Last updated 19 October 2026

Privacy Policy

This policy explains what personal data klique. collects, why, who we share it with, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA) and, where it applies, the GDPR. klique is the data controller. It goes with our Terms of Service.

1. What we collect

Account details: email, password (stored only as a secure hash), display name, username, and, if you use Google sign-in, your Google account ID, name and picture.
Profile: bio, interests, country, state, city and neighbourhood, profile pictures and style choices.
What you do and post: communities and groups you join, messages, posts, reactions, events you host, RSVP to or save, friends, blocks and reports.
Devices: if you turn on notifications, a notification address for your phone or browser.
Technical data: IP address (used for security and rate limits) and a single sign-in cookie. We don't use advertising or tracking cookies.

2. Why we use it

To run klique for you (performing our contract with you): your account, communities, chats, events and notifications.
To keep people safe (legitimate interests and legal obligations): preventing spam and abuse, reviewing reports, and enforcing our rules.
To show you what's near you (legitimate interests): we use the city you choose. We don't track your precise location.
To send emails you need: verification, password resets and important account notices. We don't send marketing without your consent.
To show ads (legitimate interests): some cards are ads, always labelled “Sponsored” or “Promoted”. They're chosen only by the place and scene you're looking at, the words you search and the interests on your profile. Advertisers never receive your personal data. We only count how many times an ad was shown and clicked, without recording who.

We don't sell your personal data, we don't use advertising or tracking cookies, and ads never appear in chats or direct messages. You can report any ad you think breaks our rules.

3. Who sees what

Your profile is visible according to your privacy setting (everyone, people you share a community with, or only you). Content you post in a community is visible to the people who can see that community. Direct messages are visible to the people in the conversation, and to our moderators if a message is reported.

4. Who we share it with

We use trusted service providers who process data for us under contract:

MongoDB Atlas (database) and Vercel (hosting);
Cloudflare R2 (pictures and videos you upload, which are shrunk on your device before they're sent);
Ably and LiveKit (live chat and voice channels);
Expo and browser push services (notifications);
our email provider (account emails) and Google (if you use Google sign-in).

Some of these providers store data outside Nigeria, for example in the EU or the United States. Where that happens we rely on the safeguards the NDPA allows, such as contractual protections. We may also disclose data when the law requires it, or to protect people from harm. Law enforcement requests go to report@getklique.app.

5. How long we keep it

We keep your data while your account is open. When you delete your account we delete your profile, memberships, RSVPs, saved events, friends, devices and the events you host straight away. Messages and posts you wrote in shared conversations stay so those conversations still make sense, shown as “Deleted user”. Backups are overwritten within 30 days. We keep reports and moderation records for as long as needed to keep klique safe.

6. Your rights

You can ask to access, correct, move (portability) or delete your data, object to or restrict how we use it, and withdraw consent at any time. You can edit most things yourself in Settings, and delete your account in Settings → My Account. For anything else, email us at support@getklique.app. We'll reply within 30 days. If you're unhappy with our answer, you can complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

7. Children

klique is for people aged 13 and over. If you believe a child under 13 has an account, tell us at report@getklique.app and we'll delete it.

8. Security

We use encryption in transit (HTTPS), hashed passwords, signed sessions, and access controls on our systems. No service is perfectly secure. If a breach affects you, we'll tell you and the regulator as the law requires.

9. Changes

We may update this policy. If a change is significant, we'll tell you in the app or by email first.

1. What we collect

Account details: email, password (stored only as a secure hash), display name, username, and, if you use Google sign-in, your Google account ID, name and picture.

Profile: bio, interests, country, state, city and neighbourhood, profile pictures and style choices.

What you do and post: communities and groups you join, messages, posts, reactions, events you host, RSVP to or save, friends, blocks and reports.

Devices: if you turn on notifications, a notification address for your phone or browser.

Technical data: IP address (used for security and rate limits) and a single sign-in cookie. We don't use advertising or tracking cookies.

2. Why we use it

To run klique for you (performing our contract with you): your account, communities, chats, events and notifications.

To keep people safe (legitimate interests and legal obligations): preventing spam and abuse, reviewing reports, and enforcing our rules.

To show you what's near you (legitimate interests): we use the city you choose. We don't track your precise location.

To send emails you need: verification, password resets and important account notices. We don't send marketing without your consent.

To show ads (legitimate interests): some cards are ads, always labelled “Sponsored” or “Promoted”. They're chosen only by the place and scene you're looking at, the words you search and the interests on your profile. Advertisers never receive your personal data. We only count how many times an ad was shown and clicked, without recording who.

We don't sell your personal data, we don't use advertising or tracking cookies, and ads never appear in chats or direct messages. You can report any ad you think breaks our rules.

3. Who sees what

4. Who we share it with

We use trusted service providers who process data for us under contract:

MongoDB Atlas (database) and Vercel (hosting);

Cloudflare R2 (pictures and videos you upload, which are shrunk on your device before they're sent);

Ably and LiveKit (live chat and voice channels);

Expo and browser push services (notifications);

our email provider (account emails) and Google (if you use Google sign-in).

5. How long we keep it

6. Your rights