Privacy Policy

GetWorkAm LTD ("WorkAm", "we", "us", "our") · Last updated: April 13, 2026

This Privacy Policy explains how WorkAm collects, uses, stores, and protects your personal data when you use our mobile application ("App"). WorkAm is a business management app designed for Nigerian small and medium enterprises.

We are committed to protecting your privacy in compliance with the Nigeria Data Protection Act 2023 (NDPA), the Nigeria Data Protection Regulation 2019 (NDPR), and all applicable Nigerian laws.

1. Who We Are

Data Controller: GetWorkAm LTD
Location: Lagos, Nigeria
Contact: privacy@getworkam.com
Website: https://getworkam.com

For questions about this policy or to exercise your data rights, contact us at privacy@getworkam.com.

2. What Data We Collect

2.1 Account & Business Information

Business name, type, and address (state, city)
Your name, phone number, and email address
CAC registration number and TIN (if provided)

Purpose: To create and manage your account, identify your business, and provide our services.
Lawful basis: Contract performance.

2.2 Transaction & Financial Data

Sales records (amounts, items sold, payment methods, dates)
Expense records (amounts, categories, payment methods)
Customer and supplier contact information (names, phone numbers)
Outstanding debts and payment history
Inventory records (product names, quantities, prices)

Purpose: To enable you to track your business operations, generate reports, and manage your finances.
Lawful basis: Contract performance.

2.3 Employee Data (if you use HR features)

Employee names, phone numbers, email addresses
Job titles, departments, employment type
Salary information, allowances, and deductions
Bank account details (for payroll)

Purpose: To enable payroll processing and employee management.
Lawful basis: Contract performance and your consent.

2.4 Usage Data

App usage patterns (screens visited, features used)
Device type, operating system version
Error logs and crash reports

Purpose: To improve the App, fix bugs, and understand how our service is used.
Lawful basis: Legitimate interest.

2.5 Payment Data

Subscription payment records (plan type, billing dates, amounts)

Purpose: To manage your subscription.
Lawful basis: Contract performance.

Important: We do NOT collect or store your card numbers, CVVs, PINs, or bank login credentials. All payment processing is handled by Paystack, a Central Bank of Nigeria (CBN) licensed Payment Solution Service Provider (PSSP).

3. How We Store Your Data

3.1 Local Storage (On Your Device)

Your business data is stored primarily on your device using a local database (SQLite). This means your data is available even without an internet connection. You retain full control over this data.

3.2 Cloud Sync

When connected to the internet, your data is synced to our cloud servers powered by Supabase to enable backup, multi-device access, and data recovery. Supabase servers are located outside Nigeria.

3.3 Cross-Border Data Transfers

By using the App with cloud sync enabled, you consent to the transfer of your data to servers outside Nigeria. We ensure that adequate data protection safeguards are in place, including:

Encryption of data in transit (TLS/SSL) and at rest
Access controls and authentication
Supabase's compliance with international data protection standards

You may disable cloud sync at any time in Settings > Sync Settings, in which case your data remains only on your device.

4. Who We Share Your Data With

We do not sell your personal data. We share data only with:

Third Party	Role	Data Shared	Purpose
Supabase	Data Processor (cloud hosting)	All synced business data	Cloud backup and sync
Paystack	Data Processor (payments)	Email, payment amount	Subscription payment processing

We may also disclose your data if required by Nigerian law, court order, or a lawful request from the Nigeria Data Protection Commission (NDPC) or other regulatory authority.

5. How Long We Keep Your Data

Data Type	Retention Period
Account/profile data	Duration of account + 12 months after deletion
Transaction/financial records	6 years (CBN and tax compliance requirement)
Employee/payroll records	Duration of employment + 6 years
Customer/supplier contacts	Duration of account or until you delete them
Audit logs	5 years
Local device data	Until you uninstall the App or clear data

After the retention period, data is securely deleted or anonymised.

6. Your Rights

Under the Nigeria Data Protection Act 2023, you have the right to:

Access — Request a copy of your personal data we hold
Rectification — Correct any inaccurate or incomplete data
Erasure — Request deletion of your data (subject to legal retention obligations)
Restrict processing — Limit how we use your data
Data portability — Receive your data in a structured, machine-readable format (CSV/PDF export is available in the App under Settings > Data Backup)
Object — Object to processing based on our legitimate interests
Withdraw consent — Withdraw your consent at any time, without affecting the lawfulness of prior processing
Automated decisions — We do not make automated decisions that significantly affect you

How to exercise your rights: Email privacy@getworkam.com or use the in-app features (Settings > Your Data & Privacy). We will respond within 30 days.

Right to complain: You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC) at https://ndpc.gov.ng.

7. Data Security

We implement the following measures to protect your data:

Encryption: Data is encrypted in transit (TLS/SSL) and at rest
PIN/Biometric lock: The App supports PIN and biometric authentication to prevent unauthorised access on your device
Access controls: Role-based access (Owner, Manager, Cashier, etc.) limits who can view or modify data within your business
Secure authentication: Phone-based OTP verification for account access
Audit logging: All significant actions are logged for accountability

No system is 100% secure. If we become aware of a data breach that poses a risk to your rights, we will notify you and the NDPC within 72 hours.

8. Children's Data

WorkAm is a business application and is not intended for use by anyone under the age of 18. We do not knowingly collect data from children.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes through the App or via email. Continued use of the App after changes constitutes acceptance of the updated policy.

10. Contact Us

If you have questions, concerns, or requests regarding your data:

Email: privacy@getworkam.com
In-App: Settings > Your Data & Privacy
Website: https://getworkam.com/privacy

Data Protection Officer: privacy@getworkam.com

This policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023.