legal Obligation |
Who We Share Data With
We do not sell your personal data. Ever. We only share data in the following limited circumstances:
Service Providers
- Cloud Hosting: Amazon Web Services (AWS) hosts our servers and databases. Data is stored in AWS regions with strict security controls.
- Payment Processing: Paystack processes all payments and withdrawals. They receive your bank account details and transaction data.
- Analytics: Google Analytics helps us understand platform usage. Data shared is anonymised and aggregated.
- Email & SMS: Twilio and SendGrid handle transactional messages (OTP, withdrawal confirmations, notifications).
- Identity Verification: NIMC (National Identity Management Commission) and INEC databases are consulted for PVC and NIN verification.
Legal & Regulatory
- Law Enforcement: We will disclose data if required by a valid court order, subpoena, or other legal process under Nigerian law.
- Regulatory Bodies: INEC may receive aggregated political advertising data for campaign finance compliance. We do not share individual voter data.
- Election Security: In cases of credible threats to election integrity or national security, we may share relevant data with authorised security agencies.
Business Transfers
If I DEY VOTE is acquired by or merged with another company, your data may be transferred as part of the transaction. You will be notified before your data is transferred and becomes subject to a different privacy policy.
What We Never Do: We do not sell, rent, or trade your personal data to advertisers, data brokers, or political campaigns. Advertisers on our platform target ads based on anonymised demographic segments — they never see your individual data.
Data Security
We implement industry-standard security measures to protect your data from unauthorised access, alteration, disclosure, or destruction:
Encryption at Rest
All stored data is encrypted using AES-256. Sensitive documents (PVC, NIN) are encrypted with additional per-user keys.
Encryption in Transit
All data transmitted between your device and our servers uses TLS 1.3 — the strongest encryption protocol available.
Multi-Factor Authentication
Optional 2FA via SMS or authenticator app protects your account even if your password is compromised.
Access Controls
Only authorised personnel can access user data, and all access is logged and audited. Role-based permissions limit exposure.
Security Certifications
- ISO 27001 certified information security management system
- Annual penetration testing by independent cybersecurity firms
- Regular vulnerability scanning and patch management
- Staff security training and background checks
Breach Notification: In the unlikely event of a data breach affecting your personal information, we will notify you within 72 hours and report to the Nigeria Data Protection Commission (NDPC) as required by law.
Data Retention
We retain your data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law:
- Account Data: Retained for the lifetime of your account plus 2 years after closure (for legal and fraud prevention purposes).
- Verification Documents: PVC and NIN images are retained for 3 years after account closure, then securely deleted. BVN is retained for 7 years per financial regulations.
- Civic Cases: Retained indefinitely as part of the public civic record, unless you request deletion and the case has not been verified by other users.
- Comments & Poll Votes: Retained for 5 years. Anonymised after 2 years for analytics purposes.
- Server Logs: Retained for 90 days, then anonymised or deleted.
- Payment Records: Retained for 7 years per Nigerian tax and financial regulations.
Your Data Rights
Under the Nigeria Data Protection Act 2023 and international standards, you have the following rights over your personal data:
- Right to Access: You can request a copy of all personal data we hold about you. We will provide it within 30 days in a machine-readable format.
- Right to Rectification: You can correct inaccurate or incomplete data at any time through your profile settings or by contacting support.
- Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data. We will comply unless legal obligations require us to retain it.
- Right to Restrict Processing: You can request that we stop processing your data for specific purposes (e.g., marketing) while retaining the data.
- Right to Data Portability: You can request your data in a structured, commonly used format to transfer to another service.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing purposes at any time.
- Right to Lodge a Complaint: If you believe we have violated your rights, you can file a complaint with the Nigeria Data Protection Commission (NDPC).
How to Exercise Your Rights: Email [email protected] with your request, including your registered email address and User ID. We will verify your identity before processing any request. Most requests are fulfilled within 30 days.
Children's Privacy
I DEY VOTE is not intended for children under the age of 18. We do not knowingly collect personal data from minors. If we discover that a user under 18 has created an account, we will:
- Immediately suspend the account.
- Delete all associated personal data within 30 days.
- Forfeit any earned points, as our rewards program is strictly for adults.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at [email protected].
International Data Transfers
I DEY VOTE is operated from Nigeria, and your data is primarily stored on servers located within Nigeria and the African region. However, some of our service providers (e.g., AWS, Google, Twilio) may process data in other countries:
- United States: Google Analytics and Twilio may process data on US servers. We ensure these transfers are protected by Standard Contractual Clauses (SCCs) approved by the NDPC.
- European Union: For EU users, all transfers comply with GDPR adequacy decisions or SCCs.
- Data Localisation: Sensitive verification data (PVC, NIN, BVN) is stored exclusively on Nigerian servers and is not transferred internationally.
Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices, technology, or legal requirements. When we make material changes:
- We will update the "Last Updated" date at the bottom of this page.
- We will notify all active users via email and in-app notification at least 14 days before material changes take effect.
- We will request renewed consent if the changes affect the legal basis for processing your data.
Continued use of I DEY VOTE after the effective date of changes constitutes acceptance of the updated policy.
Frequently Asked Questions
You can browse public content anonymously. However, to vote in polls, report civic cases, earn points, or withdraw earnings, you must register with your real name and verify your identity. This is a legal requirement to prevent fraud and ensure the integrity of civic data.
Civic cases are public by default so that communities can verify and act on them. Your name and profile photo appear on cases you report. Your exact home address is never shown — only the general location you pin on the map. You can request anonymisation of sensitive cases by contacting support.
No. Political parties and advertisers on I DEY VOTE can target ads based on broad demographic segments (e.g., "users aged 25–34 in Lagos State"), but they never receive your individual name, email, phone number, or voting history. We are a neutral platform and do not provide voter data to any party.
Go to Settings → Account → Delete Account. You will have 30 days to cancel the deletion. After that, your personal data is permanently removed from our active systems. Some anonymised data (e.g., poll vote counts) may remain for statistical purposes. Financial records are retained for 7 years per legal requirement.
If I DEY VOTE ceases operations, all personal data will be securely deleted within 90 days of closure, except where legal obligations require retention. Users will be given 60 days' notice to withdraw any remaining earnings and download their data before deletion begins.
Yes. Your BVN is encrypted at rest and in transit. We only use it to verify that your bank account belongs to you (name matching) and for anti-fraud purposes. We do not store your full BVN in plain text — it is hashed and tokenised. Even our staff cannot read your BVN in its original form.
Contact Us
If you have questions, concerns, or requests regarding your privacy or this policy, our Data Protection Officer and privacy team are here to help:
- Data Protection Officer: [email protected]
- General Privacy Questions: [email protected]
- Data Subject Requests: [email protected] (include your User ID for faster processing)
- Security Incidents: [email protected]
- Postal Address: Data Protection Officer, I DEY VOTE, 12 Civic Tower, Admiralty Way, Lekki Phase 1, Lagos, Nigeria
Regulatory Authority: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe we have mishandled your personal data. Visit ndpc.gov.ng for more information.
Last Updated: June 4, 2026 | Version: 1.0 | Effective Date: June 4, 2026
This policy is reviewed quarterly. Users will be notified of material changes at least 14 days in advance via email and in-app notification.