Privacy Policy
GetWorkAm LTD ("WorkAm", "we", "us", "our") · Last updated: 24 July 2026
WorkAm is a business management app for Nigerian small and medium businesses. This policy explains, in plain terms, what we do with your information. It is written to comply with the Nigeria Data Protection Act 2023 (NDPA) and the Nigeria Data Protection Regulation 2019 (NDPR).
The honest gist
What this means for you, in one breath
- Your business data lives on your phone first, so the app keeps working even when the network is down.
- We keep an encrypted cloud backup so a lost or stolen phone does not mean lost records, and you can switch it off any time in Settings.
- We never sell your data. Not to advertisers, not to anyone.
- We never see your customers' card numbers or PINs. Monnify handles payments, so the card details never touch us.
- You can export everything (CSV or PDF) or delete your account whenever you want, from Settings. Uninstalled the app or cannot sign in? Ask us to delete it here.
- Questions or requests? Email support@getworkam.com and we reply within 30 days.
This is the plain-English summary. The full detail is below, and it is what governs.
1. Who We Are
WorkAm is operated by GetWorkAm LTD, a company registered in Nigeria and based in Lagos. Under the NDPA, GetWorkAm LTD is the data controller for the information described here.
- Data Controller: GetWorkAm LTD, Lagos, Nigeria
- Contact and Data Protection Officer: support@getworkam.com
- Website: getworkam.com
2. What We Collect, and Why
We only collect what the app needs to do its job. Here is the whole list, what each is for, and the legal basis we rely on under the NDPA.
2.1 Your account and business
Business name, type and address (state, city), your name, phone number and email, and your CAC number and TIN if you add them. We use this to set up and run your account and identify your business. Legal basis: performing our contract with you.
2.2 What you record in the app
Sales, expenses, inventory, quotes and invoices, customer and supplier names and phone numbers, and debts and payment history. This is the product itself: it is how you track your business, get reports, and manage money owed. Legal basis: performing our contract with you.
2.3 Staff details (only if you use HR and payroll)
Employee names, contacts, roles, pay, allowances, deductions, and bank details for payroll. We use this to run payroll and manage your team. You are responsible for having told your staff that you keep these records. Legal basis: our contract with you, and your consent.
2.4 Diagnostics (very little, and no tracking)
WorkAm does not use third-party analytics, and does not track which screens you visit or build any profile of you. The only diagnostic information we may receive is basic crash and performance data that the app stores (Google Play or Apple) share with us in aggregate, and only if your device is set to share it. We use it purely to find and fix bugs. Legal basis: our legitimate interest in keeping the app working.
2.5 Subscription payments
Records of your WorkAm subscription (plan, billing dates, amounts), used to manage your subscription. Legal basis: performing our contract with you.
What we never collect: we do not collect or store card numbers, CVVs, card PINs, or bank login details, yours or your customers'. All payment processing is handled by Monnify, a licensed Nigerian payment provider operated by Moniepoint (TeamApt Ltd). We only ever see that a payment happened, never the card behind it.
3. Where Your Data Lives
3.1 On your phone, first
Your business data is stored primarily on your own device in a local database, so the app keeps working even when the network is down, and you stay in control of your records.
3.2 An encrypted cloud backup
When you are online, your data syncs to our cloud so you have a backup, can use more than one device, and can recover after a lost phone. Our cloud runs on Supabase, hosted on Amazon Web Services in the United States, which means some of your data is stored outside Nigeria.
3.3 Sending data outside Nigeria, safely
Because that backup sits on servers outside Nigeria, using cloud sync means you agree to that transfer. We protect it with concrete safeguards, not vague promises:
- Your data is encrypted in transit (TLS/SSL) and at rest.
- Access is restricted by authentication and role-based controls.
- We have a data processing agreement with Supabase that binds it to protect your data and only process it on our instructions.
Prefer to keep everything on your phone only? Turn off cloud sync any time in Settings > Sync. Your records then stay solely on your device, and you become responsible for backing it up.
4. Who We Share It With
We do not sell your personal data, and we do not share it for advertising. We pass data to a service provider only where it is needed to run WorkAm:
| Who | Their role | What they get |
|---|---|---|
| Supabase | Cloud hosting, sign-in and image storage (processor) | Everything you sync, the email or phone number you sign in with, and any photos you upload, to back it up, sign you in, and keep every device in step |
| Monnify (Moniepoint) | Payments (processor) | Your email, your business ID and the amount, to take your subscription payment and set up your reserved account |
| Anthropic (Claude) | Reading photos (processor) | The photos you scan, receipts, products or stock lists, to pull the items out of them for you |
| Resend | Email (processor) | Your email address, to send login codes, team invites and renewal reminders |
| Termii | SMS (processor) | Your phone number, to send one-time login codes by SMS |
| Expo, Apple (APNs), Google (FCM) | Push notifications (processors) | Your push token and device model, to deliver notifications to your phone |
| The payment provider you connect (Squad, OPay, PalmPay, Nomba or Moniepoint) | Collecting money from your customers (processor) | The account details you give us for that provider, and the amount and reference of each payment, so your customers can pay you. Only the provider you choose to connect, and only if you connect one |
That is the complete list of services your data passes through. We do not sell it, and we do not hand it to advertisers or data brokers.
One more thing about sharing: when you send a payment reminder or an invoice over WhatsApp, WorkAm simply opens WhatsApp on your own phone with the message ready to send. You send it yourself. We do not connect to, read, or store anything from your WhatsApp account.
We may also disclose data if Nigerian law requires it, for example a valid court order or a lawful request from the Nigeria Data Protection Commission (NDPC) or another regulator.
5. How Long We Keep It
We keep data only as long as we need it, or as long as the law requires. Some financial records must be kept for years under CBN and tax rules, even if you would rather they were gone sooner.
| Type of data | How long |
|---|---|
| Account and profile | While your account is active, plus 12 months after deletion |
| Transactions and financial records | 6 years (CBN and tax requirement) |
| Employee and payroll records | Duration of employment, plus 6 years |
| Customer and supplier contacts | While your account is active, or until you delete them |
| Audit logs | 5 years |
| Data on your device | Until you uninstall the app or clear its data |
Once a retention period ends, we securely delete or anonymise the data.
6. Your Rights
Under the NDPA, these rights are yours over your personal data, and most of them you can act on yourself, right inside the app:
- See it: get a copy of the data we hold about you.
- Fix it: correct anything inaccurate or incomplete.
- Delete it: ask us to erase your data, subject to the retention rules above. Do it yourself in the app, or, if you have uninstalled it or cannot sign in, on our account deletion page.
- Limit it: restrict how we use it.
- Take it with you: export your data in a portable format. CSV and PDF export is built in, under Settings > Data Backup.
- Object: object to processing we base on legitimate interest.
- Withdraw consent: at any time, without affecting anything we did lawfully before.
We do not make automated decisions that significantly affect you. To exercise any right, use the in-app tools under Settings > Your Data & Privacy, or email support@getworkam.com. We respond within 30 days.
If you think we have got something wrong, you can also complain to the Nigeria Data Protection Commission at ndpc.gov.ng.
7. How We Protect It
- Encryption: your data is encrypted in transit and at rest.
- PIN and biometric lock: the app can require a PIN or fingerprint or face unlock, so a stranger holding your phone cannot open it.
- Role-based access: Owner, Manager, Cashier and other roles control who in your business can see or change what.
- Phone-based verification: one-time codes (OTP) confirm it is really you.
- Audit logging: significant actions are recorded, so there is accountability.
No system is ever 100% secure. If a breach affects your rights, we will notify you and the NDPC within 72 hours, as the law requires.
8. Age and Children
WorkAm is for running a business, so it is meant for adults. You must be at least 18 to use it, and it is not intended for children. We do not knowingly collect data from anyone under 18, and if we learn we have, we will delete it.
9. Changes to This Policy
As WorkAm grows we may update this policy. When we make a meaningful change, we will update the date at the top and, where it matters, let you know in the app. Continuing to use WorkAm after a change means you accept the updated policy.
10. Contact Us
Privacy questions, requests, or complaints go to support@getworkam.com, or write to GetWorkAm LTD, Lagos, Nigeria. We are a small team and we read these ourselves.
This policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023.