Privacy policy
This policy explains how De Auditor Group Ltd ("we") collects and uses personal data in Audit Am, Audit Am Guard, your DA ID, the organisation portal and our websites. We wrote it to meet the Nigeria Data Protection Act 2023 (NDPA) and the requirements of Google Play and the Apple App Store. We collect only what the apps need to keep people safe, and we never sell personal data.
1. Who we are
De Auditor Group Ltd (RC 9661608), registered office 10 Unique Plaza, Off College Road, Aduwawa, Benin City, Edo State, Nigeria, with offices at Abundance Shopping Complex, 150 Benin–Auchi Road, beside NNPC Filling Station, Aduwawa, Benin City, Edo State, Nigeria, is the data controller. Contact our data protection team at support@deauditorgroup.com.ng.
2. What we collect and why
| Data | App | Why we use it | Legal basis (NDPA) |
|---|---|---|---|
| Phone number (DA ID) | Both | To sign you in with an SMS code and let your circle recognise your SOS | Contract |
| Nickname, state, language | Both | Leaderboard, chat, and alerts for your state | Contract |
| Alerts and reports you post, with photos or videos | Audit Am | To warn people in your state. Your nickname is shown; your phone number never is. | Consent / legitimate interest (public safety) |
| Chat messages | Audit Am | State and national chat rooms, moderated automatically and by our team | Contract |
| Game answers and scores | Audit Am | Leaderboards and improving the cases | Contract |
| Emergency contacts you add (names and numbers) | Guard | To send them your SOS by push and SMS. We text each contact once to tell them you added them. | Legitimate interest / vital interests |
| Precise location | Guard; Audit Am only if you tap "Use my location" or tick "Add my approximate location" on a report | Only during an SOS, trip watch, safety timer or while protection mode is on, so we know where to send help. On a report you choose to locate, we keep a point rounded to about 1 km so people near that place can see the alert in Guard's "Near me"; public alerts show an area, never your exact location. A report's point is dropped if it is not in the state the report is for. | Consent; vital interests during an SOS |
| "Near me" in Guard | Guard | When you open "Near me", your phone reads its location and asks only for the map squares around you (about 5 km or 20–40 km wide). Your exact position is not sent or stored; distances are worked out on your phone. | Consent |
| Incidents you follow | Guard | When you tap "Follow incident" we store that you follow it, to send you a short update when it moves on (for example "Help is on the way"). Tap "Stop following" to remove it. | Consent |
| Microphone audio | Guard, only when protection mode is on | Analysed on your phone to recognise your code word, screaming or gunshots. Never recorded, stored or sent to us. A notification shows while it runs. | Consent |
| Code-word samples | Guard | Turned into sound features and stored only on your phone | Consent |
| SMS sending | Guard | With no internet, Guard sends your SOS as an SMS from your phone to your circle. It doesn't read your messages. | Consent |
| Organisation membership, unit or staff ID; trips if you choose to share | Guard | So your estate, employer or school's security receives your SOS | Consent |
| Safety timer (duration, note, start location) | Guard | To alert your circle if you don't check in | Consent |
| Text or screenshots you send to De Auditor AI | Both | To answer your question (see AI features). Kept 30 days. | Consent |
| Subscription status | Guard | Google Play and RevenueCat tell us if Premium is active. We never see your card. | Contract |
| Blood type and donor setting (optional) | Guard | To notify you when someone nearby needs your blood type | Explicit consent |
| Safety trail (only if you switch it on): your phone's position every few minutes, battery level, and whether the phone was switched off, the SIM removed or the battery nearly empty | Guard | So the trusted people you choose can find your last place if you go missing, and to alarm your circle if a danger pattern happens. Kept 48 hours, then deleted automatically. Switching the trail off deletes it at once. | Consent |
| Trusted people you add, and a log of each time they view your location | Guard | Only they can see your last place; you're notified every time they look, and you can see the log. Log kept 90 days. | Consent |
| Missing-person cases opened by your circle | Guard | So your circle can share your last known place with each other and the police. Closed cases are deleted after 90 days. | Vital interests; consent (you choose whether your trail is shared in a case) |
| Medical ID (optional): blood group, allergies, conditions, medicines, next of kin | Guard | Only you see it, unless you switch on sharing during an SOS, when it appears on your private live-location page. | Explicit consent |
| Police / security encounter recordings (only when you start one) | Guard | Audio uploaded in pieces as you record so it survives if your phone is taken. Only you, and people you give the private link to, can listen. Can't be deleted in the first 24 hours; deleted after 180 days. | Consent; legitimate interest (evidence) |
| Meet Safe details: who you're meeting, their number or handle, where | Guard | Sent to your circle only if you don't check in (or if you choose to tell them). Kept 90 days. | Consent; vital interests |
| Number verification ("Verified with DA ID") by the person you're meeting | Web page | They confirm their own number with an SMS code; we tell the person who asked. Kept 7 days. | Consent (of the person verifying) |
| Street watch membership and alarms | Guard | To ring your neighbours' phones. Members see your nickname. Alarm history kept 30 days. | Consent |
| Reports about a phone number, bank account or social handle, with private evidence | Audit Am | Checked by our team before they count. Others see only a count, the type of problem and the month, never who reported, the story or the evidence. See Reports & disputes. Approved reports count for 24 months; rejected reports are deleted after 180 days. | Legitimate interest (fraud prevention) |
| "Check this person" lookups | Audit Am | Exact matches only, rate-limited. We don't keep what you searched, only a daily count to stop abuse. | Legitimate interest |
| Caller warnings (Who's calling) | Audit Am | Android: your phone sends only the first 5 characters of a scrambled code of an unknown caller's number; we can't tell who is calling you and keep no call history. iPhone: a list of confirmed scam numbers is stored on your phone. | Consent |
| Stolen phone and vehicle registry: IMEI, plate or VIN, description, proof of ownership | Audit Am | To warn buyers about stolen items and let finders message you without seeing your number. | Consent; legitimate interest (crime prevention) |
| POS agent profile: business name, landmark, shop location, terminals, contacts, shop photos; your own ledger | Audit Am | Verification, "agents near me" (customers see a distance, not your exact spot), the swap market and the robbery alarm. Your ledger is visible only to you. | Contract; consent |
| Evidence packs | Audit Am | Your private files for the police, your bank or a lawyer. Only you can see them. | Consent |
| Support messages | Website / apps | To answer you | Legitimate interest |
| Device token, app version, crash and security signals (App Check) | Both | To send notifications, keep the apps working and block fake or tampered apps | Legitimate interest |
| Advertising ID | Audit Am (free version) | Used by Google AdMob to show and measure ads. Where the law requires it, you are asked first; on iPhone, Apple's tracking prompt applies. You can reset or delete it in your phone's settings. DA Premium users see no ads. | Consent |
| Views and taps on sponsored tips and partner offers | Both | Counted as totals for sponsor reports; sponsors get no personal data | Legitimate interest |
We never collect your contacts list, SMS inbox, call history, photos you don't choose to attach, BVN, NIN, passwords, PINs or card numbers.
3. Who receives your data
- During an SOS only: your circle; verified responders in your state; organisations you joined; and, if "Share my SOS with official responders" is on, police commands and state agencies that have signed an agreement with us. They receive your name, phone, location (with how accurate it is) and what triggered the alert. The SMS includes a private live-location link that shows your latest position while the alert is active and stops working 6 hours after you end it. Anyone who has that link can open it, so your contacts should only pass it to people who can help.
- Your trusted people see your last place and recent trail only when they choose to look (you're notified each time), and your circle sees it during a missing-person case if you allowed that. A case has a private link for the police.
- Nearby verified POS agents receive a robbery alarm with your business name and landmark when you raise one; swap partners see each other's phone number only when the person who posted accepts.
- Organisations you join also see your name, phone and unit, notices you can read, and trips only if you choose to share them.
- Other users see the alerts you post without your name, nickname or account (only our moderators can see who posted an alert), and your nickname in chat — never your phone number or exact location. Photos and videos you attach to an alert are seen by our moderators first and published only without their hidden data (GPS, device, time).
- Service providers who process data for us under contract: Google (Firebase hosting, database, authentication, notifications, Play, AdMob), RevenueCat (subscriptions), Paystack (organisation payments), our SMS provider (Termii) and our AI provider (Anthropic's Claude models, run for us on Google Cloud Vertex AI).
- Authorities when the law requires it, or to protect someone's life, including reports of child abuse. Who posted an alert is shared only as described in section 10A of our Terms: a checked, lawful written request, an immediate risk to life, or child-abuse reporting, and only the minimum needed.
4. Where your data is stored
Our database is hosted by Google Cloud in Belgium (EU), and some providers process data in the US and other countries. When data leaves Nigeria we rely on the safeguards allowed by the NDPA, such as contracts with appropriate protection and countries with adequate laws.
5. How long we keep it
- Account data: until you delete your account. We may delete accounts that haven't been used for 24 months, after telling you first.
- SOS records: 12 months, then deleted. Safety timers and trips: 90 days.
- Alerts and reports: 12 months, then anonymised (the private record of who posted is cleared and photos are deleted). Photos and videos waiting for review: deleted when a moderator releases or rejects them, or after 30 days. Chat: 90 days. AI questions: 30 days.
- Safety trail: 48 hours. Location views log: 90 days. Missing-person cases: 90 days after they close. Encounter recordings: 180 days. Verification links: 7 days. Street alarms: 30 days. Swap requests: 7 days.
- Reports about people: counted for 24 months; rejected or false reports deleted after 180 days. Disputes and decisions are kept as long as the report they relate to.
- Payment records: as long as tax law requires (up to 6 years).
6. Your rights
Under the NDPA you can: ask for a copy of your data; correct it; delete it (see Delete your account); object to or restrict some uses; withdraw consent at any time (for example by turning off protection mode, location or donor alerts); and ask for your data in a portable format. Email support@deauditorgroup.com.ng. We reply within 30 days. If you're not satisfied, you can complain to the Nigeria Data Protection Commission (NDPC).
7. Security
We use encryption in transit and at rest, strict access rules, app integrity checks and logged admin access. See Security. No system is perfectly secure; if a breach puts your rights at high risk, we will tell you and the NDPC as the law requires.
8. Children
The apps are for people aged 13 and over; users under 18 need a parent's or guardian's consent. See Child safety standards.
9. Changes
We'll tell you in the app before important changes to this policy take effect.
10. Contact
De Auditor Group Ltd (RC 9661608), Abundance Shopping Complex, 150 Benin–Auchi Road, beside NNPC Filling Station, Aduwawa, Benin City, Edo State, Nigeria · +234 814 969 5054 · support@deauditorgroup.com.ng · Support form