Privacy Policy

1. Who we are

Chedo is a product of FEZZ Core Limited (RC 9935297) ("we", "us"). We follow the Nigeria Data Protection Act 2023 and are registered with the Nigeria Data Protection Commission (NDPC) as a data controller and processor of major importance, registration number NDPC/DCP/15838.

Each estate or property that uses Chedo decides who it adds and what it records about its residents, staff and visitors. For that information the estate is the data controller and we process it on the estate's behalf. For your Chedo account itself, and for information we need to run and bill the service, we are the data controller.

2. Information we collect

• Residents and staff: name, phone number, email address (if given), the flat or house you are linked to, your role, and your notification choices.
• Visitors and riders: the name, phone number and vehicle plate a resident or gate officer enters for a visit or delivery, and the time of entry and exit.
• Gate records: entries, exits, walk-in requests and how they were answered, emergency (panic) alerts, and which gate officer recorded them.
• Payments: the amount, date, flat and payment reference for dues, levies and Chedo subscriptions. Card and bank details are entered on Paystack's pages and are never stored by Chedo.
• Messages: notices, delivery updates and other messages sent through Chedo, and whether they were delivered.
• Photos and voice notes: a resident's own photo and photos of family members, which the gate sees when their code is used, and any photo or voice note added to a request to the estate office.
• Location: a map pin for an estate's gate or a home, only if one is set. The app uses your phone's location only when you ask it to place the pin.
• Technical information: device and browser type, sign-in times and basic logs needed to keep the service secure and working. If you use the Chedo app from Google Play or the App Store, also an identifier your phone gives us so we can send you notifications.

3. How we use it

• To let residents invite visitors and let gate officers check them in and out.
• To send alerts and updates by app notification, WhatsApp, SMS and email, such as a visitor at the gate, a delivery, an estate notice, a dues reminder or a receipt.
• To let estates bill and collect dues and levies, and to issue receipts.
• To keep accounts secure, prevent misuse and investigate incidents.
• To provide support and to improve Chedo.

We do not sell personal information and we do not use it for advertising.

4. Legal basis

We process information to provide the service you or your estate signed up for (contract), to meet legal and financial-record duties (legal obligation), for estate security and fraud prevention (legitimate interests), and where needed with your consent, which you can withdraw at any time.

5. Who we share it with

Within an estate, only the people who need it see it: for example gate officers see who is expected, and the estate office sees residents, gate records and payments. One estate never sees another estate's information.

We use trusted service providers to run Chedo, under contracts that protect your information:

• Hosting and database providers, to store information and run the service.
• A licensed payment provider, to take payments.
• Messaging providers, to send WhatsApp messages, text messages and emails.
• An AI service, to understand requests residents type to Chedo on WhatsApp (the message text only, which is not used to train its models).

You can ask us for the names of these providers at any time.

We may also share information if the law requires it, or to protect someone's safety.

6. International transfers

Some of our providers store or process data outside Nigeria. Where that happens we rely on safeguards recognised under the Nigeria Data Protection Act, such as contractual protections.

7. How long we keep it

Chedo sets these periods for every estate:

• removes visitors' names, phone numbers and plates 90 days after the visit;
• keeps gate entry and exit records for 1 year;
• keeps the estate office's change history for 2 years;
• keeps payment records for as long as financial and tax law requires.

When a resident is removed from an estate, their access ends straight away. Their account information is deleted on request, except records we must keep by law.

You can ask us to delete your account in the Chedo app (More, then Your data) or at chedo.app/delete-account. We confirm with you by phone, then delete it within 7 days. Payment records an estate must keep by law, and its gate records for the periods above, stay with your name removed.

8. Your rights

You can ask to see the personal information we hold about you, correct it, delete it, restrict or object to how it is used, or receive a copy. You can turn off WhatsApp, SMS and email messages in the app, and every email has an unsubscribe link.

If your information was added by your estate, you can also ask your estate office. To make a request, email contact@chedo.app. You can also complain to the Nigeria Data Protection Commission.

9. Security

Information is encrypted in transit, access is limited by role, every estate's data is kept separate, and changes in the estate office are recorded. No system is perfectly secure, but we work to protect your information and will tell affected people and the regulator if a serious breach happens.

10. Children

Chedo accounts are for adults. Estates should not create accounts for children under 18.

11. Changes and contact

We may update this policy. If the changes are significant we will tell users in the app or by email.

Questions: contact@chedo.app or 0704 922 0705.