This policy explains what personal information Abodiea collects from landlords and tenants, why we collect it, who we share it with, and what you can ask us to do with it. It covers the Abodiea tenant app, the Abodiea Landlord app and this website.
Who we are
Abodiea is a rent management platform operating in Nigeria. For the purposes of the Nigeria Data Protection Act 2023, Abodiea is the data controller for the information described below. You can reach us at hello@abodiea.com.
What we collect
If you are a tenant
- Your name and phone number, which you give us when you sign up, and your email address if you provide one.
- Your National Identification Number and a photograph of your face, used once to confirm you are who you say you are before a tenancy is attached to your account.
- Your tenancy details: the property, the unit, the rent, the term, and the payments you make toward it.
- Device and usage information: the type of device, the app version, and error reports, so we can fix what breaks.
If you are a landlord
- Your name, phone number and email address.
- Your properties: addresses, units, photographs you upload, rents and terms.
- The phone numbers of the tenants and staff you invite, which you provide in order to send them an invitation.
- Your billing records: which portfolio plan you are on and the management fees charged.
Why we collect it
We collect each of the above for a specific and limited purpose, and we do not collect information we do not need.
- To operate your account and the tenancies attached to it. This is necessary to perform our contract with you.
- To confirm identity before a tenancy is created, which protects both the landlord and the tenant from a tenancy being claimed by the wrong person.
- To record payments and produce receipts and tenancy agreements, which we and you may need as evidence later.
- To send you notifications about your own tenancies: a payment that failed, a term that is ending, an invitation that was claimed.
- To meet our obligations under Nigerian law, including anti money laundering and tax requirements.
We do not sell your personal information, and we do not share it with advertisers.
Identity verification
A tenant verifies identity once, using a National Identification Number and a photograph of the face. The photograph is used to confirm a match against the NIN record through a licensed verification provider. It is not used for any other purpose, it is not used to train any model, and it is not shared with your landlord.
Your NIN and the biometric data derived from your photograph are sensitive personal data under the Nigeria Data Protection Act, and we treat them accordingly: they are encrypted, access is restricted to the small number of staff who need it to resolve a verification problem, and every access is logged.
Payment information
Payments are processed by Paystack. Card numbers, bank credentials and card verification values are entered on Paystack's own systems and Abodiea never sees or stores them. What we store is the record of a payment: the amount, the date, the tenancy it belongs to, a reference, and the last four digits of a card so you can recognise it.
What your landlord sees
A tenant should know exactly what crosses over. Your landlord sees your name, the phone number you signed up with, that your identity has been verified, the tenancy itself, and the payments you have made toward it, with their dates and amounts.
Your landlord does not see your NIN, your verification photograph, your email address, your bank or card details, any other tenancy you hold with another landlord, or anything about your finances beyond what you have paid toward this rent.
Where a landlord has added a caretaker or manager to his account, that person sees the same information but only for the properties the landlord has assigned to them.
How long we keep it
- Tenancy and payment records are kept for seven years after the tenancy ends, because they are financial records and both parties may need them in a dispute.
- Verification photographs are deleted once verification has completed and the result recorded. What we keep is the fact of the result, not the image.
- Account details are kept while your account is open, and deleted within ninety days of closure except where we are required to retain them.
How we protect it
- Everything is encrypted in transit and at rest.
- Anything sensitive is held in the device's own secure storage, the Keychain on iOS and the Keystore on Android, never in ordinary app storage.
- Both apps can be locked with your fingerprint, face or passcode, and we recommend you turn this on.
- Access to production data is restricted to staff who need it, and every access is logged.
No system is perfectly secure. If a breach affects your personal information we will tell you and the Nigeria Data Protection Commission, without undue delay.
Your rights
Under the Nigeria Data Protection Act 2023 you may ask us to:
- give you a copy of the personal information we hold about you;
- correct anything that is wrong;
- delete information we no longer have a lawful reason to keep;
- stop using your information for a particular purpose;
- give you your information in a portable form, or send it to someone else.
Write to hello@abodiea.com and we will respond within thirty days. If you are not satisfied you may complain to the Nigeria Data Protection Commission.
Children
Abodiea is not for anyone under eighteen. We do not knowingly collect information from children, and if we learn that we have, we delete it.
Changes
If we change this policy we will update the date at the top, and where the change is significant we will tell you in the app before it takes effect.
Contact us
Questions, requests and complaints: hello@abodiea.com.