Effective date: 13 September 2026 This Privacy Policy explains how Teckplus Digital Solutions Limited ("Gidigba", "we", "us"), as data controller, collects, uses, shares and protects personal data through the Gidigba platform, in line with the Nigeria Data Protection Act 2023 ("NDPA") and the Nigeria Data Protection Commission's General Application and Implementation Directive ("NDPR/GAID"). 1. WHO WE ARE Teckplus Digital Solutions Limited is the data controller for personal data processed through Gidigba's worker, client, agent and association apps. For any question about this policy or your data, contact our data protection point of contact at kilode@gidigba.ng. 2. DATA WE COLLECT - Identity data: full name, phone number, email, NIN, BVN, a selfie or liveness photo, and — where a Worker chooses to add them — credential and training certificates. (Gidigba no longer collects a Tax Identification Number. A TIN given before this change remains on file for the Worker who gave it, under the retention terms below.) - Verification results from identity partners (currently Dikript and/or Dojah), which confirm whether a NIN or BVN matches the name supplied; we do not receive or store your BVN's linked bank balance. - Location data, when you share it for job discovery, dispatch, or a safety alert. - Financial data: wallet balance and transaction history, escrow records, loan and savings activity, and bank account details used for payout — card and full bank credentials are handled by our licensed payment partner (currently Monnify) and are not stored on Gidigba's own servers. - Job data: job posts, messages between a Worker and Client, ratings, dispute submissions and evidence (including photos, audio or video attached to a dispute). - Communications: support conversations, GidiBot chat messages, and calls or messages placed through the app's masked-number calling feature. - Emergency contacts and next-of-kin details, collected for safety purposes only. - Device and usage data: device identifiers, IP address, app version and crash/diagnostic logs. 3. WHY WE PROCESS YOUR DATA (LAWFUL BASIS) We process personal data on one or more of the lawful bases recognised under the NDPA: performance of the contract between you and Gidigba (running the marketplace, escrow and payouts); your consent (for example, sharing live location, or enabling a marketing message); compliance with a legal obligation (identity verification, tax and financial-crime rules); and our legitimate interests (fraud prevention, platform safety, service improvement), balanced against your rights and never overriding them for sensitive data without a stronger basis. 4. HOW WE USE YOUR DATA - To verify your identity and eligibility to work or transact on Gidigba. - To operate the marketplace: matching, messaging, escrow, payouts, loans, savings and insurance referrals. - To compute your points, tier and reputation from real activity. - To respond to disputes, complaints and safety alerts. - To detect and prevent fraud, money laundering and platform abuse. - To send service messages (SMS, WhatsApp, email, push, or a call) about your account, a job, or your money — these are not optional marketing. - To improve the platform, including using aggregated, de-identified data for analytics; GidiBot conversations may be processed by our AI provider (Anthropic) solely to generate a response and are not used to train their general-purpose models. 5. WHO WE SHARE DATA WITH We share personal data only as needed, with: - Identity verification providers (Dikript, Dojah) — to confirm NIN/BVN. - Payment providers (Monnify) — to move money into and out of your wallet. - Insurance partners, through Curacel — only where you apply for a cover. - Messaging, SMS and calling providers (currently Termii, Sendchamp, LiveKit, Twilio) — to deliver OTPs, alerts and in-app calls. - Our AI provider (Anthropic) — to power GidiBot and support tooling. - Cloud infrastructure and storage providers (currently AWS) — to host the platform and store uploaded documents securely. - The Nigeria Data Protection Commission, law enforcement, or a court, where required by law. - Another party to a job or dispute — limited to what that person needs (for example, a Client sees a Worker's name, verified badge, tier and public dispute record — never a Worker's NIN, BVN or full address). We do not sell personal data to third parties. 6. INTERNATIONAL TRANSFERS Some of the providers above (including our AI and cloud infrastructure providers) may process data outside Nigeria. Where that happens, we rely on contractual safeguards with that provider and take reasonable steps to ensure your data receives a comparable standard of protection to that required under the NDPA, in line with the NDPC's cross-border-transfer requirements. 7. HOW LONG WE KEEP DATA We retain personal data for as long as your account is active, and for a further period after closure where needed to meet a legal, tax, financial or dispute-record obligation, or to defend a legal claim. Identity verification records and financial transaction records are ordinarily kept for the minimum period required by Nigerian financial-crime and tax law. 8. YOUR RIGHTS Under the NDPA you have the right to: be informed about how your data is used (this policy); access the personal data we hold about you; request correction of inaccurate data; request erasure, subject to a legal or contractual reason we may need to keep some records; restrict or object to certain processing; request a portable copy of data you provided; and withdraw consent at any time where consent is the basis for processing, without affecting processing already carried out. To exercise any of these, contact kilode@gidigba.ng. We will respond within the timeframe the NDPA requires and may need to verify your identity first. 9. YOUR RIGHT TO COMPLAIN If you believe we have mishandled your personal data, you may lodge a complaint with us directly, or with the Nigeria Data Protection Commission (NDPC) at https://ndpc.gov.ng. 10. SECURITY We use encryption in transit, access controls, and two-factor authentication for staff accounts to protect personal data. No system is completely secure; if we become aware of a breach likely to affect your rights, we will notify the NDPC and affected users as required under the NDPA. 11. CHILDREN Gidigba is not directed at, and may not knowingly be used by, anyone under 18. If we learn an account belongs to a minor, we will close it. 12. CHANGES TO THIS POLICY We may update this policy as our practices or the law changes. A material change will be notified in-app before it takes effect. 13. CONTACT Teckplus Digital Solutions Limited Data protection contact: kilode@gidigba.ng · +234 705 6912 499