Privacy Policy

Quida Technologies Limited ("Quida," "we," "us," or "our") provides emergency alerts and notification services. We are committed to safeguarding the privacy, confidentiality, and security of personal data in accordance with the Nigeria Data Protection Regulation 2019 (NDPR) and, where applicable, the Nigeria Data Protection Act 2023 (NDPA). This Privacy Policy outlines the categories of personal data we process, our lawful bases, how we share, retain, secure, and transfer data, and the rights of data subjects.

By using Quida's services, installing our mobile/desktop applications, creating an account, or interacting with our websites, you acknowledge that you have read and understood this Policy.

• →Identity & Contact Data: Name, mobile number, email address, username, profile photo (optional), government-issued ID (for KYC, if required).
• →Account & Usage Data: Login credentials, preferences, app settings, activity logs, timestamps, delivery receipts.
• →Location Data: Real-time or approximate geolocation for emergency alerting and incident support (only when enabled or strictly necessary to provide the service).
• →Device/Technical Data: IP address, device ID, OS version, app version, diagnostics, crash logs.
• →Emergency Contact Data: Names and mobile numbers of trusted contacts you add; you are responsible for obtaining their consent.
• →Communications Data: Alert content, notification metadata, support tickets, call/SMS routing data via approved telecom aggregators.
• →Transaction & Billing Data: Plan type, payment references, receipts (if paid plans are offered).

• →Provide Core Services: Deliver alerts/notifications; contact designated emergency contacts; share minimum necessary data with emergency responders (where integrated).
• →Safety Features: Incident workflows, verification, and escalation procedures.
• →Improve Services: Analytics, quality assurance, service optimization, fraud/security monitoring.
• →Customer Support: Respond to inquiries, troubleshoot, and resolve issues.
• →Legal & Regulatory: Comply with NDPR/NDPA, NCC requirements, court orders, and law enforcement requests (subject to due process).
• →Marketing (Optional): Send product updates or offers with your consent and easy opt-out.

• →Consent: For geolocation, adding emergency contacts, and receiving marketing communications.
• →Contract: To create your account and provide Quida's services.
• →Legal Obligation: To comply with applicable laws/regulations and maintain records.
• →Legitimate Interests: For service security, fraud prevention, and product improvement (balanced against your rights).

Quida is intended for individuals aged 18 and above. If a user is under 18, use must be under the supervision of a parent/guardian, and consent for processing must be provided by the holder of parental responsibility, as required by law.

We collect the minimum personal data necessary to achieve the purposes listed above. Personal data is retained only for as long as needed to provide services, meet legal obligations, resolve disputes, and enforce agreements. Illustrative retention periods:

• →Account Data: Retained while your account is active and for up to 6 years thereafter to meet legal/tax requirements.
• →Location & Alert Metadata: Retained for the shorter of (i) 24 months from collection, or (ii) the period necessary for incident analytics, dispute resolution, or regulatory requests, after which it is deleted or anonymized.
• →Emergency Contact Data: Retained while linked to an active account or until you remove it.
• →Logs & Security Records: Retained for 12–36 months, depending on risk and regulatory needs.

We may share personal data with:

• →Emergency Services/Responders: To the extent necessary to assist during an incident.
• →Telecom Operators/Aggregators: To deliver SMS/calls, governed by contracts and regulatory approvals.
• →Cloud/IT Service Providers: For secure hosting, storage, analytics, and support under data processing agreements.
• →Enterprise Clients: If you use Quida via an organization, limited data may be shared with your organization per contract.
• →Regulators and Law Enforcement: When legally required, with appropriate documentation and safeguards.

We do not sell personal data.

Where data is transferred outside Nigeria, we implement appropriate safeguards consistent with NDPR/NDPA, such as contractual clauses, access controls, encryption, and data localization where applicable.

We deploy technical and organizational measures, including encryption in transit/at rest, role-based access control, key management, network segmentation, secure software development lifecycle (SDLC), regular vulnerability testing, and incident response procedures.

Quida does not make decisions producing legal or similarly significant effects solely based on automated processing. If such features are introduced, we will provide clear notices, human review options, and opt-out mechanisms where applicable.

Our websites and apps may use strictly necessary cookies, performance/analytics cookies, and functional cookies. You can manage preferences via in-app settings or browser controls. Marketing cookies will only be used with your consent.

Under NDPR/NDPA, you may request:

• ✓Access
• ✓Rectification
• ✓Erasure
• ✓Restriction
• ✓Portability (where feasible)
• ✓Objection to processing
• ✓Withdrawal of consent

To exercise these rights, contact our Data Protection Officer (DPO) at support@quidaapp.com. We will respond within required timelines and may request verification to protect your account.

Our services may contain links to third-party sites/services. Their privacy practices are governed by their own policies; please review them.

We may update this Policy periodically. Material changes will be communicated via the app, email, or website notice.