Privacy Policy

Residents Pro · Last updated 22 September 2026

Residents Pro is an estate-management app for residential estates in Nigeria. It handles dues and payments, digital identity and guest passes, gate security, community announcements and a vendor marketplace. This policy explains what personal data we collect, why, who can see it, and the rights you have over it.

We process personal data in line with the Nigeria Data Protection Act 2023 and the NDPR. If you are in the EU/UK, the equivalent GDPR rights described below apply to you.

1. Who is responsible

The data controller is the operator of Residents Pro, contactable at privacy@residentspro.com.

Your estate’s management is a separate controller for the data they collect about their residents (dues records, approvals, gate logs). Requests about an estate’s own records should go to that estate’s administrators; we will help you reach them.

2. What we collect

Data	Why
Name, email address, phone number	To create your account, identify you to your estate, and send payment receipts and notices.
Profile photo (optional)	Shown on your digital ID so security can recognise you at the gate.
National Identity Number (optional)	Only if you choose to provide it, so your estate can verify your identity.
Identity documents you upload for verification	Reviewed by your estate’s administrators to approve your residency.
Home address / unit number within the estate	To attach dues and deliveries to the correct property.
Household members, vehicles and pets you register	So they can be issued digital IDs and recognised at the gate.
Payment records — amount, method, date, reference	To show what you have paid and produce receipts. We never store your card number, PIN or CVV.
Guest passes you create and gate entry/exit scans	Estate security and access records.
Marketplace orders and delivery details	To fulfil orders from estate vendors.
Device push token	To deliver notifications, if you enable them.
Crash and usage diagnostics	To find and fix faults. Identifiers are redacted where possible.

The personal vault is encrypted on your device

Anything you store in the in-app vault is encrypted on your phone with a key derived from your PIN (PBKDF2-HMAC-SHA256, then AES-256-GCM). Only ciphertext ever leaves your device. We cannot read it, and neither can your estate, anyone with database access, or us if compelled. The consequence is that if you forget your vault PIN, that data cannot be recovered by anyone.

3. Who can see your data

Your estate’s administrators — your name, contact details, unit, dues and payment status, and any verification documents you submit. This is the point of the service.
Estate security staff — your name, photo and digital ID status, and guest passes you create, so they can verify entry.
Vendors you order from — only your name, delivery address and order contents.
Other residents — nothing beyond what you post publicly, such as a poll response or an announcement comment.

Access is enforced at the database level, per row, per role — not merely hidden in the app. Residents of one estate cannot see data belonging to another.

4. Service providers we use

Provider	Purpose	Where
Supabase	Database, authentication and file storage	London, UK
Flutterwave / Paystack	Card and bank-transfer payment processing	Nigeria / EU
Resend	Transactional email (receipts, invitations)	EU / US
Termii	SMS notifications	Nigeria
Expo	App delivery and push notifications	US
Sentry / PostHog	Crash reporting and product analytics	EU

Payments are handled entirely by the payment provider. Your card details go to them directly and never reach our servers. Because some providers are outside Nigeria, your data may be transferred abroad; we rely on those providers’ contractual data-protection commitments.

We do not sell your personal data, and we do not use it for advertising.

5. How long we keep it

Account and profile data — while your account is active, then deleted or anonymised within 90 days of closure.
Payment and dues records — retained for up to 7 years, because tax and accounting law requires it and because your estate needs a durable record of what was paid.
Gate scans and guest passes — kept as your estate’s security record; ask your estate about its retention period.
Vault contents — until you delete them. We cannot read them at any point.

6. Your rights

You can ask us to:

show you the personal data we hold about you, or give you a copy;
correct anything inaccurate — most of this you can edit yourself under More → My profile;
delete your account and personal data, subject to records we must keep by law (section 5);
stop sending you notifications — you can also change this under More → Notification settings;
restrict or object to a particular use of your data.

Email privacy@residentspro.com and we will respond within 30 days. You may also complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

7. Security

All traffic is encrypted in transit (TLS).
Access is enforced per-row in the database by role, not only in the app.
Identity documents and receipts are held in private storage, reachable only through short-lived signed links.
Vault contents are encrypted on your device before upload (section 2).
Payment credentials never touch our systems.

No system is perfectly secure. If a breach affects your personal data, we will notify you and the NDPC as the law requires.

8. Children

Residents Pro is not intended for children under 18 to hold their own account. A resident may register household members, including minors, for identification and gate access — that information is provided and controlled by the responsible adult.

9. Changes

If we change this policy materially we will notify you in the app before the change takes effect. The date at the top always reflects the current version.

10. Contact

Privacy: privacy@residentspro.com
Support: support@residentspro.com