← Back to Zilcycler
Effective Date: May 5, 2026
Last Updated: May 5, 2026
Zilcycler ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, share, and protect your personal information when you use our mobile application and website (collectively, the "Service"). By using Zilcycler, you agree to the collection and use of information in accordance with this policy.
1. Information We Collect
1.1 Information You Provide Directly
When you create an account or use our Service, we collect:
- Account Information: Full name, email address, phone number, password (stored securely as a hash, never in plaintext)
- Profile Information: Gender, residential or business address, profile photo, industry type (for organization accounts)
- Financial Information: Bank name, account number, account name (used solely for processing redemption payouts; account numbers are encrypted at rest using AES-256-GCM)
- Pickup Information: Pickup addresses, contact details, photos of waste materials, scheduled times
- Communications: Messages you send to other users or support staff via our in-app messaging
1.2 Information Collected Automatically
- Device Information: Device type, operating system version, app version, unique device identifiers
- Location Data: Precise GPS location (only when you actively use the drop-off finder feature; not collected in the background)
- Usage Data: Features accessed, screens viewed, actions performed (used for improving the Service)
- Technical Data: IP address (for security and rate-limiting purposes), error logs and crash reports
1.3 Information from Third Parties
We use Cloudinary for image hosting. Images you upload (waste photos, profile photos) are stored on Cloudinary's secure infrastructure. We do not receive personal information about you from any other third parties.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account
- Schedule, dispatch, and track waste pickup requests
- Calculate and credit Zoint rewards based on recycled materials
- Process redemption requests (cash withdrawals to your bank, charity donations)
- Connect you with collectors and recycling organizations
- Send you transactional communications (OTP codes, account verification, pickup confirmations)
- Calculate distances to nearby drop-off centers (location data)
- Improve the Service through analytics and bug tracking
- Detect and prevent fraud, abuse, and security incidents
- Comply with legal obligations under Nigerian law
3. Legal Basis for Processing
We process your data based on:
- Contractual Necessity: To provide the Service you signed up for
- Legitimate Interest: To improve our Service and prevent fraud
- Your Consent: For optional features like location services and marketing communications
- Legal Obligation: Where required by Nigerian law
4. How We Share Your Information
We do not sell your personal information. We share information only in the following circumstances:
- With Collectors: Your name, pickup address, and phone number are shared with the assigned collector to fulfill pickup requests
- With Service Providers: Cloudinary (image storage), Neon (database hosting), Netlify (application hosting), Upstash (rate limiting), all under strict data processing agreements
- For Legal Reasons: If required by law, court order, or to protect our rights, property, or safety
- Business Transfers: In connection with a merger, acquisition, or sale of assets, you will be notified before your information is transferred
- With Your Consent: For any other purpose disclosed at the time of collection
5. Data Security
We implement industry-standard security measures including:
- Encryption of sensitive data at rest (bank account numbers via AES-256-GCM)
- Password hashing using bcrypt with cost factor 12
- HTTPS/TLS for all data transmission
- JSON Web Token authentication with 12-hour expiry
- Account lockout after 5 failed login attempts
- Rate limiting to prevent abuse
- Audit logs for sensitive administrative actions
- Strict role-based access controls
However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but commit to promptly notifying you of any breach affecting your data.
6. Data Retention
- Active Accounts: We retain your information for as long as your account is active
- Deleted Accounts: When you delete your account, your personal information is anonymized within 30 days. Aggregate transaction records may be retained for legal/tax compliance for up to 7 years, but cannot be linked back to you
- Audit Logs: Security audit logs are retained for 12 months
- Error Logs: Technical error logs are retained for 90 days
7. Your Rights
Under Nigerian Data Protection Regulation (NDPR) and other applicable laws, you have the right to:
- Access: Request a copy of the personal data we hold about you
- Correction: Update inaccurate or incomplete data via the Settings screen
- Deletion: Request deletion of your account and associated data through Settings → Privacy & Security → Delete Account
- Portability: Request a machine-readable copy of your data
- Objection: Object to certain types of processing
- Withdrawal of Consent: Withdraw consent for optional features at any time
To exercise these rights, contact us at admin@zilcycler.com or use the in-app deletion flow.
8. Children's Privacy
Zilcycler is not intended for users under the age of 18. We do not knowingly collect information from children. If you believe a child has provided us with information, please contact us immediately and we will delete it.
9. Location Information
Our app requests access to your device's location to:
- Calculate distances to nearby drop-off centers
- Provide directions to recycling locations
Location is only collected when you actively use these features. We do not track your location in the background. You can disable location access at any time through your device settings, though some features may not work as expected.
10. Camera and Photo Access
We request access to your device camera and photo library to:
- Allow you to upload photos of waste for pickup verification
- Set or update your profile picture
Photos are uploaded to our secure storage and associated with your pickup or profile only. We do not access your photo library without explicit user action.
11. Cookies and Local Storage
Our web application uses local storage to:
- Maintain your authenticated session (JWT tokens)
- Remember your dark mode preference
The mobile app uses encrypted device storage for the same purposes. We do not use third-party tracking cookies.
12. International Data Transfers
Your data is processed and stored on servers that may be located outside Nigeria, including in the United States and European Union. We ensure all transfers comply with applicable data protection laws and that our service providers maintain equivalent security standards.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notification. The "Last Updated" date at the top of this policy indicates when it was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.
14. Contact Us
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
You may also lodge a complaint with the Nigeria Data Protection Bureau (NDPB) if you believe your rights have been violated.
15. Disclaimer
This Privacy Policy is provided for informational purposes. While we have made every effort to ensure accuracy and completeness, this document should not be construed as legal advice. We recommend consulting qualified legal counsel regarding your specific data protection rights and obligations.