Privacy Policy

• Data controller: Keyr Technology Ltd.
• Data Protection Officer (DPO): [to be confirmed], support@keyr.ng.
• We are registered with the Nigeria Data Protection Commission (NDPC) where required as a data controller of major importance.

• Identity & verification: name, date of birth, NIN and/or BVN, government ID, photo.
• Contact: phone, email, address; for field agents, institution, course and status.
• Property & tenancy: listings, documents, deeds, lease records, inspection reports and photos.
• Financial: rent, deposits, fees, payment references (card details are handled by our licensed payment processor, not stored by Keyr).
• Location: geofenced inspection data submitted by field agents.
• Technical & usage: device, app usage, and in-app communications.

We collect data you provide when you register, list a property, apply for a tenancy, make a payment, submit a maintenance request or inspection, and communicate through the Platform; and automatically as you use the app.

• To create and manage accounts and verify identity (KYC) — performance of a contract and legal obligation.
• To facilitate listings, tenancies, payments, escrow, maintenance and inspections — performance of a contract.
• To prevent fraud, ensure platform safety, and keep audit trails — legitimate interests and legal obligation.
• To improve our services — legitimate interests.
• For marketing — only with your consent, which you may withdraw at any time.

We verify identity using NIN and/or BVN to reduce fraud and meet legal and onboarding requirements. We use this data only for verification and the operation of your account, and protect it as described in Clause 8.

• Service providers acting on our instructions: the licensed payment processor, the e-signature provider, and insurance partners (for cover you take), each under data-protection terms.
• Field agents, only to the extent needed to perform an inspection, under confidentiality and platform controls.
• Authorities or third parties where required by law, or to establish, exercise or defend legal claims.
• We do not sell your personal data.

Where we transfer personal data outside Nigeria (for example to a cloud provider), we do so only on a lawful basis under the NDPA, with adequate protection or appropriate safeguards in place.

• Encryption at rest (bank-grade) and tokenisation in transit; sensitive fields (e.g., NIN, bank account) are masked in the admin interface by default.
• Access is role-based and least-privilege; viewing unmasked data requires a logged, justified action.
• Immutable, time-stamped audit trails record administrative access; these logs cannot be altered or deleted by staff.

We keep personal data only as long as needed for the purposes above and to meet legal, tax and regulatory obligations, after which it is securely deleted or anonymised.

• You may request access to, or correction or deletion of, your personal data; restrict or object to processing; request portability; and withdraw consent.
• To exercise a right, contact our DPO at support@keyr.ng. You may also lodge a complaint with the NDPC if you are unhappy with how we handle your data.

Our app and website use limited cookies and analytics to operate and improve the service; you can control these through your device or browser settings where applicable.

The Platform is not intended for anyone under 18, and we do not knowingly collect their data.

We may update this Policy. For material changes, we will notify you; please review it from time to time. The current version is available in the app.

Questions or complaints: support@keyr.ng / support@keyr.ng. You may also contact the Nigeria Data Protection Commission (NDPC).