Privacy Policy

Truust (“we”, “us”, “our”) runs the Truust app and this website. Truust is a social marketplace where people buy and sell with built-in escrow and delivery by nearby riders.

This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. We handle your information in line with the Nigeria Data Protection Act 2023 (NDPA).

We collect only what we need to run Truust. Depending on how you use it, that includes:

• Account details: your phone number, name, username and profile photo.
• Listings and posts: photos, descriptions, prices, stories and comments you share.
• Messages: chats with other users, including offers and escrow requests.
• Transaction details: amounts, escrow status, wallet balance and payout information. Card and bank details are handled by our payment partners.
• Delivery details: pickup and drop-off addresses, rider bids and delivery status.
• Location: your location when you use delivery features, so we can match you with nearby riders.
• Device and usage data: device type, operating system, app version, IP address, crash reports and your push notification token.
• Things you send us: anything you submit through our waitlist or contact channels.

• To create and secure your account, including verifying your phone number.
• To run the marketplace: showing listings, enabling chat and connecting buyers and sellers.
• To hold and release escrow payments, run your wallet and process payouts.
• To match deliveries with nearby riders and let buyers track them.
• To resolve disputes, which may involve reviewing the chat history, photos and delivery records for that deal.
• To send you notifications about your deals, messages and account.
• To detect and prevent fraud, scams and misuse of Truust.
• To meet our legal obligations and to improve the app.

Under the NDPA we rely on the following grounds, depending on the activity:

• Contract: we need your information to provide the service you signed up for.
• Legitimate interests: keeping Truust safe, preventing fraud and improving the product.
• Legal obligation: where the law requires us to keep or share certain records.
• Consent: for things like location access and push notifications. You can withdraw consent at any time in your device settings.

We do not sell your personal information. We share it only in these ways:

• Other users: your profile, listings and posts are visible to others. A person you trade with sees the details needed to complete the deal.
• Riders: pickup and drop-off details needed to complete a delivery.
• Service providers: companies that help us run Truust, such as payment processing (Monnify), cloud hosting, authentication and notifications (Google Firebase) and image storage (Cloudinary). They may only use your information to provide their service to us.
• Authorities: where the law, a court or a regulator requires it, or to protect the rights and safety of our users.
• Business changes: if Truust is merged or acquired, your information may be transferred, and we will tell you first.

We keep your information while your account is active and for as long as needed afterwards for legal, financial and dispute-handling reasons. When you delete your account, we remove or anonymise your personal information, except records we are required to keep. See how to delete your account.

Under the NDPA you have the right to:

• ask for a copy of the personal information we hold about you;
• ask us to correct information that is wrong or out of date;
• ask us to delete your information, or restrict how we use it;
• object to certain uses of your information;
• withdraw your consent where we rely on it;
• ask for your information in a portable format.

To use any of these rights, email truustapp@gmail.com. You also have the right to complain to the Nigeria Data Protection Commission.

We use reasonable technical and organisational measures to protect your information. No system is completely secure, so please keep your phone and verification codes private, and tell us right away if you think your account has been accessed by someone else.

Truust is for people aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a child has given us their information, contact us and we will delete it.

Some of our service providers store or process information outside Nigeria. When that happens, we take steps to make sure your information is protected in line with the NDPA.

We may update this policy from time to time. When we make an important change we will tell you in the app or by another suitable method, and update the date at the top of this page.

Questions about this policy or your information? Email truustapp@gmail.com or visit our contact page.