1. Introduction
At Shoppoint Technologies Limited (“Shoppoint”, “we”, “us”, or “our”), your privacy is paramount. We are committed to safeguarding the personal data of our users in line with the Nigeria Data Protection Regulation (NDPR), General Data Protection Regulation (GDPR), and other applicable data privacy laws.
This Privacy Policy explains how we collect, use, process, and protect your personal data when you use the Shoppoint Apps and related services (“Services”).
2. What Data We Collect
To deliver the full value of Shoppoint Rewards, we collect certain categories of data that help us track purchases, process rewards, personalize your experience, and improve the overall platform. All data we collect is either provided directly by you, captured through your engagement with the app, or generated through your interactions with our features and services. We do not collect unnecessary or excessive data.
We collect basic personal information such as your name, phone number, email address, and personalisation insights when you sign up or update your account. This allows us to identify your profile, communicate with you, and deliver reward and personalised notifications or important updates. If you choose to provide it, we may also collect optional details like your date of birth to offer personalized experiences and age-based offers.
When you upload or snap receipts, we collect purchase-related data from those receipts. This includes the store name, location, date and time of purchase, product details, total amount spent, and other relevant line items. This transaction data forms the basis for verifying eligible purchases, allocating cashback, analyzing price trends, and generating rewards. We also capture your device location (when enabled) to enhance features like neighborhood price tracking and store-based missions, and to prevent misuse of the rewards system.
In addition, we collect technical and usage data to help us run the app smoothly. This may include your device type, operating system, IP address, unique identifiers, and app version. We also collect data on how you interact with the app such as the features you use, the content you view, and the actions you take to help us understand user behavior, detect bugs, and improve performance.
All of this data is collected responsibly, with your consent and in line with privacy laws. We only collect what is necessary to provide our services, improve your experience, and reward your everyday spending in meaningful ways.
3. Lawful Basis for Processing
Shoppoint collects and processes your data based on clearly defined and lawful grounds, as required by the Nigeria Data Protection Regulation (NDPR), the General Data Protection Regulation (GDPR), and other applicable data protection laws. Our primary lawful basis is consent you actively choose to share your information with us when you sign up, snap receipts, and engage with our services. This consent enables us to track your purchases, allocate rewards, personalize your experience, and deliver features that depend on your transaction history and app behavior.
In addition to consent, we process data based on the performance of a contract, meaning we need certain data in order to fulfill our promise to you which includes issuing cashback, verifying receipts, showing eligible deals, and maintaining your reward history. If you withdraw consent or restrict this processing, many of our core features will no longer function as intended.
We also rely on legitimate interest as a legal basis, especially when it comes to improving app performance, preventing fraud, analyzing purchase trends, and offering platform-wide insights that benefit the entire community. In these cases, we ensure that our interests are balanced with your privacy rights and that no unnecessary data is collected or retained.
Lastly, we may process your data to meet legal obligations, such as compliance with financial regulations, fraud reporting, or responding to lawful data requests from authorized regulators or law enforcement agencies.
At all times, we make sure our use of your data is lawful, fair, and transparent and aligned with both your expectations and your rights as a user.
4. How We Use Your Data
At Shoppoint, we use your data to deliver the services you signed up for, enhance your experience, and ensure you get maximum value from your everyday spending all while respecting your privacy and staying fully compliant with applicable data laws.
We use your submitted receipts, transaction details, and shopping activity to track your eligible purchases and assign the appropriate cashback rewards. This also helps us confirm the validity of your purchases, protect against fraud, and match your activity with brand offers, promos, and campaigns that you actually qualify for. Without this information, our rewards engine simply wouldn't work.
We also use your data to personalize your experience on the app. This includes tailoring the offers, deals, and missions you see based on your past activity, preferred categories, frequently visited shops, and general shopping habits. This personalization helps us make the platform feel more relevant to you and more rewarding without relying on third-party data or external tracking. Everything we use comes from within the Shoppoint ecosystem and is based on your direct engagement with the app.
In addition, we process anonymized and aggregated versions of your receipt data to provide powerful tools like our Check Price feature, which shows current and historical neighborhood-level pricing for thousands of everyday products. This helps us bring price transparency to your community and empower smarter spending decisions — without ever exposing your identity. Market trends and product insights derived from your data are never tied back to you, and they help us build useful features that serve the broader user base.
We also use certain technical and behavioral data like app version, device type, crash logs, and session activity to analyze performance, fix bugs, improve stability, and ensure security. This allows us to continually improve how Shoppoint functions and give you the smoothest experience possible. Where required by law, we may also process data to meet regulatory, compliance, and fraud prevention obligations.
Finally, we use your in-app activity to show you contextual ads or sponsored offers. These are based on real behavior within the platform not external surveillance or invasive tracking. Our advertising model is built to work for you: your attention and data unlock real cashback benefits and exclusive rewards. And to be clear we do not sell your personal data, ever.
Every way we use your data is transparent, intentional, and designed to create value. You’re always in control of your privacy settings, and if you choose to delete your account, all personally identifiable data will be removed in accordance with our policy and applicable laws. What remains may be anonymized and used to support the core platform features, like product pricing insights and community-level trends.
Simply put: your data powers your rewards and we treat that responsibility with care, clarity, and compliance.
5. Data Sharing and Disclosure
Shoppoint does not sell your personal data under any circumstance. However, in the course of delivering our services, maintaining platform operations, and improving user experience, we may share certain data responsibly and lawfully — but always in a way that respects your privacy and complies with NDPR, GDPR, and other applicable laws.We may share your data with our subsidiaries, affiliates, and group companies or future international entities for the purpose of delivering integrated services, improving platform features, managing compliance, and supporting reward delivery across jurisdictions. These entities are governed by the same strict data protection standards and policies outlined in this Privacy Policy, ensuring consistent safeguards across all operations.
Additionally, we may share certain data with verified third-party service providers who help us operate Shoppoint. This includes partners involved in cloud hosting, analytics, advertising delivery, fraud detection, customer support, and payment processing. These providers act strictly on our instructions and are contractually bound to use your data only for purposes we authorize. They are not permitted to use, store, or share your data for their own benefit.In some cases such as cashback partnerships, reward missions, or sponsored promotions we may share aggregated or anonymized data with select retail or brand partners. This data is stripped of personal identifiers and is used solely to power insights, trend analysis, and campaign performance. Your identity is never shared with these partners unless you’ve explicitly opted in.
We may also disclose your data when required to comply with legal obligations or regulatory authorities, such as responding to lawful requests, enforcing our terms, protecting against fraud or abuse, or ensuring platform security.
Lastly, we reserve the right to share anonymized, non-personal insights derived from user behavior such as pricing trends, spending patterns, or product popularity as part of industry reports, public briefings, or service enhancements. These insights are never tied to individual users and cannot be used to identify you.In all situations, Shoppoint ensures that your data is only shared when necessary, handled with the highest level of security, and always within the boundaries of trust and transparency.
6. Your Rights
At Shoppoint, your data rights aren’t just legal checkboxes, they’re principles we actively uphold. In compliance with the Nigeria Data Protection Regulation (NDPR), General Data Protection Regulation (GDPR), and other global privacy laws, we ensure you remain in control of your personal data while enjoying the full benefits of our platform. You have the right to access the personal data we hold about you and to request corrections where necessary. You can also request the deletion of your account and personal data at any time and we will fulfill that unless we are legally obligated to retain certain records.If you choose to withdraw your consent for us to process certain types of data such as transaction details, receipt scans, or behavioral usage — please note that this may significantly limit or completely disable core features of the app, including cashback rewards, personalized offers, expense tracking, and price comparison.
Since our service is built around intelligent use of your spending data, withdrawing consent means we can no longer deliver the value Shoppoint is designed to offer. While you always have the right to restrict or object to certain processing activities, doing so may impact your experience. If you wish to exercise any of your rights or have questions, you can contact us directly at privacy@getshoppoint.com and our team will guide you through your options. We do not currently offer full data portability in a downloadable format, but we are committed to continuous improvement and transparency. Most importantly, we’re not here to exploit your data we’re here to reward it.
7. How Long We Keep Your Data and Why
Shoppoint retains data only for as long as it’s required to deliver our core services, improve the platform, and fulfill legal or regulatory obligations. Our goal is to ensure that every piece of data we keep actively supports the rewards, insights, and features you rely on nothing more. Personal data tied to your account (such as your contact information, profile, and receipts) is retained for as long as you maintain an active account, and is used to power essential services like cashback rewards, receipt validation, price comparisons, and spending insights. If you delete your account, we will erase all personally identifiable information (PII) associated with you within a reasonable timeframe, except where retention is required by law. However, certain data like product pricing, purchase patterns, and anonymized transaction records may be retained indefinitely in an aggregated, non-personal form. This type of data is not linked to you and is used strictly to support community-facing services like Check Price, historical market trends, and merchant analytics. These features rely on long-term, de-identified data to remain valuable and accurate. In short: we retain data only as long as it's needed to deliver the value of Shoppoint. Personal data disappears when you do. Market-level data stays but only in a way that protects your privacy while helping millions of others shop smarter.
8. Data Security
At Shoppoint, your data is not just important it’s protected like gold. We apply bank-grade security standards to ensure that every piece of information you share with us is safe, encrypted, and used responsibly. We use industry-leading encryption technologies during data transmission and storage. Access to personal data is tightly restricted to authorized personnel only, and our systems are routinely monitored, audited, and updated to guard against threats or breaches. We also apply strict data minimization practices, so we only store what’s necessary nothing extra, nothing risky. In the unlikely event of a security incident that affects your personal data, we will notify you promptly in line with NDPR, GDPR, and any other applicable data breach regulations. We have a tested and active incident response protocol in place.
Bottom line: Your data is safe with us. Period. No leaks, no loose ends, no compromise. We’ve engineered Shoppoint to not only reward your spending but to guard your privacy with everything we’ve got.
9. Cross-Border Data Transfers
As a growing platform with international ambitions and infrastructure, some of the data we collect may be transferred to, stored in, or processed in countries outside of your country of residence. This may include jurisdictions where our subsidiaries, affiliates, or trusted service providers operate such as cloud infrastructure providers, analytics platforms, or support teams including regions outside of Nigeria or the European Economic Area (EEA).
Whenever we transfer personal data across borders, we do so in full compliance with applicable data protection laws, including the NDPR and GDPR. We implement appropriate legal safeguards to ensure your information remains protected, no matter where it goes. These safeguards may include Standard Contractual Clauses (SCCs) approved by regulatory authorities, data processing agreements, and other legally recognized mechanisms that uphold equivalent levels of privacy and security.
We only work with international partners and platforms that are aligned with our data protection standards and who contractually commit to handling your data securely, responsibly, and lawfully. Whether your data is processed in Nigeria, the UK, the EU, or elsewhere, we apply the same strict standards of care and control ensuring your privacy rights travel with your data. Shoppoint will never transfer your data to any country or organization that does not offer adequate protection, and we will always notify you in the event of any material change in how or where your data is processed globally.
10. Children’s Privacy
Shoppoint is designed for use by adults and is not intended for children under the age of 13, or the minimum age of digital consent as defined by applicable local laws. We do not knowingly collect, solicit, or process personal data from individuals under this age. If we discover that we have inadvertently collected personal information from a child, we will take immediate steps to delete that data and disable the associated account.
If you are a parent or legal guardian and believe that your child may have provided us with their information without your consent, please contact us at privacy@getshoppoint.com and we will respond swiftly to resolve the matter. Shoppoint takes the privacy and protection of minors seriously. We apply strict controls to ensure our platform remains a safe and age-appropriate space for users, in full compliance with NDPR, GDPR, and other child protection regulations.
11. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, services, legal obligations, or technology. When we do, we will revise the "Effective Date" at the top of this policy and make reasonable efforts to notify you of any significant changes that could affect how your data is handled either through the app, email, or other direct communication channels.
We encourage you to review this Privacy Policy periodically to stay informed about how we protect and use your personal data. Continued use of Shoppoint after an update means you accept the terms of the revised policy. However, if any change materially reduces your rights or expands how we use your data, we will obtain your consent where required by law before proceeding. At Shoppoint, we believe in keeping you in the loop clearly, promptly, and always in good faith.
12. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy or how your personal data is handled, we’re here to help. You can reach out to us directly and confidently — whether it’s to exercise your rights, clarify our data practices, or raise a privacy concern.Please contact our Data Protection Team at privacy@getshoppoint.com, and we’ll respond as quickly as possible.
We take your privacy seriously, and we’re committed to addressing any concerns transparently and promptly.