Privacy Policy
Last Updated: August 2026 • Nigeria Data Protection Act (NDPA) 2023 Compliant • Lagos, Nigeria
The Gist (No Long Talk)
Privacy policies are notoriously long. Here is the straight-to-the-point summary of how we handle your information:
- We only collect what we need to plan your outings and keep your account safe.
- We do not sell your personal data or your location history to anyone. Period.
- You have full control. If you want to delete your account and data, we do it in 30 days.
- The full legal details (for the lawyers) are laid out below.
Zero Data Selling (We Don't Sell Your Gist)
We never sell, rent, or trade your personal information or squad outing plans to third parties or advertising networks. Your business stays your business.
We comply fully with the Nigeria Data Protection Act (NDPA) 2023. We protect your data like our own.
11. The Promise (NDPA Compliance)
At OyaPlan Technologies Limited ("OyaPlan", "we", "our", or "us"), we respect your privacy and are committed to protecting your personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and international data privacy principles. This policy explains how we collect, use, and protect your information across oyaplan.com and our beta services.
Only what is needed to generate accurate outing budgets, keep your login secure, and verify actual spend math.
22. The Details We Keep (And Why)
We collect only data necessary to deliver verified outing plans and secure account access:
- Account Identity Data: Email address and display name created during sign-in via Supabase Authentication.
- Planning Inputs: Anonymous criteria entered into the planner, including starting location, squad size, budget range, and vibe selections.
- Beta Feedback & Spend Intelligence: Voluntary actual spend submissions and venue reviews submitted to calibrate transport and menu pricing accuracy.
- Technical Logs: IP address, device type, browser user-agent, and request timestamps to prevent abuse, enforce rate limits, and secure our network.
Standard web session cookies to remember your outing selections and keep you logged in—not the Cabin Biscuit kind.
33. Cookies (Not the Cabin Biscuit Kind)
We use essential HTTP cookies and browser session storage strictly to maintain authenticated sessions, preserve planning selections between screens, and protect forms against cross-site request forgery.
Your data is stored and encrypted with world-class cloud providers. Never on sketchy servers.
44. Third-Party Infrastructure (Where Data Lives)
Your data is processed using secure cloud service providers:
- Supabase Inc.: Encrypted cloud database and authentication provider.
- Vercel Inc.: Hosting infrastructure and global edge network.
- Sentry: Anonymous runtime error reporting.
You own your account. You can request all your data or ask us to delete everything within 30 days. No wahala.
55. Your Data, Your Call (NDPA Rights)
Under the Nigeria Data Protection Act, you have the right to:
- Access all personal data stored under your account.
- Request correction of inaccurate information.
- Request complete erasure of your account and associated profile data.
- Object to processing or request data portability.
Account deletion requests are processed within 30 days of email verification.
Got questions or want your data erased? Holla at hello@oyaplan.com. We answer promptly.
66. Holla At The Privacy Team
For privacy inquiries or data rights requests, contact our compliance team:
OyaPlan Technologies Limited • Lagos, Nigeria
Alright, that's enough reading for today.
Time to actually go enjoy yourself with zero budget stress.