Privacy Policy

Atoobi operates Nigeria's first cashback dining network, connecting diners with participating restaurants in Abuja. This policy explains how we collect, use, and protect your personal data in connection with our waitlist and, upon launch, our membership service.

References to “Atoobi”, “we”, “us”, or “our” in this policy refer to the Atoobi platform and its operators.

When you join our waitlist, we collect:

• First name — to personalise your invitation and communications.
• Email address — to send your invitation, product updates, and service announcements.
• WhatsApp phone number — to deliver your membership details and time-sensitive dining offers via WhatsApp.

Upon launch, we may additionally collect dining transaction data (restaurant visited, amount spent, cashback earned) to operate the cashback programme.

We use the information you provide to:

• Reserve your place on the founding member waitlist.
• Send your membership invitation when we launch.
• Communicate product updates, launch announcements, and dining offers.
• Calculate and credit cashback on eligible dining transactions.
• Improve and personalise your Atoobi experience.

We will not use your data for purposes incompatible with those described above without your prior consent.

We process your personal data on the following legal bases under the Nigeria Data Protection Act 2023 (NDPA):

• Consent — by submitting your details you consent to us processing your data for the purposes described in this policy.
• Legitimate interests — to operate, improve, and secure the platform.
• Contract performance — to deliver the cashback service once you become a member.

We use the following third-party services to help operate the waitlist. Each has its own privacy policy:

• GetLaunchList — waitlist management and email delivery. Your name, email, and phone number are shared with this service.

We do not sell your personal data to any third party.

Waitlist submissions are stored securely on our servers. We use industry-standard measures to protect your data from unauthorised access, disclosure, or loss.

Your data is held for as long as necessary to fulfil the purposes described in this policy, or as required by applicable Nigerian law.

Atoobi provides a clear way for users to request deletion of their Atoobi account and associated data. In the Atoobi mobile app, go to Profile > Account Information > Delete Account.

If you no longer have access to the app, submit your request by emailing us at ops@atoobi.com with the subject line “Delete my Atoobi account”.

Include your Atoobi username and the email address or phone number registered to your account. Do not send your password, one-time passcode, or payment-card details. We will verify that you own the account before processing the request.

Whether you start the request in the app or by email, the account is scheduled for deletion after a 30-day cooling period. Our operations team will review the request, request deletion from applicable service providers, and email you confirmation when the process is complete. Account deletion is not the same as temporarily disabling or freezing an account.

After the cooling period, the data deleted or anonymised may include your Atoobi username and profile details, name, email address, phone number, saved cards, preferences, diner photos or videos, and account-linked dining, transaction, and cashback information.

Transaction records required by law may be retained without your profile details. We may also retain limited records where necessary for legal or regulatory compliance, accounting, payment reconciliation, fraud prevention, security, dispute or chargeback handling, or to keep a minimal record that a deletion request was processed. Retained records are kept only for as long as necessary for the applicable purpose or required by law, after which they are deleted or anonymised.

Under the Nigeria Data Protection Act 2023, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (“right to erasure”).
• Withdraw consent at any time without affecting prior processing.
• Object to processing based on legitimate interests.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

For the step-by-step process to delete an Atoobi account and associated data, see our Account and Data Deletion section. For other privacy-rights requests, contact us at legal@atoobi.com.

Our service is intended for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Material changes will be communicated to you via email or WhatsApp.

For any questions about this Privacy Policy or your personal data, please contact us at legal@atoobi.com.