Legal
Privacy Policy
Version 1.0 (draft) · Effective 13 October 2026
This policy explains what personal information Owambe Meter collects, why we collect it, who can see it, how long we keep it, and the control you have. We have tried to write it so that it is easy to read.
1. Who we are
Owambe Meter is run by Owambe Meter Limited (company number [REPLACE: company registration number, e.g. RC number]). We are the “controller” of the personal information described here, which means we decide how and why it is used.
Privacy questions and requests: privacy@owambemeter.com. Data protection officer: [REPLACE: data protection officer name or contact]. Regulator registration: [REPLACE: NDPC registration number, or set to an empty string if not required].
The short version
- We collect what the app needs to work: your sign-in details, your profile, what you post, and how you use the app.
- Your profile and posts are public. Messages are private between you and the person you write to.
- We do not sell your personal information, show third-party ads, or track you across other sites.
- You can see, correct and delete your information whenever you like.
2. What we collect
Information you give us
| What | Details |
|---|---|
| Sign-in details | If you use Google: your name, email address, profile photo and Google account ID. If you use Telegram: your Telegram ID, first name, username and profile photo. If you use email: your email address and the name you choose to enter. |
| Profile | Display name, @username, bio and profile photo that you choose to add or change. |
| Posts | Photos and videos you upload, with captions and the style category you choose. |
| Interactions | Votes (Hype or Pass), likes, comments, who you follow, and reports you make. |
| Messages | Direct messages you send, including any look you attach to a message. |
| Spray Notes | Sprays you send and receive (including any message and whether you chose to be anonymous), and your Spray Notes balances and history. |
| Your communications with us | Anything you send to our support, privacy, legal or safety mailboxes. |
Information collected automatically
- Session cookie. A small file that keeps you signed in. See Cookies & Storage.
- Technical data. Your IP address, device and browser type, and the time of your requests. This is recorded in our server logs and used for security and to keep the service running.
- Activity. While the app is open and visible it tells our servers every minute or so that you are active. We keep your “last seen” time and a single record per day showing that you were active. We use this for security and for overall figures such as how many people use the app.
Information from others
Other members create information about you when they like, comment on, follow, vote on, message or report you or your posts.
What we do not collect
We do not collect your precise location. We remove embedded location data (such as GPS coordinates stored inside a photo) from the copies of your photos and videos that we publish. We do not access your contacts or microphone, we do not use advertising identifiers, and we do not currently take payments, so we do not hold payment card or bank details.
3. Why we use your information
We use personal information only for the reasons below. For each reason we rely on one of the lawful bases that data-protection law allows.
| Why | What it covers | Lawful basis |
|---|---|---|
| Run your account and the service | Signing you in, showing your profile and posts, votes, scores and rankings, comments, messages, following, Spray Notes. | To perform our contract with you |
| Process your uploads | Creating resized copies and video streams, removing location data, checking length and format. | To perform our contract with you |
| Keep people safe and the service fair | Reviewing reports, removing content, spotting cheating such as fake accounts and vote manipulation, protecting minors. | Our legitimate interests in a safe service, and legal obligations |
| Security and reliability | Logs, rate limits, detecting attacks and fixing faults. | Our legitimate interests |
| Send you sign-in emails | One-time sign-in codes and links you ask for. | To perform our contract with you |
| Understand how the service is used | Overall figures, such as how many people were active this week. Not used to profile individuals for advertising. | Our legitimate interests |
| Meet legal duties | Responding to lawful requests, keeping the accounting records the law requires, defending legal claims. | Legal obligation, and our legitimate interests |
| Where we ask first | Anything not listed above, for example optional features that need your permission. | Your consent, which you can withdraw at any time |
5. Where your information is stored
Our main systems run in Amazon Web Services’s data centres in US East (N. Virginia), which is outside Nigeria. Photos and videos are also cached at Amazon Web Services delivery locations around the world, including Africa, so they load quickly. When information leaves Nigeria we make sure it stays protected, using contracts with our providers and the safeguards that Nigerian data-protection law requires.
6. How long we keep it
| Information | How long |
|---|---|
| Your account, profile, posts, comments, likes, votes, follows and messages | Until you delete them or your account. Deleting an account removes them straight away. |
| Sign-in codes and links | 15 minutes, then they stop working. They are stored only in scrambled (hashed) form. |
| Original files you upload | Kept privately only to finish processing, and deleted within 30 days. The processed copies stay until you delete the post or your account. |
| Backups | Our database is backed up automatically. Deleted information disappears from backups within 14 days as they age out. |
| Server logs (IP address, technical data) | 90 days. |
| Spray Notes and accounting records | For as long as the law requires accounting records to be kept. After you delete your account these are kept without your name, email or photo. |
| Reports, moderation decisions and the record of what our staff did | While needed to keep people safe, to show how decisions were made, and to meet legal duties or defend claims. The record of staff actions cannot be altered. |
If we are legally required to keep something, or it is needed for a legal claim, we keep it only for as long as that need lasts.
7. Your rights and choices
Under the Nigeria Data Protection Act 2023 and, where it applies to you, other data-protection laws such as the GDPR, you have the right to:
- Access the personal information we hold about you, and get a copy.
- Correct information that is wrong or incomplete. You can edit your profile in the app at any time.
- Delete your information. You can delete your account yourself in a few taps.
- Restrict or object to certain uses, including uses based on our legitimate interests.
- Take your information with you in a common, machine-readable format.
- Withdraw consent at any time where we rely on it. This does not affect what we did before.
- Not be subject to a decision made only by automated means that has legal or similarly significant effects on you. We do not make such decisions.
To use a right that the app does not already let you use yourself, email privacy@owambemeter.com. We may need to confirm that you are who you say you are, and we will answer within 30 days. We will not charge you unless a request is clearly unfounded or excessive. If you are unhappy with our answer you can complain to the Nigeria Data Protection Commission, or to the data-protection authority where you live.
8. Automated processing
Some things happen automatically: scores and rankings are calculated from votes; uploads that pass our technical checks are published without a person reviewing each one; and our systems apply limits to stop abuse. None of these makes a decision that has legal effects on you. Reports are reviewed by people, and you can ask us to reconsider any action we take.
9. Children
Owambe Meter is only for people aged 18 and over. We do not knowingly collect information from anyone younger. If you think a child is using the service or appears in content, tell us at safety@owambemeter.com and we will act quickly, including removing the account or content.
10. How we protect your information
We use encryption in transit and at rest, keep our databases and file storage private, hash sign-in codes, limit staff access, rate-limit and monitor for abuse, and test our systems. No service can be perfectly secure. If a breach affects your personal information we will notify the regulator and affected people as the law requires.
You can help: use a strong, unique password and turn on two-step verification for the Google, Telegram or email account you sign in with.
12. Links to other services
The app can link to other services, for example WhatsApp when you share a post. They have their own privacy practices, which we do not control.
13. Changes to this policy
We will update this policy when our practices or the law change. For significant changes we will tell you in the app or by email before they take effect. The version and effective date are at the top of this page.
14. Contact us
- Privacy and data requests: privacy@owambemeter.com
- Safety and child-safety reports: safety@owambemeter.com