Privacy Policy

This policy explains what information Potiphar collects, why, who we share it with, and the choices you have. We follow the Nigeria Data Protection Act 2023.

What we collect

• Account details: your name, username, email address, country, optional date of birth, and a scrambled (hashed) version of your password. We never store your password itself.
• Your commitments: goals, daily plans, dates, stakes, and which days were won or lost.
• Proof: the photos, videos, screenshots, links and notes you submit, and activity imported from fitness apps you connect.
• Money: your wallet transactions and payout bank details. Card details are handled by our payment partner and never reach our servers.
• Community: posts, comments, likes and who you follow.
• Technical: your time zone (so days end at your midnight) and a sign-in cookie that keeps you logged in. We don't use advertising trackers.

How we use it

• To run Potiphar: track your commitments, settle each day, pay out what you win back, and show your posts to the community.
• To review proof (our team checks it by hand) and to prevent fraud.
• To send the reminders and updates you choose in Settings, and essential messages about your account.

Who we share it with

We don't sell your information. We share it only with services that help us run Potiphar, under agreements that protect it:

• Vercel (hosting and file storage) and Neon (database), in the United States.
• Paystack, to process deposits and withdrawals.
• Anthropic, to review proof photos and screenshots.
• Resend, to send emails.

Proofs on public commitments, your posts, name and username are visible to other members. Proofs on private commitments are visible only to you and our review team.

How long we keep it

We keep your information while your account is open. When you close it, we delete or anonymise your personal information within 90 days, except records we must keep by law, such as payment records, which we keep for up to 6 years.

Your rights

You can ask for a copy of your information, ask us to correct or delete it, or object to how we use it. Email [email protected] from the address on your account and we'll respond within 30 days. You can also complain to the Nigeria Data Protection Commission.

Security

Data is encrypted in transit, passwords are hashed, and access to production systems is limited to the people who need it.

Changes

If we change this policy in a way that matters, we'll tell you by email or in the app first.