Privacy Policy
Who we are
Klaustar is a social activity platform connecting people in Lagos, Nigeria.
Contact: privacy@klaustar.com
What we collect and why
- Phone number — to verify your identity and send OTP codes.
- National Identification Number (NIN) — required by law to verify you are 18+. Your NIN is used for verification only and is not stored in plain text.
- Selfie photo — matched against your NIN record to prevent fraud.
- Name, age, gender — shown on your profile to other verified users.
- GPS location — used to show activities near you. Coordinates sent with discovery and join requests are retained for a limited period for security and abuse prevention, then deleted.
- Chat messages — stored to enable in-app communication between participants.
- Payment information — processed by Paystack. We do not store card details.
- Emergency contact — stored only if you choose to add one. Klaustar does not contact this person. Details held securely. May only be released to law enforcement in connection with a formal investigation. Never shared with users.
- Device token (FCM) — used to send push notifications. Never shared.
Who we share your data with
We do not sell your data. We share only with:
- Supabase Inc. (USA) — database and storage provider.
- Railway Corp. (USA) — API server host.
- Paystack Inc. — payment processing.
- Dojah — NIN verification only.
- Termii — SMS OTP only.
Your rights under the NDPA 2023
- Right to access: request a copy of all data we hold.
- Right to erasure: delete your account (Settings → Account → Delete Account).
- Right to correction: update incorrect data on your profile at any time.
- Right to withdraw consent: stop using the app at any time.
To exercise rights: privacy@klaustar.com. We respond within 30 days.
Data retention
- Active accounts: data retained while account is active.
- Deleted accounts: personal data deleted within 30 days of deletion request.
- Activity GPS coordinates: nulled 90 days after activity completion.
- Discovery/join request coordinates: deleted after 90 days by nightly cleanup.
- NIN + selfie: deleted immediately after verification is confirmed.