Privacy Policy

Who controls your information

Glemad is the controller of personal information processed to operate Nabtap. If you live in Africa, the controller is Glemad MS Limited in Nigeria. If you live elsewhere, the controller is Glemad Inc. in the United States. The Glemad companies may process information for each other under appropriate safeguards when they help provide Nabtap.

Glemad MS Limited can be contacted by post at Plot 15 Orchid Road, Lekki, Lagos, Nigeria. Glemad Inc. can be contacted by post at 30 N Gould St, Ste N, Sheridan, Wyoming 82801, United States. Public legal enquiries may be sent to [email protected]. Privacy requests should use the Nabtap Contact Centre so they can be verified and tracked.

This Policy applies to the Nabtap app, website, support, safety, advertising, payment and creator services in every region where Nabtap is available. Stronger rights under the law where you live continue to apply. A third-party service may be responsible for its own processing when its notice says so.

Information we collect

• Account and profile information, including contact details, username, date of birth, interests and settings.
• Content and communications, including posts, media, live broadcasts, replies, messages and related metadata.
• Activity such as follows, searches, views, likes, saves, shares, reports and feature use.
• Device, app, browser, language, approximate location, network, cookie or similar identifiers, crash and diagnostic information.
• Payment, tax, business and identity-verification information when you use relevant features. Payment providers may keep full card or bank details instead of Nabtap.
• Support requests, surveys, appeals and information you choose to provide.

Where information comes from

• Directly from you and from your use of Nabtap.
• From people who interact with, mention, tag, report or share your content.
• From contacts only when someone chooses contact syncing or discovery and the feature is available.
• From payment, verification, security, analytics and business partners where permitted by law.
• From public sources and authorities when needed for safety, rights or legal compliance.

Why we use it and our legal bases

• To provide the service and transactions you request, based on our contract with you.
• To personalize feeds, suggestions and product features, based on consent where required and otherwise on our legitimate interest in providing a relevant service. We assess those interests against your rights before relying on them.
• To secure accounts, prevent fraud, enforce rules and protect people, based on legal duties and our legitimate interests in safety and integrity.
• To process purchases, payouts, tax and accounting records, based on contract and legal obligations.
• To communicate about the service and support users, based on contract or legitimate interests. Direct marketing and optional tracking use consent where the law requires it.
• To measure performance, diagnose faults, research and improve Nabtap, based on legitimate interests or consent where required.
• To respond to valid legal process and exercise or defend legal claims, based on legal obligations and legitimate interests.

Recommendations and automated tools

Nabtap uses activity, content, account and device signals for different automated purposes. Recommendation profiling changes the order and discovery of content. Advertising profiling changes which advertisements may be selected. Safety and fraud systems prioritize review and may apply temporary protections. Enforcement systems may help identify suspected rule violations.

You can influence recommendations through follows, feedback, a chronological Following feed and available settings. You can turn off available advertising personalization choices. When an eligible enforcement decision affects your content, features or account, the notice explains the action and available appeal. Qualifying automated decisions can be challenged and receive human intervention.

A content recommendation does not by itself produce a legal or similarly significant effect. Nabtap will not make a solely automated decision that produces a legal or similarly significant effect unless a lawful exception applies and the required safeguards are available.

When information is shared

• With the audience you choose. Public content can be viewed, copied, embedded, quoted or reshared by others.
• With service providers that host, secure, measure, support, verify or process payments for Nabtap under contract.
• With a partner when you request an integration or transaction.
• Within the Glemad group where necessary to operate and protect the service.
• With an acquirer during a merger, financing, reorganization or sale, subject to confidentiality and applicable law.
• With authorities, rights holders or others when disclosure is legally required or reasonably necessary to prevent serious harm, investigate fraud, enforce rights or defend a claim.

Advertising and sale of information

Nabtap may use activity on Nabtap and general account or device information to select and measure advertising where permitted. Activity supplied by partners is a separate setting and is off by default. We do not use private-message content or identity-document images for advertising, and we do not profile a person we know with reasonable certainty is under 18 for advertising.

Turning off personalized ads stops the use of the covered personalization signals for future ad selection, but it does not remove advertisements. Withdrawing consent does not affect processing that was lawful before withdrawal. We do not sell personal information for money. Where local law treats targeted-advertising disclosures as a sale or sharing, you can use the available opt-out control.

Retention, deletion and security

Account, profile and settings information is normally kept while the account is active. An account scheduled for deletion has a 30-day recovery period before the deletion process runs. Content that you delete is removed from active product systems and associated media is queued for deletion. Temporary data-export downloads expire after seven days.

Raw identity documents are kept for no more than 90 days while a verification request remains open and are scheduled for deletion within seven days after a decision. Verification results and access-audit records may be kept longer to prevent fraud, handle disputes and prove compliance.

Transaction, tax, consent, security, enforcement and legal records are kept for the period required by law or reasonably needed for accounting, fraud prevention, disputes and legal claims. Technical backups expire on their normal protected rotation. When information is no longer needed, we delete or de-identify it.

We use access controls, encryption and monitoring appropriate to the sensitivity of the information. No system is completely secure, so protect your credentials and report suspected compromise promptly.

International transfers

Information may be processed outside your country, including in the United States where Glemad Inc. or service providers help operate Nabtap. The destination depends on the service involved. Recipients may provide hosting, content delivery, security, analytics, support, identity verification, communications or payment services.

For a transfer from Nigeria, we record the transfer basis and assess the protection available to the information. Depending on the transfer, the safeguard may be an applicable law, binding corporate rules, contractual clauses, an approved code or certification mechanism, or another condition permitted by Nigerian law. You may ask the Contact Centre for information about the applicable destination, recipient category and safeguard.

Your choices and rights

• Control profile visibility, interactions, discoverability, contact syncing, recommendations and advertising through available settings.
• Access, correct, download or delete information and withdraw consent through Settings and privacy or the Contact Centre.
• Object to or restrict certain processing and request review of an automated decision where local law provides that right.
• Complain to the Nigeria Data Protection Commission or the regulator in your country. You may also challenge our response where local law permits.

Children and younger users

Nabtap is not for anyone below the minimum age in the Terms. We use date of birth and country to apply eligibility rules and age-appropriate defaults. If we learn that an ineligible child created an account, we may suspend it and delete the information, subject to safety and legal retention needs.

Nabtap requires every account holder to be at least 18. We do not seek consent from a child or a parent to create an account. If we learn that we collected a child’s information through an ineligible account, we restrict the account and delete the information unless a narrow legal, safety or claims-retention duty requires us to keep it.

The Youth Privacy Notice explains how we handle information relating to an ineligible younger person. People in Nigeria should also read the Nigeria Privacy Notice.

Changes to this document

We may update this document to reflect changes to Nabtap, the law or the way we protect the community. When a change is material, we will provide notice appropriate to its significance and request fresh acceptance where required.

Contact

Questions, complaints and rights requests can be sent through the Nabtap Contact Centre. Public legal enquiries may be sent to [email protected]. Formal notices must use the method stated in the relevant transaction or an official company record.