PactPalPrivacy policy
Last updated 2 November 2026
PactPal is run by Culverin Quantum Systems Limited (RC 9083558), J153-154, Road 5 Shopping Complex, VGC, Lekki, Lagos, Nigeria ("we", "us"). This policy explains what we collect when you use the PactPal app and website, why, and what you can do about it. We follow the Nigeria Data Protection Act 2023.
What we collect
| Data | Why |
|---|---|
| Email address and password (stored as a hash) | To create your account and let you sign in. |
| Display name, profile photo and bio | So friends and group members can recognise you. |
| Goal pacts, daily check-ins, proof photos and videos | To run your pacts and decide who finished. |
| Ajo circles, contributions and payouts | To run your savings circles. |
| Match pacts and PactCoin activity | To run match pacts, rewards and the leaderboard. |
| Messages you send in the app | To deliver them to the person you're chatting with. |
| Friends, blocks and reports | To run the social features and keep people safe. |
| Wallet balance and transaction history | To keep an accurate record of your money. |
| Bank name, account number and account name | To pay your withdrawals. We check the name with your bank before saving it. |
| Payment amounts and references | To credit your top-ups. Card and bank login details go straight to Bachs and never reach us. |
We don't use advertising, ad tracking or third-party analytics, and we don't sell your data.
Who can see what
- Other users can see your display name, photo, bio, pact record, PactCoin total, streaks and leaderboard position.
- People in the same pact see your check-ins and proofs. People in the same Ajo circle see your contributions and payouts.
- Only the two people in a chat can read it. Our moderators may read a message that has been reported to them.
- Your wallet balance, earnings, bank accounts and transaction history are visible only to you.
Who we share it with
- Supabase hosts our database, file storage and sign-in.
- Bachs processes top-ups and bank withdrawals and verifies bank account names.
- football-data.org gives us match results. We only send team names and dates.
- Authorities, when the law requires it.
Some of these providers store data outside Nigeria. We only use providers that protect it with appropriate safeguards.
How long we keep it
We keep your account data while your account is open. When you delete your account we remove your profile, photos, proofs, chats, friends and bank accounts. We keep payment and wallet records for as long as Nigerian law requires (generally six years).
Your rights
You can ask to see, correct, download or delete your data, or object to how we use it. Most of this you can do in the app. For anything else, email support@pactpal.online. You can also complain to the Nigeria Data Protection Commission.
Notifications and permissions
PactPal asks for permission to send reminders, which are scheduled on your phone. It asks for your camera and photos only when you choose to post a proof or a profile photo.
Age
PactPal is for people aged 18 and over. We don't knowingly collect data from anyone younger.
Security
Data is encrypted in transit. Access to your data is limited by strict database rules, and all money movements are recorded in a ledger that can't be edited.
Changes
If we change this policy we'll update the date above and tell you in the app if the change is significant.
Contact
Culverin Quantum Systems Limited, J153-154, Road 5 Shopping Complex, VGC, Lekki, Lagos, Nigeria. support@pactpal.online