Privacy Notice

1. Who this notice covers

This notice explains how Kirava collects, uses, and protects personal information for customers and providers using the Kirava marketplace in Nigeria. Kirava is currently focused on serving users in Lagos and other parts of Nigeria, and this notice is written with the Nigeria Data Protection Act 2023 ("NDPA") and the role of the Nigeria Data Protection Commission ("NDPC") in mind.

2. Information Kirava collects

Account and authentication information: your name, email address, and authentication information used to create and secure your account, including when you choose to sign in with Google.

Customer profile information: your name, WhatsApp/contact number, default location, favourite service categories, and home-service preference, where you choose to provide them.

Provider profile information: business name, contact name, WhatsApp number, contact email, location, service category, business description, and — if you choose to link one — your Google Business or Maps profile.

Kirava does not collect your device's precise GPS location. Any location displayed or stored is information you choose to provide.

Services and availability: the services you list, their prices and duration, and the days and hours you're available.

Booking information: appointment date and time, booking status, booking type, and any notes added when a booking is made.

Portfolio media: photos and videos providers upload to show their work, and any captions added to them. Providers retain ownership of the photos and videos they upload but grant Kirava permission to display them as part of their public profile.

Saved items: providers and portfolio items a customer chooses to save for later.

Reviews: star ratings and written reviews left after a completed booking.

Notification preferences: whether you've chosen to receive appointment reminder emails.

Support messages: if you contact Kirava Support, the reason you selected and the message you send, along with your name, email, and whether you were using Kirava as a customer or provider at the time.

Technical information: basic technical information reasonably generated by using a web application — such as request and error logs — processed by Kirava's hosting infrastructure to keep the service running securely.

3. Why Kirava uses this information

• To create and secure your account and confirm who you are.
• To let customers find providers, and providers be found.
• To create, confirm, reschedule, and manage bookings.
• To send booking-related emails — confirmations, cancellations, reschedules, and (if enabled) appointment reminders.
• To show reviews and ratings for completed bookings.
• To respond to support requests.
• To keep the platform secure and working properly.

4. Lawful basis for processing

Under the NDPA, Kirava processes personal information on bases that include: your consent (for example, choosing to receive appointment reminders), the necessity of processing to perform the marketplace service you've asked for (creating an account, booking, or listing services), and Kirava's legitimate interest in operating a secure, functioning platform.

5. Service providers Kirava uses

Kirava uses a small number of third-party service providers to operate the platform. These providers process personal information on Kirava's behalf, under their own security and privacy practices, and do not own or independently use Kirava user data for their own purposes beyond providing their service to Kirava:

• Clerk — handles account sign-in and identity for Kirava.
• Supabase — provides the database and file storage Kirava's data is kept in, including portfolio photos and videos.
• Resend — delivers transactional emails Kirava sends (booking updates, reminders, and support replies).
• Vercel — hosts the Kirava application.
• PostHog — provides product analytics that help Kirava understand how the platform is used and fix problems. See Section 11 for what this involves.

Some of these providers may process information on infrastructure located outside Nigeria. Where that happens, Kirava relies on those providers' own security safeguards and only shares the information reasonably necessary for them to provide their service.

6. Cookies and similar technologies

Kirava uses essential cookies and similar technologies necessary to keep users signed in and the platform functioning. Kirava does not currently use advertising cookies.

7. Data security

Kirava restricts access to personal information so that, in general, a customer or provider can only see and manage their own data, and information that's meant to be public (like a published provider's profile, services, and reviews) is the only data visible to others. No method of storing or transmitting information is completely risk-free, but Kirava takes reasonable, ongoing steps to protect information against unauthorised access.

8. Data retention

Kirava keeps account, booking, and review information for as long as your account is active, and for a reasonable period afterwards where needed for record-keeping, resolving disputes, or legal reasons. If you delete your account, Kirava will remove or de-identify the personal information that isn't reasonably needed to preserve other users' booking or review history.

9. Your rights

Under the NDPA, you have rights over your personal information, including the right to know what Kirava holds about you, to correct inaccurate information, to request deletion of your information, and to object to or restrict certain processing. Where Kirava relies on your consent (such as appointment reminder emails), you can withdraw that consent at any time in your account settings. To exercise any of these rights, contact Kirava Support from within the app or email support@kirava.app. To request deletion of your account specifically, see Delete Your Account. If you believe your rights under the NDPA haven't been respected, you may also contact the Nigeria Data Protection Commission.

10. Does Kirava sell personal information?

No. Kirava does not sell personal information to third parties.

11. Product analytics

Kirava uses PostHog, a product analytics service, to understand how the platform is used — for example, which pages and features are used, and where errors happen — so Kirava can fix problems and improve the product. This involves collecting technical and usage information such as pages visited, actions taken (like starting a booking), device and browser type, and, for signed-in users, an identifier linked to your account so Kirava can understand usage across a session. PostHog's default configuration can include session replay(a recording of on-screen activity, such as clicks and scrolling, used to diagnose usability problems) — Kirava has not built custom masking into these recordings, so avoid entering sensitive information into fields you wouldn't want captured this way. PostHog processes this information on Kirava's behalf and does not use it for its own advertising purposes. Kirava does not use advertising trackers or automated profiling for marketing, and does not use any automated system to analyse photos you upload.

12. Children's privacy

Kirava is intended for adults booking or providing beauty services and is not directed at children. Kirava does not knowingly collect personal information from children.

13. Data breach notification

If Kirava becomes aware of a breach that's likely to result in a risk to your rights or freedoms — for example, unauthorised access to personal information — Kirava will assess the breach without undue delay and, where required under the NDPA, notify the Nigeria Data Protection Commission and any affected users. Where users are notified, Kirava will describe what happened, the information involved, and the steps being taken in response, using the contact details on file for the affected account.

14. Changes to this notice

Kirava may update this Privacy Notice as the platform develops. If changes are significant, Kirava will make reasonable efforts to let users know.

15. Contact

For any question about this notice or your personal information, contact Kirava Support from within the app or email support@kirava.app.

16. Company information

Kirava is operated by Kirava Technologies (RC 9753434), registered in Nigeria at Chevron Lekki, Lagos.