This Privacy Policy explains how Britari Properties Ltd ("we", "us", "our") collects, uses, stores, and shares your personal information when you use the MyBritari mobile application. By using MyBritari, you agree to the practices described in this policy.
1 Who We Are
Britari Properties Ltd is a Nigerian real estate company that enables individuals to purchase and pay for land plots across premium estates in Nigeria through an installment-based system.
MyBritari is our official mobile application, available on Android and iOS, through which clients reserve plots, manage contracts, make payments, and access their documents.
First name, last name, email address, phone number, password (hashed)
Registration
Identity (KYC)
Date of birth, gender, state of origin, residential address, NIN / BVN / Passport number, government-issued ID document image, selfie photograph
KYC verification
Payment
Payment amounts, transaction references, bank name, account name, teller numbers (for bank transfer receipts). Card details are processed solely by Paystack and never stored by us.
Making payments
Support
Messages, topics, and documents you submit to our support team
Support requests
Referrals
Referral codes you generate or use, referral earnings
Referral programme
Loan applications
Loan amount requested, purpose, and supporting information
Loan requests
2.2 Information Collected Automatically
Device push token — to send you payment confirmations and notifications
App usage data — screen interactions used to improve the app experience
IP address — for security monitoring and fraud prevention
2.3 Permissions We Request
Permission
Why It's Needed
Camera
KYC selfie capture and document photography
Photo Library
Uploading ID documents and payment receipts from your gallery
Biometric / Face ID
Optional secure login using your device biometrics
Notifications
Payment confirmations, contract updates, and important alerts
Internet
Core app functionality — connecting to our servers
3 How We Use Your Data
Account management — creating and maintaining your account, authenticating your identity
KYC verification — verifying your identity to comply with Nigerian financial regulations before issuing property allocation letters
Contract management — creating, maintaining, and displaying your property contracts, payment schedules, and documents
Payment processing — recording payments, reconciling balances, and issuing receipts
Communication — sending push notifications, email, and in-app notifications about your account, payments, and promotions
Customer support — responding to your enquiries and resolving disputes
Referral programme — tracking referral activity and processing referral bonuses
Loan processing — reviewing and administering loan applications
Legal compliance — complying with applicable Nigerian laws and regulations
Security — detecting and preventing fraud, unauthorised access, and abuse
4 Legal Basis for Processing
We process your personal data on the following legal grounds:
Contract performance — processing necessary to fulfil your property purchase contract
Legal obligation — KYC data collected to comply with Nigerian anti-money laundering and real estate regulations
Legitimate interests — fraud prevention, security, and improving our services
Consent — marketing communications and optional features (you may withdraw consent at any time)
5 Data Sharing & Third Parties
We do not sell your personal data. We share data only as described below:
Third Party
Purpose
Data Shared
PaystackPayment Processor
Secure card payment processing
Email address, payment amount, transaction reference. Card details go directly to Paystack — we never see them.
Expo / Expo PushNotifications
Delivering push notifications to your device
Push token, notification content
RailwayCloud Hosting
Hosting our backend servers and database
All data stored in our database is hosted on Railway's infrastructure in secure data centres
Only when required by applicable Nigerian law or court order
All third-party providers are contractually required to process your data only for the purposes described above and to maintain appropriate security standards.
6 Data Retention
Account & contract data — retained for the duration of your account plus 7 years after your last transaction, as required by Nigerian financial record-keeping regulations
KYC documents — retained for a minimum of 5 years following the completion of your contract, as required by law
Payment records — retained for 7 years for accounting and legal compliance
Support messages — retained for 2 years
Push tokens — deleted when you log out or uninstall the app
Deleted accounts — personal data anonymised within 90 days of account deletion, except where retention is required by law
7 Your Rights
You have the following rights regarding your personal data:
Access — request a copy of the personal data we hold about you
Correction — request correction of inaccurate or incomplete data
Deletion — request deletion of your account and personal data (subject to legal retention obligations)
Portability — request your data in a machine-readable format
Objection — object to processing based on legitimate interests
Withdraw consent — withdraw consent for marketing communications at any time via the app or by emailing us
Account deletion: You may request deletion of your account by contacting our support team. Note that active contracts and outstanding payment obligations remain legally binding regardless of account deletion.
8 Data Security
We implement the following security measures to protect your personal data:
All data transmitted between the app and our servers is encrypted using HTTPS / TLS
Passwords are stored as bcrypt hashes — never in plain text
Authentication uses JWT tokens with expiry and secure storage on your device
Biometric authentication is processed entirely on your device — we never receive your fingerprint or face data
Payment card data is handled exclusively by Paystack (PCI-DSS compliant) — we never store card numbers
Database access is restricted to authorised personnel only
API endpoints are rate-limited to prevent brute-force attacks
Despite these measures, no internet transmission is 100% secure. If you believe your account has been compromised, contact us immediately.
9 Children's Privacy
MyBritari is intended for users aged 18 and above. We do not knowingly collect personal data from anyone under 18. If you believe a minor has registered an account, please contact us and we will delete it promptly.
10 Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will:
Update the "Last updated" date at the top of this page
Send an in-app notification for material changes
For significant changes, ask for your renewed consent where required by law
Continued use of MyBritari after a policy update constitutes acceptance of the revised policy.
11 Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: