Privacy policy

1. Data we collect

Data you give us

• Account details: your name, email address, phone number (optional) and password. We store your password only in hashed form.
• Sign in with Apple or Google: if you choose this, we receive your name and email address from that provider. We do not receive your Apple or Google password.
• Profile photo: if you upload one.
• Where you are based: the state and country you select when you set up your profile. This is what you tell us, not your device location.
• Property types you are interested in: the kinds of property you select, so we can show you opportunities that match.
• Investment records: the properties you register interest in, the stage of each deal, payment amounts, and the receipts and documents that you or we attach.
• Inspection bookings: the property, date and time you choose.
• Messages to the assistant: the questions you type in the in-app chat, the replies, the property each chat is about, and any rating or note you give a reply.
• Community posts and enquiries: anything you post or send to us.
• Saved properties: your watchlist and your alert settings.

Data we collect automatically

• Device push token: so we can send you notifications you turned on.
• Crash and error reports: technical data about app errors (device model, operating system, app version).
• Usage analytics: which screens and features are used, so we can improve the app.
• Security logs: IP address and time of sign-in attempts, to stop abuse.

We do not collect your precise location, contacts, or payment card numbers. We do not sell your personal data, and we do not use it for third-party advertising.

Biometric sign-in

If you turn on Face ID or fingerprint sign-in, the check happens on your device. Your face or fingerprint data never leaves your device, and we never receive or store it. Your device only tells the app whether it recognised you, which unlocks a key held on that device.

Marketing emails

We send news and offers by email only if you choose to receive them. We measure whether an email is opened and which links in it are clicked, so we can make our emails more useful. Every marketing email has an unsubscribe link, and you can turn marketing emails off at any time in the app's settings.

2. Why we use your data

• To create and secure your account, and to verify your email with a one-time code.
• To show listings, record your investments, and arrange inspections.
• To tailor the opportunities we show you, using the property types and location you chose in your profile.
• To connect you with one of our realtors when you ask.
• To send the notifications and emails you asked for, such as inspection reminders.
• To answer your questions in the in-app assistant. To answer questions about your own account, such as the stage of your deal, your inspections or your saved properties, it reads those details from your account. It never shows them to anyone else.
• To keep financial records that the law requires.
• To fix errors and improve the app.

Our legal bases are: performance of our contract with you, our legal obligations (for financial records), your consent (for optional notifications), and our legitimate interest in keeping the service secure and working.

3. Who we share data with

We share data only with service providers that help us run the app, and only what they need:

• Cloud hosting and database providers, which store your account and records.
• Cloudflare, which stores uploaded images, documents and training videos.
• Our AI partners, which process the messages you send to the in-app assistant, and the account details it needs to answer them, to produce a reply.
• Expo, Apple and Google, which deliver push notifications.
• An email delivery provider, which sends one-time codes and notification emails.
• Sentry (crash reports) and PostHog (usage analytics).

Our realtors and staff see the data they need to handle your enquiry, inspection or investment. We may also disclose data when the law requires it. Some providers process data outside Nigeria; where they do, we rely on the safeguards the NDPA allows.

4. How long we keep data

• We keep your account data while your account is active.
• When you delete your account, we deactivate it at once. After 30 days we permanently remove your name, email, phone number, chat messages, watchlist, notifications and push tokens.
• We keep investment and payment records after deletion because financial record-keeping law requires it. We remove your name and contact details from them.

5. Your rights

Under the NDPA you can ask us to:

• give you a copy of your personal data,
• correct data that is wrong,
• delete your data (see Delete your account),
• stop or limit some processing, or withdraw consent you gave.

Email privacy@sommyproperties.ng to use these rights. We reply within 30 days. You can also complain to the Nigeria Data Protection Commission.

You can turn each type of push notification on or off in the app, under Account → Notification Preferences.

6. Security

We encrypt data in transit with TLS. Private documents such as contracts and receipts are stored in a private bucket and are only reachable through short-lived links after we check your access. No system is perfectly secure, but we work to protect your data and will tell you and the regulator about a breach as the law requires.

7. Children

The app is for adults. We do not knowingly collect data from anyone under 18.

8. Changes to this policy

We will post any change on this page and update the date at the top. For important changes we will also notify you in the app.

9. Contact

Sommy's Properties Limited
Diamond Estate, Rumuokurusi, Port Harcourt, Rivers State, Nigeria
privacy@sommyproperties.ng