Privacy Policy

1. Who we are

Nafil Estates ("Nafil Estates", "we", "us", or "our") operates the Nafil Estates mobile application (the "App"), a gate access and estate management platform used by residents, security personnel, and estate administrators of participating gated communities in Nigeria. This policy explains what information we collect through the App, why we collect it, and the choices you have.

By using the App, you agree to the collection and use of information in accordance with this policy.

2. Information we collect

We collect information you provide directly, and information generated by using the App:

• Account information: email address, password (stored encrypted by our authentication provider, never in plain text), full name, phone number, unit/apartment number, and profile photo.
• Estate association: which estate and unit you're linked to, and your role (resident, security, or admin).
• Visitor and household data: names, phone numbers, and vehicle plate numbers of visitors and household members you register for gate access, and photos for household/frequent-visitor cards.
• Gate activity: visitor pass codes, check-in and check-out timestamps, and the security officer who processed each check-in, recorded when a resident's pass or code is used at the gate.
• Issue reports: descriptions and photos you submit when reporting a maintenance or estate issue.
• Device and notification data: a push notification token so we can deliver announcements and alerts to your device, and the platform (iOS/Android) your device runs.
• Camera and photos: the App requests camera access to scan visitor QR codes, and photo library access so you can set a profile picture or attach photos to an issue report. We only access these when you actively use those features.

3. How we use your information

• To create and maintain your account, and verify your identity when you sign in.
• To generate, validate, and log visitor passes and gate check-ins for your estate.
• To route issue reports and announcements to the right residents, security officers, or admins.
• To send push notifications for announcements, emergency alerts, and updates on issues or passes you're involved in.
• To maintain the security of the App and the estates that use it, including detecting misuse of the platform.
• To respond to support requests you send us.

4. Who can see your information

Information is scoped to your estate. Residents can see their own data and data they explicitly generate (visitor passes, household members, their own issues). Security officers at your estate can see visitor passes, household member codes, and gate check-in logs, so they can verify who's allowed through the gate. Estate admins can see resident directory information, issue reports, and announcements for their estate. We do not sell your personal information, and we do not share it with third parties for their own marketing purposes.

We use third-party service providers to run the App, including Supabase for authentication, database, and file storage, and push notification services (Apple Push Notification service and Firebase Cloud Messaging) to deliver alerts. These providers process data on our behalf and are not permitted to use it for their own purposes.

5. Data retention

We retain your information for as long as your account is active with an estate. Visitor passes and gate logs are kept as an access record for the estate. If you request account deletion, we permanently delete your profile and associated personal data within 30 days, except where we're required to retain certain records (for example, gate logs already tied to a security incident) for legal or safety reasons.

6. Your choices

• Access and correction: you can view and update most of your profile information directly in the App.
• Account deletion: email support@nafilestates.com to request deletion of your account and personal data. See our Support page for details.
• Notifications: you can disable push notifications at any time from your device settings.
• Camera and photos: you can revoke camera or photo library permissions from your device settings; the App will ask again only when you use a feature that needs them.

7. Data security

We use industry-standard measures to protect your information, including encrypted connections between the App and our servers, and access controls that restrict data to your own estate. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

8. Children's privacy

The App is intended for use by adult residents, security personnel, and estate administrators. We do not knowingly collect personal information directly from children. A resident may register a household member of any age (for example, a child) for gate access; that information is provided and controlled by the resident acting as the account holder.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll update the "Last updated" date above and, where appropriate, notify you through the App.

10. Contact us

Questions about this policy or how we handle your data can be sent to support@nafilestates.com.