Security & Privacy

1. Our approach

We design and run Jara with security by default. This notice explains, in plain language, how we protect your personal information and what you can do to stay safe. It should be read together with our Privacy Policy, which explains how your data is collected and used under the Nigeria Data Protection Act (NDPA) 2023.

2. How we protect your information

• Encryption: data is encrypted in transit (TLS) between your device and our systems, and sensitive data is encrypted where it is stored.
• Access control: access to personal data is restricted to authorised personnel on a strict need-to-know basis, and access is regularly reviewed.
• Monitoring: we monitor our systems for unusual or suspicious activity and investigate potential incidents promptly.
• Secure development: our platform is built and maintained with industry-standard secure development practices and regular security reviews.

3. What we never do

• We never sell your personal data.
• We never share your data without a lawful basis, as described in our Privacy Policy.
• We never ask you for your password or one-time verification codes by phone, email or chat.

4. Your part in staying safe

• Use a strong, unique password for your Jara account and never share it.
• Never share one-time verification codes (OTPs) with anyone — including anyone claiming to be from Jara.
• Watch out for phishing: check that messages really come from us before clicking links or entering your details.
• Keep your contact information current so we can reach you about your account.

5. Reporting a concern

If you suspect an unauthorised access to your account, a security incident, or a data protection concern, contact us immediately through the contact channels published on our website. We will investigate and, where required, notify the Nigeria Data Protection Commission (NDPC) and affected individuals as the NDPA 2023 requires.

6. Your rights

You may request access to, correction or erasure of your personal data at any time, and you may lodge a complaint with the NDPC if you believe your data protection rights have been infringed. See our Privacy Policy for details.

7. Keeping this notice current

We review our security practices regularly and will update this notice when our practices change. The date at the top of this page shows when it was last revised.