1. Introduction and Scope

This Privacy Policy explains how Kando Pro-House and Services Ltd (“we”, “us”, or “our”) collects, uses, discloses, and protects your personal data when you use RiskTrack, our mobile application, website, and related services (collectively, “the Services”).

This policy applies to all users globally, including residents of Nigeria, the European Union, and jurisdictions with applicable data protection laws.

By using RiskTrack, you consent to the practices described herein.

2. Data Controller Information

• Company: Kando Pro-House and Services Ltd
• Registered Address: Victoria Island, Lagos, Nigeria
• Support Email: support@risktrack.co

3. What Data We Collect

• We may collect the following types of personal and technical information:
• 3.1 Personal Information
• Full name
• Email address or phone number
• Profile photo (optional)
• Emergency contacts
• Community or organizational affiliation
• 3.2 Device and Usage Data
• Device type, OS, and app version
• IP address and network provider
• Language and time zone settings
• App interaction logs and usage statistics
• 3.3 Location Data
• Real-time GPS coordinates
• SOS-triggered movement history
• Location-based safety alerts and trends
• 3.4 Audio and Media (with consent)
• Background audio recordings during SOS
• Photos, screenshots, or attachments with incident reports

4. How We Use Your Data

• Your personal data is used to:
• Provide core features such as SOS alerts, emergency contact notifications, and real-time tracking
• Share updates within your community network or assigned group
• Display nearby safety incidents or danger zones
• Improve app reliability and performance
• Process subscriptions and payments
• Comply with legal and regulatory obligations
• Send alerts, service notifications, and policy updates

5. Legal Basis for Processing

• We process data based on the following lawful grounds:
• Consent: For optional features like media uploads
• Contractual necessity: To deliver Services as agreed
• Legal obligation: To comply with NDPR and related laws
• Legitimate interest: To enhance safety intelligence and service reliability

6. Sharing and Disclosure of Data

• We may share your data with:
• Emergency contacts during distress situations
• Law enforcement authorities when legally required or to prevent harm
• Third-party service providers (e.g., cloud hosts, payment gateways, analytics)
• Community administrators in your group or subscription tier
• In case of mergers or acquisitions, subject to safeguards
• We do not sell your personal data.

7. Community Safety and Public Data

• Some data, such as anonymous incident reports and location trends, may be made publicly visible on:
• Community danger zone maps
• Heatmaps and safety dashboards
• Public safety alerts (without revealing personal identities)

8. Retention of Data

• We retain your data for as long as:
• You maintain an active account
• It is required for legitimate safety or legal purposes
• It supports service audits and troubleshooting
• SOS and incident data are typically retained for 12 months unless deletion is requested earlier.

9. Your Rights

• Under NDPR and GDPR, you have the right to:
• Access your personal data
• Correct inaccuracies
• Delete your data (“right to be forgotten”)
• Object to data processing
• Withdraw consent at any time
• Request data portability in a usable format
• Requests can be made by contacting support@risktrack.co

10. Data Security

• We take strong measures to secure your data, including:
• End-to-end encryption for location and SOS data
• Role-based access control
• Firewalls and secure cloud infrastructure
• Regular security audits and penetration testing
• Despite our efforts, no system is 100% secure.

11. Children’s Privacy

RiskTrack is not intended for children under 13 unless under direct parental supervision. We do not knowingly collect data from minors without appropriate consent.

12. Cookies and Tracking

• Our website may use cookies and similar technologies to:
• Track browsing behavior
• Remember user preferences
• Improve user experience
• Users may disable cookies via their browser settings.

13. Third-Party Services

• We may integrate or rely on external services such as:
• Google Maps (location services)
• Payment processors (e.g., Stripe, Paystack,)
• SMS and email providers
• Analytics platforms
• These providers have their own privacy policies and terms.

14. Cross-Border Data Transfers

• If your data is processed outside Nigeria, we ensure:
• Adequate legal safeguards (e.g., Standard Contractual Clauses)
• Protection per international data transfer laws
• Compliance with EU-GDPR where applicable

15. Changes to this Policy

• We may update this Privacy Policy. You will be notified via:
• App alerts
• Email notifications
• Updated content on our website
• Continued use of RiskTrack indicates acceptance of changes.

16. Contact Information

• Customer Support:
• Email: support@risktrack.co
• Response Time: 24–72 hours
• Business Hours: Mon–Fri, 9am–6pm WAT