Privacy Policy

Rewarda ("we", "us") runs a rewards and engagement platform for venues and shops in Nigeria. Guests pay at a venue, play games and win rewards. Merchants run menus, table ordering, campaigns and live games.

For the personal data described below, Rewarda is the data controller. You can reach us at contact@rewarda.ng.

We collect only what the service needs to work:

• Account details: your phone number, and if you give them, your name and email address. Merchants also give a business name, address, bank account details used for payouts, and a manager PIN and staff PIN.
• PINs: customer and merchant PINs are stored only as a one-way hash. We cannot read them back.
• Activity: payments and their references, orders and table numbers, game entries, scores and prizes, rewards earned and redeemed, wallet transactions and support requests.
• Technical data: your IP address, device and browser type, and the pages and features you use. We use this for security, fraud prevention, rate limiting and to fix errors.
• Location: only if a merchant turns on location checks for a game and you allow your browser to share your location.

• To create and secure your account and sign you in.
• To process payments, orders, wallet top-ups and payouts.
• To run games, award and track prizes, and let a venue confirm a prize.
• To send service messages such as one-time codes, receipts and alerts by SMS or email.
• To detect fraud, abuse and security problems, and to keep an audit trail of important actions.
• To measure how the service is used and improve it.

We do not sell your personal data.

Under the Nigeria Data Protection Act 2023 (NDPA) we rely on: performing our contract with you, our legitimate interests in running and securing the service, compliance with legal obligations, and your consent where we ask for it (for example, location).

We share data with the venue you play or order at, so it can serve you and confirm prizes. A venue sees the details needed to do that, such as your phone number, name, orders and prizes at that venue.

We also use service providers who process data for us under their own terms:

• Paystack, for card, bank and USSD payments and payouts.
• Vercel and Neon, for hosting and our database.
• SMS and email providers, for codes and receipts.
• PostHog, for product analytics.
• Tawk.to, for the support chat widget.
• Google AdSense, which may use cookies to show ads on some pages.

We may also disclose information where the law requires it, or to protect the rights, safety and property of our users and Rewarda.

We use cookies and your browser's local storage to keep you signed in, remember your theme (light or dark), and keep the service secure. Analytics, chat and advertising tools set their own cookies. You can block cookies in your browser settings, but parts of the service need them to work.

We keep account and transaction records for as long as your account is active and for as long afterwards as needed to meet accounting, tax and dispute obligations. Security and audit logs are kept for a limited period. You can ask us to delete your account, and we will delete or anonymise data we are not required to keep.

We protect data with encrypted connections, hashed PINs, signed sessions, access controls and rate limiting. No system is perfectly secure, so please keep your PIN private and tell us straight away if you think your account has been misused.

Under the NDPA you can ask us to:

• give you a copy of the personal data we hold about you;
• correct data that is wrong or incomplete;
• delete your data, or restrict or object to how we use it;
• move your data to another service;
• withdraw consent you have given.

Email contact@rewarda.ng and we will reply within a reasonable time. You also have the right to complain to the Nigeria Data Protection Commission.

Rewarda is not meant for children under 18, and some venues and games are for adults only. We do not knowingly collect data from children. If you think a child has given us data, tell us and we will remove it.

We may update this policy. When we make a significant change we will update the date at the top and, where appropriate, tell you in the app or by message.

Questions about privacy or your data: contact@rewarda.ng.