Privacy Policy

This Privacy Policy describes how Bamaja Integrated Online Services ("Bamaja", "we", "us", or "our") collects, uses, stores, and protects your personal information when you use the Bamaja mobile application ("the App") and related services accessed through bamaja.online.

By using Bamaja, you agree to the practices described in this policy. If you do not agree, please do not use the App.

1. Who We Are

Bamaja Integrated Online Services is a Lagos, Nigeria-based company that operates the Bamaja App. The App provides AI-powered features including PixBot (AI image generation), NaijaBot (Nigerian news and chat with an in-app Birthday Reading feature for astrology), HustleBot (wealth mentor audit), LearnBot (learning assistant), and GistBot (a viewer for the Nigerian news site naijagist.ng).

Contact: support@nigeriafaces.com

2. Age Requirement

Bamaja is intended for users 18 years of age and older. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected information from someone under 18, we will delete it promptly. Parents or guardians who believe a minor has provided us with personal information should contact support@nigeriafaces.com.

3. Information We Collect

3.1 Information You Provide

• Email address — for account creation, login, and important notifications
• First name — used by the AI bots to address you personally
• Password — stored securely as a one-way bcrypt hash; we never see your plain password
• Photos you upload — only when you use PixBot to generate AI images of yourself
• Chat messages and prompts — text you send to NaijaBot, HustleBot, and LearnBot
• HustleBot audit answers — your responses about skills, goals, and situation
• Date of birth — only when you use the Birthday Reading feature inside NaijaBot

3.2 GistBot Web Content

GistBot is a viewer for the website naijagist.ng (operated by Bamaja). When you use GistBot, the standard web technologies of that site are loaded inside the app. This may include cookies, page-view tracking, and ads served by the naijagist.ng site itself. We do not link your Bamaja account identity to your GistBot browsing within naijagist.ng.

3.3 Information Generated by Your Use

• User IDs — internal identifiers we generate for your account
• Session tokens — security tokens that keep you logged in
• Purchase history — records of credits you buy via Google Play Billing
• AI-generated content — images and replies created in response to your prompts
• App interactions — which bots you use, when, and basic usage patterns
• Crash logs and diagnostics — automatically reported when the app crashes
• Device IDs — Android advertising/billing identifiers used by Google Play SDK

3.4 Information We Do NOT Collect

• Your phone's location (no GPS, no IP-based location tracking)
• Your address, phone number, or other contact info
• Your contacts list, SMS, or other apps' data
• Your race, ethnicity, religion, or political beliefs
• Health or fitness data
• Your web browsing history outside the App
• Your credit card numbers (handled entirely by Google Play; we only see the order ID)

4. How We Use Your Information

Purpose	What we use
Account management (login, recovery)	Email, password hash, user IDs
App functionality (AI features)	Photos, chat messages, prompts, name
Personalization (greeting by name)	First name
Process purchases (credits)	Purchase history, user IDs
Improve the app (analytics)	App interactions, crash logs, diagnostics
Fraud prevention and security	Device IDs, IP address, session tokens
Service emails (account verification, password reset, deletion confirmation)	Email address

5. Third-Party Service Providers

To operate Bamaja, we share specific data with the following service providers. These providers are bound by their own privacy policies and may only use your data to perform services for us.

Provider	What is shared	Purpose
Google Play Billing	Purchase tokens, product IDs	Process credit purchases
Resend (resend.com)	Email address, name	Send service emails
OpenAI	Chat prompts (no name or email attached)	Power NaijaBot and other AI chat
DeepSeek AI	Chat prompts (no name or email attached)	Power HustleBot and other AI features
Google Gemini	Photos and prompts for image generation (no name or email attached)	Power PixBot image generation
NaijaGist.ng (our own site)	Standard web requests from GistBot WebView	Serve news content; may set its own cookies and analytics

We do not sell your personal information to anyone. We do not share data with advertisers, data brokers, or marketing companies.

6. How We Store and Protect Your Data

• All data is transmitted between your device and our servers over encrypted HTTPS connections
• Passwords are stored using bcrypt hashing (one-way, never reversible)
• Our servers are based in secure data centers
• Access to user data is restricted to authorized personnel only
• We use industry-standard security practices including firewalls, access controls, and regular security audits

7. How Long We Keep Your Data

• Account data — kept as long as your account is active
• Chat history — kept indefinitely unless you delete your account or request specific deletion
• Photos uploaded to PixBot — kept for AI generation and gallery viewing; deleted when you delete your account
• Purchase history — kept for legal and tax compliance (minimum 6 years per Nigerian tax law)
• Crash logs and diagnostics — kept up to 90 days, then rotated automatically
• Server logs (IP addresses, request times) — kept up to 90 days, then rotated automatically
• Account deletion audit log — kept indefinitely with masked email (e.g., "j***n@gmail.com") for compliance audits

8. Your Rights and Choices

8.1 Delete Your Account

You can permanently delete your account and all associated personal data at any time:

• Visit https://bamaja.online/delete-account
• Enter your account email and submit the form
• Click the confirmation link sent to your email within 24 hours
• Your account, credits, chat history, photos, and purchase history will be permanently deleted

8.2 Access Your Data

You can request a copy of your personal data by emailing support@nigeriafaces.com. We will respond within 30 days.

8.3 Correct Your Data

If any of your personal data is incorrect, contact support@nigeriafaces.com and we will correct it.

8.4 Stop Using the App

You can stop using Bamaja at any time. To completely remove your data, use the deletion process described in section 8.1.

9. Cookies and Tracking

The Bamaja mobile app does not use traditional web cookies. The bamaja.online website may use minimal technical cookies necessary for the deletion form to function. We do not use advertising trackers, analytics cookies, or third-party tracking pixels on our website.

10. International Data Transfers

Bamaja is based in Nigeria. Some of our service providers (OpenAI, DeepSeek, Google, Resend) are based in the United States or other countries. When data is transferred internationally, it is protected by appropriate safeguards including encryption in transit and contractual data protection agreements with each provider.

11. Changes to This Privacy Policy

We may update this policy from time to time. When we make material changes, we will notify users via email or an in-app notice. The "Last updated" date at the top of this policy reflects the current version. Continued use of Bamaja after a change indicates acceptance of the updated policy.

12. Legal Compliance

This privacy policy is governed by the laws of the Federal Republic of Nigeria, including the Nigeria Data Protection Act 2023 (NDPA). Disputes will be resolved in Nigerian courts. Where applicable, we also comply with international standards including the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) for users in those jurisdictions.

13. Contact Us

If you have any questions, concerns, or complaints about this privacy policy or your data:

Email: support@nigeriafaces.com
Company: Bamaja Integrated Online Services
Address: 22 Afolabi Brown Street, Akoka, Lagos, Nigeria
Website: bamaja.online