Privacy Policy

TushPlug is the data controller for personal data processed through the Platform, except where a Provider processes your data as an independent business when delivering a service (for example, your home address shared for a home visit).

Contact: privacy@tushplug.com. General support: support@tushplug.com.

Account data: name, email, phone (if provided), profile photo (if provided), role (customer or provider), city, and onboarding preferences.

Booking data: selected services, visit type (in-shop or home service), appointment times, notes, home address and landmarks for home visits, booking status, and payment status.

Payment data: we do not store full card numbers on our servers. Payment partners process transactions and may share limited confirmation data with us (amount, reference, status).

Usage data: app interactions, device type, crash logs, and approximate location derived from the city you select (we do not require GPS for core features).

Communications: messages you send to support and reviews or reactions you post on the Platform.

Photos and inspiration: reference images from your device; inspiration photos selected from the Platform gallery; images attached to jobs, bookings, or chat; and engagement data (such as likes or saves) where enabled.

Provider business data (if you are a Provider): business name, bio, category, address, portfolio images, services, prices, working hours, and payout details you submit.

To create and secure your account (including email OTP authentication).

To show relevant Providers and services in your selected city.

To process bookings, payments, cancellations, and customer support.

To send transactional messages (booking confirmations, reminders, security alerts).

To improve the Platform, prevent fraud, and enforce our Terms.

To power inspiration galleries, style discovery, and job or booking flows so users can show the look they want and Providers can showcase their work.

To comply with legal obligations and respond to lawful requests from authorities.

With your consent where required, for optional marketing (you may opt out).

We process personal data on one or more of the following grounds under the Nigeria Data Protection Act 2023 and related guidance: performance of a contract (bookings and account), legitimate interests (security, analytics, product improvement), legal obligation, and consent where applicable (for example optional marketing).

Providers: when you book, we share information needed to perform the service (name, contact, visit details, notes).

Service providers: hosting and database (Supabase), payment processors (e.g. Paystack, Flutterwave), email/SMS delivery, analytics, and customer support tools bound by confidentiality and data processing terms.

Legal and safety: we may disclose data if required by law, court order, or to protect users, Providers, or the public.

Business transfers: if TushPlug is involved in a merger or acquisition, data may transfer subject to this Policy.

Other Platform users: inspiration and portfolio photos may be visible to other customers and Providers browsing TushPlug. Job photos may be shared with Providers participating in your job.

We do not sell your personal data.

When you upload photos (for example job inspiration images, booking reference photos, or a profile picture), we process the image file, associated metadata (such as likes or saves where enabled), and links to any Platform inspiration item you selected.

We use these photos to let you describe the service you want; to show Providers the look you are requesting; to power inspiration galleries and style discovery; to display Provider portfolios; and to improve matching, safety, and product quality on the Platform.

Photos you upload and Provider portfolio photos you opt into for inspiration may be visible to other authenticated users browsing TushPlug — not only to a single Provider. Job-related photos may be visible to Providers you invite or who respond to your job.

Our legal bases include performance of a contract (delivering booking and job features), legitimate interests (operating inspiration and discovery features), and your consent where required by law. See our Terms of Service for the licence you grant when uploading content.

You may delete many photos by removing them from a draft job, deleting your account, or contacting privacy@tushplug.com. Copies may persist for a limited time in backups or where retention is required by law, fraud prevention, or dispute resolution.

Our infrastructure providers may process data outside Nigeria. Where this occurs, we rely on appropriate safeguards such as standard contractual clauses or provider certifications, consistent with applicable law.

We keep account data while your account is active. After deletion, we remove or anonymise personal data within a reasonable period, except where we must retain records for tax, accounting, fraud prevention, dispute resolution, or legal compliance (typically up to six (6) years for financial records where applicable).

Aggregated or de-identified data may be kept indefinitely for analytics.

We use industry-standard measures including encryption in transit (HTTPS/TLS), access controls, row-level security on our database, and least-privilege access for our team.

No method of transmission or storage is 100% secure. Please use a strong email account and notify us promptly of suspected unauthorised access.

Subject to Nigerian law, you may have the right to access, correct, delete, restrict, or object to certain processing of your personal data, and to withdraw consent where processing is consent-based.

To exercise rights, use in-app profile settings, email privacy@tushplug.com, or delete your account under Profile → Settings → Delete account.

You may lodge a complaint with the Nigeria Data Protection Commission if you believe your rights have been violated.

You can permanently delete your account in the app (Profile → Settings → Delete account). This removes your authentication account and triggers deletion of associated profile data subject to our retention rules above.

Deletion cannot be undone. Export any information you need before deleting.

If you cannot access the app, email support@tushplug.com from your registered email with the subject "Account deletion request".

The Platform is not directed at children under 18. We do not knowingly collect data from children. Contact us if you believe a child has provided data and we will delete it.

Our website may use cookies for session management and analytics. The mobile app uses local storage for sign-in sessions and preferences. You can control cookies through your browser settings.

We may update this Privacy Policy. The "Last updated" date will change and material updates may be communicated in-app or by email. Please review periodically.