Privacy Policy

Oya Alerts is a community-powered emergency coordination platform for Nigeria. Our services may help users notify trusted contacts, verified responders, estates, businesses, community managers, and other approved safety circles during emergencies or safety-related events.

Contact:

• Legal entity: Intrepid Digital Solutions Limited
• Email: legal@oyaa.ng
• Website: https://oyaa.ng

We may collect the following categories of information:

We use information to:

• Manage the waitlist and launch planning.
• Create and manage user accounts.
• Provide emergency coordination features.
• Notify trusted contacts, verified responders, estates, businesses, or approved safety circles.
• Verify responder eligibility and safety status.
• Prevent abuse, fraud, impersonation, harassment, or unsafe behavior.
• Improve reliability, product quality, and safety workflows.
• Provide customer support.
• Send service messages, safety updates, and launch communications.
• Comply with legal, regulatory, audit, safety, and security obligations.

Oya Alerts is designed around incident-scoped location sharing.

We should only collect or share precise location when:

• You trigger an SOS.
• You start a safety check-in.
• You choose to share location with a circle.
• Your organization has a clear, consented work-safety mode.

We do not intend to continuously track users in the background unless a user explicitly turns on a feature that requires it and gives clear consent.

Oya Alerts may let users choose who can receive alerts and what they can see. Visibility may depend on user settings, subscription plan, organization membership, incident type, and safety rules.

Possible circles include:

• Private trusted contacts.
• Estate or community managers.
• Business or fleet managers.
• Verified responders.
• Professional partners.
• Oya Alerts administrators.

We aim to show only the information needed for a person or organization to help safely.

We process personal data based on one or more lawful grounds, including:

• Your consent.
• Performance of a service you request.
• Legitimate safety, security, fraud-prevention, or operational needs.
• Compliance with legal obligations.
• Protection of vital interests during emergencies where applicable.

Where consent is required, we will ask clearly and provide a way to withdraw consent where legally and operationally possible.

We may share information with:

• Trusted contacts selected by the user.
• Verified responders who need incident information to assist.
• Estate, business, fleet, campus, or agency managers where the user belongs to that organization and has consented or where safety rules require it.
• Service providers, such as hosting, analytics, messaging, SMS, email, identity verification, maps, and support tools.
• Legal, regulatory, safety, or law-enforcement authorities where required by law or necessary to prevent serious harm.
• Professional advisers, such as lawyers, auditors, and insurers.

We do not sell personal information.

We keep personal data only for as long as needed for the purposes described in this policy, including safety, legal, audit, dispute, fraud-prevention, and operational needs.

Suggested retention rules for legal review:

• Waitlist data: until launch communication ends or user requests deletion, subject to operational/legal needs.
• Account data: while account is active and for a limited period after closure.
• Incident data: retained long enough for safety review, audit, disputes, abuse prevention, and legal obligations.
• Precise location: minimized and retained only as long as necessary.

We use reasonable technical and organizational measures to protect information, including access controls, server-side secret handling, encryption where appropriate, audit logs, and role-based permissions.

No digital service is completely secure. Users should keep their account credentials private and report suspected misuse quickly.

Subject to applicable law, you may have rights to:

• Be informed about processing.
• Access your data.
• Correct inaccurate data.
• Object to certain processing.
• Restrict processing.
• Request deletion where applicable.
• Request portability where applicable.
• Withdraw consent where processing is based on consent.
• Report concerns to the Nigeria Data Protection Commission or another competent authority.

To exercise these rights, contact legal@oyaa.ng

Oya Alerts is not intended for unsupervised use by children. For schools, campuses, family accounts, or minors, we may require parent, guardian, school, or institution consent depending on the feature and applicable law.

Some service providers may process data outside Nigeria. Where this occurs, we will aim to use appropriate safeguards and reputable providers.

We may update this Privacy Policy as the product evolves. Material changes will be communicated through the website, app, email, or other appropriate channels.

For questions, complaints, or privacy requests, contact legal@oyaa.ng