Privacy Policy

Welcome to Ruby+ (“we”, “us”, or “our”), a product of Ruby Aggregators Limited, a company incorporated under the laws of the Federal Republic of Nigeria.

Ruby+ is a marketplace platform that connects Nigerian businesses with diaspora Nigerians, tourists, and local customers. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our mobile applications (Ruby+ Customer App, Ruby+ Business App), website, and related services (collectively, the “Platform”).

By accessing or using the Platform, you consent to the collection and use of your information as described in this policy, in accordance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR).

a) Information You Provide Directly

• Account Information: Full name, email address, phone number, date of birth, and profile photo.
• Business Information: Business name, description, address, CAC registration number, operating hours, and product/service listings.
• Payment Information: We do not store your full payment card details. All payment processing is handled securely by Paystack, our PCI-DSS compliant payment partner.
• Communication Data: Messages, reviews, comments, and support requests you submit through the Platform.
• Delivery Information: Delivery addresses, pickup instructions, and recipient contact details.

b) Information Collected Automatically

• Location Data: With your permission, we collect your device's GPS location to show nearby businesses, enable delivery tracking, and provide location-based services.
• Device Information: Device type, operating system, unique device identifiers, and push notification tokens.
• Usage Data: Pages visited, features used, search queries, interaction timestamps, and app performance metrics.

We use the information we collect to:

• Provide, maintain, and improve the Platform and its features.
• Process orders, bookings, deliveries, and payments.
• Connect you with businesses, delivery riders, and service providers.
• Send transactional notifications (order updates, booking confirmations, delivery tracking).
• Personalize your experience based on your location, preferences, and browsing history.
• Detect, prevent, and address fraud, abuse, and security issues.
• Comply with legal obligations, including Nigerian data protection laws.
• Send promotional communications (with your consent, which you can withdraw at any time).

We do not sell your personal information. We may share your data with the following categories of third parties:

• Businesses on the Platform: When you place an order or book a service, the relevant business receives your name, contact information, and order/booking details.
• Delivery Partners: We share pickup and delivery addresses, recipient details, and package descriptions with our delivery partners (e.g., Glovo/PandaGo, Kwik) to fulfill deliveries.
• Payment Processors: Paystack processes all transactions. Your payment data is handled under their PCI-DSS compliant systems.
• Partner Services: When you use integrated third-party services (e.g., Chowdeck for food ordering), we share necessary profile information to create your session.
• Legal Requirements: We may disclose your information when required by law, court order, or government request.

Your data is stored on secure cloud infrastructure (MongoDB Atlas) with industry-standard encryption at rest and in transit (TLS/SSL). We implement:

• Encrypted database connections and data at rest.
• JWT-based authentication with access and refresh token rotation.
• Bcrypt password hashing (passwords are never stored in plain text).
• Rate limiting and throttling to prevent brute-force attacks.
• Role-based access control (RBAC) for administrative functions.
• Regular security audits and monitoring.

While we take every reasonable precaution, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

Under the Nigeria Data Protection Act (NDPA) 2023, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Data Portability: Request your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw consent for marketing communications or optional data processing at any time.
• Object: Object to processing of your data for certain purposes.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

Our website uses cookies and similar technologies to enhance your browsing experience. These include:

• Essential Cookies: Required for the website to function (authentication, security).
• Analytics Cookies: Help us understand how visitors use our website to improve performance and content.
• Preference Cookies: Remember your settings and preferences (e.g., selected location, theme).

Our mobile apps use device identifiers and push notification tokens for functionality and analytics. You can manage notification preferences in your device settings.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of the website.

The Platform is not intended for children under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child under 18, we will take steps to delete such information promptly.

Ruby+ serves diaspora Nigerians and tourists worldwide. Your data may be processed and stored in jurisdictions outside Nigeria, including cloud servers operated by our service providers. We ensure that any international transfers comply with applicable data protection laws and that adequate safeguards are in place.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of significant changes through:

• In-app push notifications.
• Email notification to your registered email address.
• A prominent notice on the Platform.

Your continued use of the Platform after the effective date of any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: