Last updated: 1 August 2026
This policy explains what personal data Thinplex collects, why, who it is shared with, and the rights you have under the Nigeria Data Protection Act 2023 (NDPA). It applies to the Thinplex app and services.
Account data: your name, phone number (your sign-in), email and role(s). Verification data: identifiers you submit for KYC — such as NIN, CAC number or bank account details — checked through licensed verification providers. Platform data: properties, units, tenancy and booking records, payment records, maintenance jobs, reviews, messages, and photos or documents you upload. Payment data: to take payments and send payouts, we and our licensed third-party payment processor handle transaction details and payout account information; card payments are entered on the processor's secure checkout, and Thinplex keeps only limited card details (such as card brand, last four digits and expiry), never your full card number or CVV. Device data: push notification tokens, app version and platform, and basic usage logs.
To run the service: creating tenancies and bookings, processing and recording payments and payouts, routing maintenance jobs, powering messaging and sending service notifications. To keep the marketplace safe: identity verification, fraud prevention and audit trails. To improve Thinplex: understanding how features are used. We do not sell your personal data.
We process data to perform our contract with you (running your account and records), with your consent (for example when you submit KYC identifiers or enable push notifications), for our legitimate interests (safety, fraud prevention, service improvement), and to meet legal obligations (financial record-keeping, lawful requests).
Your counterparties see what the relationship needs: a landlord or agency sees their tenant's name, phone and tenancy records; a tenant sees their landlord or agency's name and property details; a contractor sees the job address and requester contact. Service providers process data for us — identity-verification providers (for KYC checks), cloud hosting and storage, push-notification delivery, and a licensed third-party payment processor that handles payments and payouts. We disclose data where Nigerian law requires it.
We keep your data while your account is active. If you delete your account, it is deactivated and your personal profile is no longer visible, but tenancy, booking and financial records that other users rely on — or that we must keep by law — are retained for as long as those obligations last, then deleted or anonymised.
Under the NDPA you may request access to your data, correction of inaccurate data, deletion (subject to the retention rules above), or object to certain processing. Use Settings for name, email and photo, or contact support for anything else. If you are unsatisfied you may complain to the Nigeria Data Protection Commission (NDPC).
Data is encrypted in transit; access is scoped so users only see records they are party to; verification results are pass/fail outcomes rather than stored documents wherever possible. No system is perfectly secure — protect your phone number and device, since they are your sign-in.
Thinplex is for adults. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.
Our cloud infrastructure may store or process data outside Nigeria. Where it does, we apply safeguards consistent with the NDPA so your data keeps equivalent protection.
We will notify you in the app of material changes to this policy. Questions or requests: hello@thinplex.com, or Help & support in the app. Thinplex — Anambra, Nigeria.