PlusOne home Join the waitlist

Privacy policy

How PlusOne collects, uses, keeps and deletes your personal data, and your rights under the Nigeria Data Protection Act 2023.

In effect from
25 October 2026
Version
2.1
Law
Federal Republic of Nigeria (NDPA 2023 / NDPR)
Data Protection Officer
privacy@plusone.ng

1. Who we are and how to reach us

[[COMPANY_LEGAL_NAME]] ("PlusOne", "we", "us", or "our") is a social connection and dining platform based in Lagos, Nigeria. We operate the PlusOne mobile application, partner venue systems, and the plusone.ng platform. For any questions regarding your personal data or this policy, contact our Data Protection Officer at privacy@plusone.ng.

2. Our core privacy principles

We believe dating and social dining in Lagos should be respectful, private, and safe:

  • No secret profiles or unsolicited tracking: Your likes remain private until a mutual match occurs.
  • No data selling: We do not sell, rent, or trade your personal data to ad brokers or marketing third parties.
  • No BVN: We strictly refuse and never store your Bank Verification Number.
  • Real identity with safety isolation: Verification selfies and government ID documents are encrypted in private storage with no public CDN caching.

3. Information we collect

We collect only the information necessary to provide safe matches, curated tables, and verified dining:

  • Account details: Nigerian mobile phone number (authenticated via OTP), name, age (18+ only), gender, and optional email for payment receipts.
  • Profile details: Bio, dating intent, neighborhood, evening routine, and icebreaker responses.
  • Voice introduction: A 1–60 second voice note recorded by you (required to appear in the dating deck, unless granted a written exemption).
  • Sensitive basics (Optional opt-in): Information about your faith and politics is turned off by default. You choose whether to turn them on; turning them off deletes what you entered.
  • Photos & selfies: Primary portrait and up to 5 gallery photos. Optional photo verification selfies are seen only by the safety moderation team.
  • Camera live check: 3 camera gesture frames used to confirm real human presence. Stored securely for 12 months for safety investigations or purged when your account is deleted.
  • Pre-paid dining & payments: Payments are processed by Paystack (PCI-DSS compliant). We store only transaction references, amounts, and settlement status; your card numbers never touch our servers.
  • Location: Your chosen neighborhood and evening area for commute matching. Temporary location data is used only to confirm arrival at a pre-paid table.
In the app: Your privacy. Both switches are off until you turn them on.

4. How your data is used

Your data powers these core platform features:

  • Dating matches: The 72-hour match window, commute proximity scoring (Island vs. Mainland), and daily Midday Spark dilemmas.
  • Supper Club seating: Our automated seating algorithm groups 6-member tables at T-24h while ensuring members who have blocked or reported each other are never seated at the same table.
  • Venue arrivals: Partner venues receive only your first name, table number, and pass code for arrival scanning; venues never receive your phone number or profile details.
  • Emergency safety: Dispatching real-time SOS alerts to our Safety Desk and automating rescue calls when requested.
What a partner venue sees when it checks a pass. Saltleaf Café and Amaka are made up.

5. Data retention and storage

  • Active profile data: Retained for the duration of your active membership.
  • Camera live-check frames: Retained for 12 months from submission, then permanently removed by automated retention jobs.
  • Verification documents: Stored in isolated private storage (S3_PRIVATE_BUCKET) and served only through short-lived, authenticated links to moderators.
  • Financial ledgers: In accordance with Nigerian tax, anti-money laundering, and corporate laws (CAMA), transaction records and settlement ledgers are retained for 7 years in an anonymized format.

6. Account deletion and the 30-day grace period

You have the right to delete your account and erase your personal data at any time directly within the PlusOne app (Profile → Delete account):

  1. Deactivation: Upon requesting deletion, your profile is immediately deactivated, hidden from the dating deck, and open matches are closed. Device push tokens are removed.
  2. 30-day grace period: We hold your account in a deactivated state for 30 days in case you change your mind. Signing in during this window gives you the option to cancel the deletion and restore your profile.
  3. Permanent erasure: After 30 days, all personal data—including profile photos, voice notes, live check frames, ID documents, profile basics, and wishlists—is permanently deleted from our servers.
  4. Phone number release: Your phone number is scrambled and released, allowing you to create a fresh account in the future if you wish.
  5. Financial record preservation: Historical ledger entries and payments remain recorded for 7 years to satisfy statutory audit laws, anonymized under 'Former Member'.
In the app: Profile → Delete account.

7. Your legal rights under the NDPA

Under the Nigeria Data Protection Act 2023, you have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectification: Update or correct your profile information at any time in the app.
  • Erasure: Request permanent deletion of your data.
  • Withdraw consent: Toggle optional privacy settings (faith, politics, selfie checks) off at any time.
  • Complaint: Lodge a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your privacy rights have been violated.

8. Data Protection Officer and inquiries

If you have questions, wish to exercise any of your data rights, or need assistance, contact our Data Protection Officer:

Email: privacy@plusone.ng
[[COMPANY_LEGAL_NAME]]
Lagos, Nigeria