1. Introduction
Nira is a mobile app that helps landlords, property managers, and tenants in Nigeria split prepaid electricity costs fairly across shared households. You log what you paid, record each tenant's meter readings, and Nira calculates everyone's share.
This policy explains what information Nira collects, why, and how it is handled. It applies to all users of the Nira mobile app, including guests who view a household without an account.
2. Information We Collect
Information you provide directly
- Email address — used to create and verify your account via a one-time password (OTP). No password is ever stored.
- Display name — the name you enter after your first sign-in. Stored with your account.
- Household names — names you give to your households (e.g. "Block A").
- Meter ID — an optional reference number for your electricity meter.
- Tenant names — names of the people in your household. You enter these; we store them.
- Meter readings — the previous and ending readings you enter for each tenant each billing session.
- Electricity purchase amounts — the amount paid (₦) and units (kWh) bought each session.
Information collected automatically
- Supabase Auth session tokens — when you sign in, Supabase issues a session token that is stored locally on your device. This keeps you logged in between app sessions.
- Server-side infrastructure logs — Supabase, running on AWS infrastructure, may log standard request metadata such as IP addresses and timestamps as part of normal server operation. Nira does not access or process these logs directly.
Information we do not collect
- Passwords (we use email OTP — no passwords are created or stored)
- Location data
- Contacts or address book
- Camera or microphone access
- Device advertising identifiers
- Usage analytics or behavioural tracking of any kind
3. How We Use Your Information
| Purpose |
Data used |
| Authenticate your account |
Email address, session token |
| Calculate electricity cost splits |
Meter readings, amounts paid, tenant names |
| Enable household sharing via share code |
Household name, tenant names, session data |
| Keep you signed in |
Supabase session token (stored on device) |
| Remember that you've completed onboarding |
A local "seen" flag (stored on device only) |
We do not use your data for advertising, profiling, or any purpose beyond operating the app.
4. Guest Access and Share Codes
Each household has an automatically generated 8-character share code (e.g. A3BF92KD).
- Anyone who has this code can view that household's tenants, sessions, and billing breakdowns — without creating an account.
- Guests cannot create, edit, or delete any data.
- When a guest saves a household to their device, the household ID, name, share code, and card colour are stored locally on their device only. No account is created.
- Nira does not track who views a household via share code.
- You are responsible for who you share your household's code with. If you share the code, anyone with it can view your household data. You can treat the code as confidential.
5. How We Share Your Information
Nira does not sell your data. We do not work with advertising networks or data brokers.
Supabase — All app data is stored in a Supabase database hosted on Amazon Web Services (AWS). Supabase acts as a data processor on our behalf. Their privacy policy is available at supabase.com/privacy.
Native device share sheet — The app lets you share a screenshot of a billing breakdown using your device's built-in share sheet. The image is generated entirely on your device and shared directly to wherever you choose (WhatsApp, email, etc.). Nira never receives, stores, or uploads these screenshots.
Electricity providers — The app shows links to electricity provider websites. Tapping a link opens the provider's site in your device's in-app browser. Once you leave the Nira app, the provider's own privacy policy applies. Nira does not track what you do on those sites.
We share no data with any other third party.
6. Data Retention
- Active accounts: Your data is retained for as long as your account exists.
- Deleted accounts: If you request account deletion, your personal data (email, name, households, tenants, sessions, meter readings) will be permanently deleted within 30 days.
- Local device data: The onboarding flag and saved household list stored locally are automatically removed when you uninstall the app. You can also clear them manually via your device settings.
- Supabase session tokens: Cleared from your device when you sign out.
7. Your Rights (NDPR)
Under Nigeria's Data Protection Regulation (NDPR), you have the following rights:
- Right to access — You can request a copy of the personal data we hold about you.
- Right to correction — You can update your display name directly in the app. For other corrections, contact us.
- Right to deletion — You can request that your account and all associated data be permanently deleted.
- Right to object — You can object to how we process your data.
To exercise any of these rights, email us at jonwaeze@icloud.com. We will respond within 5 business days.
8. Data Security
- Encryption in transit — All communication between the app and Supabase uses TLS/HTTPS. Your data is never sent over an unencrypted connection.
- Row-Level Security (RLS) — Supabase RLS policies ensure that authenticated users can only read and write their own households, tenants, and sessions. No user can access another user's data through the API.
- OTP authentication — There are no passwords in Nira. Sign-in uses a 6-digit one-time code sent to your email, which expires after use.
- Guest read access — Unauthenticated users can read household and session data via share code. This access is read-only; anonymous users cannot write any data. You control access by controlling who receives your share code.
- No third-party analytics — No analytics SDK, crash reporter, or advertising library is present in the app.
9. Children's Privacy
Nira is intended for use by adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us with personal data, please contact us at jonwaeze@icloud.com and we will delete it promptly.
10. Third-Party Services
| Service |
Purpose |
Privacy policy |
| Supabase (AWS) |
Database and authentication |
supabase.com/privacy |
| Device OS share sheet |
Sharing billing screenshots |
Controlled by Apple / Google |
| Electricity provider websites |
Accessed via in-app browser |
Each provider's own policy |
11. Changes to This Policy
If we make material changes to this policy, we will notify you by updating the effective date at the top of this document and, where possible, by notifying you within the app or by email. Continued use of Nira after changes take effect means you accept the updated policy.
12. Contact Us
Compliance Checklist
- NDPR — Review whether NITDA registration is required (applies if processing personal data of Nigerian residents at scale)
- Apple App Store — Update Privacy Nutrition Labels to match this policy (Data Used to Track You / Data Linked to You / Data Not Collected)
- Google Play — Update Data Safety section to match this policy
- Policy URL added to Settings screen in-app
- Policy URL added to sign-up / auth flow
- Policy URL added to App Store and Play Store listings
- Support email monitored for data access/deletion requests
- Supabase DPA (Data Processing Agreement) reviewed and accepted