The overview above is a reading guide. The sections below explain the full policy.
01Who is responsible for your information
Yardii is an independently operated service using the name Yardii. Yardii determines the purposes and means of processing personal information for its marketplace and is the data controller for that processing. Contact the operator about privacy at yardiisupport@gmail.com, using “Privacy request” in your subject line.
This policy covers the Yardii website, installed web app, accounts, vendor shops, orders, chat, notifications, and support. Vendors and services such as Paystack may also process information for their own responsibilities, including fulfilment, banking, and legal compliance. Their independent processing is subject to their own notices and applicable law.
02Information we collect
Some information comes directly from you; other information is generated by your activity or received from vendors, Google sign-in, Paystack, banks handling disputes, or a person reporting a concern. Do not upload someone else’s identity document or unnecessary sensitive information.
Payment credentials entered on Paystack’s payment screen are handled by Paystack and the payment institutions involved. Yardii does not ask you to put a card PIN, CVV, bank password, or payment OTP into a chat or support message.
| When you use | Information involved |
|---|---|
| Accounts and sign-in | Name, email address, account identifier, chosen student or vendor role, profile photo if provided, campus, verification status, authentication/session information, and the policy versions and timestamp recorded when you agree during signup. Firebase Authentication handles your password; it is not stored in your Yardii profile document. |
| Google sign-in | Google account identifier and the name, email address, and profile image made available through sign-in. Yardii does not request access to your inbox, contacts, or Google Drive. |
| Delivery | Campus, hostel/street/landmark, directions, delivery phone number, and an optional precise latitude/longitude pin. An address can be saved in your account and copied into an order. |
| Orders and payments | Product, quantity, price, fees, buyer and vendor identifiers and contact details, order notes, payment reference and status, payment channel, timestamps, delivery status, and confirmation/dispute records. Relevant payment-provider event data may also be retained for payment disputes. |
| Vendor shops and payouts | Shop name, description, photos, campus/service area, phone and WhatsApp contact, listings, hours, promotions, sales totals, and review/limit decisions. Payout setup processes a bank account number and bank code through Paystack; Yardii retains the account name, bank information, last four account digits, subaccount reference, and review status. |
| Vendor identity checks | Full name, the selected identity-document type, an uploaded identity-document image, a selfie, submission timestamps, and review outcome. An ID image may include identifiers and other information printed on it. |
| Chat, reviews, and support | Message contents, participants, display names/photos, timestamps, unread indicators, reviews and ratings, reports, dispute explanations, support correspondence, and moderation records. |
| Technical features | Browser/device and network information used by our service providers, authentication storage, online/last-active timestamps, notification tokens, saved-item data, announcement state, and installation or prompt preferences. |
03Why we use information and our legal bases
We use information to provide the features you request, operate a trusted marketplace, meet applicable obligations, and handle problems. Under the Nigeria Data Protection Act 2023, the appropriate lawful basis depends on the specific activity; using the app is not blanket consent for every possible use of your data.
- Providing the service or taking steps you request before a contract: account creation, authentication, displaying your shop, messages, orders, payments, delivery, and customer support, where a valid contract can provide the legal basis.
- Legitimate interests, balanced against your rights: protecting accounts, preventing fraud and abuse, reviewing reports, maintaining service reliability, and producing relevant marketplace recommendations and business summaries.
- Legal obligations and legal claims: records and disclosures required by applicable law, regulator or court requests, and establishing, exercising, or defending legal rights where an appropriate legal basis applies.
- Consent where required: optional precise location access, browser notifications, marketing that requires consent, and uses of children’s or sensitive personal data for which the law requires consent. A browser permission is specific to that feature, not permission for unrelated processing.
04Who can see your information
- Public visitors can view shop information, product listings and images, promotions, ratings, and reviews. Shop phone/WhatsApp numbers and service areas you publish can be visible. Reviews may display your reviewer name or image. Online/last-active indicators are also available through the app. Public content may be copied by visitors or indexed by search engines.
- A vendor receives the buyer and delivery information included in an order, including a saved location pin if attached, to fulfil that order. Order parties can view their related order records and conversation. Information you type into chat is visible to its recipient.
- Authorised Yardii administrators can access account, order, vendor-verification, payout-review, and report information needed for their roles. The admin chat-review feature exposes a conversation after a chat report has been filed. Chat is stored on our service; it is not end-to-end encrypted against the service operator.
- Payment providers and banks may receive order, customer/contact, delivery, and confirmation information when processing a payment, preventing fraud, or handling a dispute. This may include delivery evidence and relevant transaction records.
- Vendors must use buyer information for fulfilment, related support, and lawful recordkeeping. Contact Yardii if a vendor misuses information received through an order.
05Service providers and external links
The current app does not include third-party advertising pixels or a personal-data resale feature. We do not sell your personal information. Loading an externally hosted product or profile image can send your IP address and ordinary browser request information to that image’s host.
We may disclose information where necessary and lawful to comply with an obligation, protect people or the service, or deal with a legal claim. If the service changes operator, any transfer of personal information must have a lawful basis, appropriate safeguards, and any notice or consent required by law.
| Provider or service | Purpose |
|---|---|
| Google Firebase / Google Cloud | Authentication, stored marketplace data and images, and Firebase Cloud Messaging for notifications. |
| Paystack and payment institutions | Payment processing, bank-account checks, vendor subaccounts, transaction verification, settlement, and disputes. |
| Brevo | Delivery of verification emails, receipts, order/payout alerts, and email updates. The email address, recipient name where supplied, and message contents are processed for delivery. |
| Website hosting and infrastructure | Serving the app, network delivery, operational logs, error handling, and security. Technical request information may be processed by the hosting provider. |
| Services you choose to open | Google Maps for an optional location link, WhatsApp/email/telephone for contact, and linked social platforms. Those services receive information involved in the action you choose and apply their own policies. |
06Browser storage and device permissions
Yardii and its authentication/notification providers use browser storage, including local storage, session storage, and database storage, for sign-in and app features. Saved items, read-announcement state, and dismissed install or notification prompts may persist on your device. Your selected signup role, policy agreement version, and a pending chat message may be kept temporarily during navigation.
The app uses service workers to support installation and notifications. Installing Yardii does not guarantee access to marketplace content offline. Fonts are hosted with the app.
The location button requests a one-time location reading after you choose it and grant browser permission. Yardii does not implement continuous background location tracking. You can type an address without granting location access and clear a saved pin. Clearing your profile pin does not change an address already copied into a past order.
You can clear site data, manage storage, and revoke location or notification permissions in your browser/device settings. Clearing storage may sign you out and remove saved items or preferences; it does not delete server-side account, order, or chat records. On a shared device, others using the same browser may be able to see locally saved items.
07Emails and notifications
Service emails include verification codes, receipts, delivery and payout information, and account or safety messages. Optional browser notifications can include message or order information and may be visible on a lock screen or shared device. Manage notification permissions in your browser settings.
Yardii can send email announcements and updates to account holders. The current broadcast system uses an unsubscribe preference. Follow the unsubscribe link in an update email and confirm the request, or contact support to opt out. Opting out of updates does not stop essential verification, receipt, or transaction messages.
We must have an appropriate lawful basis for direct marketing, including consent where required. Acknowledging this policy does not itself give marketing consent. You may object to direct marketing at any time.
08Recommendations and automated limits
Yardii uses your campus, paid-order history, and saved-item categories to show features such as Buy again and Recommended for you. Vendors can see summaries of their sales. These features use marketplace activity rather than a separate advertising tracking system.
Automated rules may limit new vendor listings or orders based on catalogue value, open orders, and confirmed deliveries. They may also limit repeated verification or delivery-code attempts. Verification, payout reviews, and reported conduct can involve human administrators. If you believe a limit or decision is wrong, contact support to request human review and explain your circumstances.
09How long information is kept
Retention depends on the information and the reason for keeping it. Account and shop information is generally retained while the service is being provided. Order, payment, delivery, and dispute records may need to remain after account closure for outstanding transactions, fraud prevention, legal claims, tax/accounting obligations, or another lawful requirement.
Chat, reports, identity-verification submissions, and payout-review records may remain until they are no longer needed for their relevant purpose and any lawful retention obligation. The current app does not automatically delete all of these records on a fixed schedule. You can request deletion or ask about the retention applicable to your information; we will assess what can be removed and explain any lawful reason for retaining the remainder.
Email verification codes expire after 10 minutes. A stored verification record is deleted on successful verification or when an expired/exhausted record is checked; expiry does not mean every stored record is instantly purged. Notification tokens identified as invalid are removed when detected during sending. Browser preferences remain until removed or cleared by you or the app.
Copies already included in transaction records, legitimate recipient records, provider logs, or backups may have a different retention period. Deletion of a profile field does not rewrite a completed order. We do not promise immediate deletion of every copy or an unsupported fixed retention period.
10Security and international processing
Yardii uses authentication, database access rules, server-side permission checks, and restricted administrator functions to protect information. Identity documents and account profiles are not intended as public listings. No internet service or security measure can guarantee absolute protection; contact us promptly about a suspected exposure. Any required breach notifications must follow applicable law.
Our providers may process or store information outside Nigeria. The specific locations depend on the provider and service configuration; this policy does not claim that all data stays in Nigeria. International transfers must use an applicable lawful mechanism and appropriate safeguards under Nigerian data-protection law. You may ask us for information about relevant destinations and safeguards.
11Younger users and parents or guardians
Yardii is open to people of different ages. The current signup form does not collect a date of birth or automatically verify age. This does not remove the additional protections that apply to children’s information.
For a child’s personal data, a parent or legal guardian must give consent where required by law, unless a specific lawful exception applies. Children should involve a parent or guardian before opening an account, sharing an address or identity document, or making a purchase or sale. Please contact support to discuss a child’s account and any permission that needs to be recorded.
Parents or guardians may contact yardiisupport@gmail.com to ask about, correct, or request deletion of a child’s information. If we become aware that information has been collected without permission required by law, we will assess the situation and take appropriate steps, which may include seeking verifiable permission, restricting affected processing, or deleting the information. This policy does not represent that an automated parental-consent process currently exists.
12Your rights and how to make a request
Subject to the conditions and exceptions in applicable law, you may request information about our processing, access to your personal data, correction, deletion, restriction, or a portable copy. You may object to relevant processing, withdraw consent for processing that relies on consent, and ask for human involvement in a decision where the law provides that right. Withdrawal does not make earlier lawful processing unlawful.
Edit available profile and delivery fields in Account → Edit profile. You can change or remove your own eligible reviews through their review controls. For account deletion, a data copy, objections, or information that cannot be changed in the app, email yardiisupport@gmail.com. The app does not currently provide a self-service account-deletion or data-export button.
Tell us what you are requesting and provide the email address linked to your account. We may reasonably verify your identity or authority before disclosing or changing information. Do not send a password, payment PIN, or full identity document unless a suitable verification method has been agreed. We will respond within the period required by applicable law and explain any lawful refusal, limitation, or need for more information.
You can complain directly to the Nigeria Data Protection Commission, including if you are unhappy with our response. You do not have to waive that right or complete an internal complaint process first.
13Policy updates and contact
We will update this policy when our practices or operator details change and revise the date shown above. Material changes will be communicated through the app or another appropriate channel. If a new use of information needs separate consent, a policy update alone is not that consent.
For privacy questions or requests, contact Yardii at yardiisupport@gmail.com. Our support page also lists the available WhatsApp and telephone channels. Use the minimum information needed to explain your request.