Privacy Policy

1. Scope and data controller

NadBooks is the data controller for personal data processed through nadbooks.com, the NadBooks Android application and related support, publishing, community, payment and administrative services. This Policy applies to visitors, readers, writers, purchasers, subscribers and community members.

Our processing is guided by the Nigeria Data Protection Act 2023 and other applicable privacy requirements. Privacy questions and data-rights requests may be sent to support@nadbooks.com.

2. Personal data we collect

The information we process depends on how you use NadBooks.

• Account and identity data: Google account identifier, email address, name, profile image, generated or chosen username, account role, authentication events and account status.
• Profile data: biography, avatar, social-media links, optional WhatsApp number and communication preferences, Premium status and public profile information.
• Reading and library data: purchases, unlocked books, reading progress, chapter activity, bookmarks, wishlist, library, ratings, reviews, likes, follows and offline-download entitlements.
• Publishing data: manuscripts, covers, titles, descriptions, categories, prices, free-chapter settings, rights attestations, review status, editorial notes, book analytics, sales and writer earnings.
• Community and communication data: posts, comments, replies, attached images, reports, blocks, direct messages, notification preferences and support communications.
• Payment and payout data: Paystack transaction references, amounts, payment and subscription status, customer or authorisation references, wallet entries, withdrawals, masked bank-account details and encrypted payout-account details. NadBooks does not store complete card numbers.
• Rewards data: referral codes, referral relationships, NadPoints, redemptions and related anti-fraud information.
• Technical and usage data: IP address, browser or device type, operating system, app version, session and security logs, page and app events, book views, downloads, crash or error information, push-notification token and approximate traffic/session identifiers.

3. Where data comes from

We receive data directly from you when you edit a profile, upload a book, post, comment, message, purchase, request a withdrawal or contact support. We receive authentication information from Google and payment status from Paystack. We also collect limited technical and usage information automatically when you use the website or app.

Public interactions from other users may create data about you, such as mentions, follows, messages, comments, reports or purchases of your books.

4. Why we process personal data

We process personal data only where we have a recognised lawful basis, including performance of our contract with you, consent, legitimate interests and legal obligations.

• Create and secure accounts, authenticate sessions, prevent fraud and enforce account restrictions.
• Deliver reading, purchases, libraries, offline access, bookmarks, wishlists, profiles, community, messages and notifications.
• Receive, parse, review, publish, promote and protect books and calculate views, sales, earnings and rankings.
• Process book and Premium payments, referrals, wallet entries, withdrawals, refunds, chargebacks and financial records.
• Personalise discovery, remember preferences, measure reliability and understand website and app usage.
• Moderate content, investigate reports, protect rights and safety, respond to support requests and comply with legal obligations.
• Send service messages about publishing decisions, payments, security, account activity and product updates. Optional communications are controlled by the preferences available in NadBooks.

5. Public and private information

Usernames, names, avatars, biographies, permitted social links, Premium badges, published books, public posts, comments, likes, ratings and reviews may be visible to other users and may appear in search engines or social previews. Do not publish information you want to keep private.

Draft manuscripts, unpublished books, payout details, private messages, account-security information and non-public administrative records are not intended to be public. Authorised staff or moderators may access limited information when required for review, support, safety, fraud prevention or legal compliance.

6. Service providers and disclosures

We do not sell personal data. We disclose only what is reasonably necessary to operate NadBooks, complete a transaction, protect the service or comply with law.

• Google provides account authentication.
• Paystack processes payments and supplies transaction or subscription confirmation. Paystack handles card data under its own privacy terms.
• Supabase provides database, authentication and file-storage infrastructure.
• Vercel provides website hosting, server execution, delivery, security and operational logs.
• Expo and underlying mobile notification providers may process device push tokens and delivery information when notifications are enabled.
• Professional advisers, financial institutions, fraud-prevention providers, regulators, courts, law enforcement or rights holders may receive information where necessary and legally permitted.
• If NadBooks is reorganised, financed, sold or transferred, relevant data may be disclosed subject to confidentiality and applicable law.

7. International processing

Our providers may process or store information in Nigeria and other countries. Where personal data is transferred across borders, we use provider commitments, contractual safeguards and other measures required by applicable law. The privacy and law-enforcement rules of another country may differ from those in Nigeria.

8. Cookies, local storage and analytics

NadBooks uses essential cookies or similar storage to maintain Google-authenticated sessions, protect requests and remember service state. The website and app may store reading, display and offline preferences on your device.

We record page views, app opens, navigation, book opens, shares, follows, downloads and similar events to provide author analytics, operate public leaderboards, diagnose problems, prevent abuse and improve NadBooks. Some visitor analytics may be recorded without an account using limited session or traffic identifiers.

You can restrict non-essential device permissions through your browser or operating-system settings, although disabling essential storage may prevent sign-in or other features from working.

9. Payments and financial information

Book and Premium payments are initiated through Paystack. NadBooks receives transaction references, amounts, status and limited customer or authorisation information needed to verify and manage the transaction; we do not receive complete payment-card details.

Payout-account information supplied by writers is encrypted on the server, with a masked version displayed in account controls. Financial, withdrawal, refund and audit records may be retained longer than ordinary account data where required for accounting, dispute resolution, fraud prevention or legal compliance.

10. Retention and account deletion

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy. Retention depends on the type of record, whether the account or book remains active, purchase and ownership obligations, security needs, disputes and applicable law.

When you request account deletion, NadBooks restricts the account, disables registered push delivery and schedules permanent account deletion after 90 days. This period allows support to address accidental requests, disputes and legal obligations. Some transaction, audit, fraud-prevention or legal records may be retained or anonymised after account deletion where necessary and permitted by law.

Public content may disappear when the associated account is deleted, subject to database relationships, purchased-book protection, legal preservation and backups. Cached copies and backups may take additional time to expire securely.

11. Security

We use measures including access controls, row-level database rules, server-side secret management, encrypted payout details, authenticated storage rules, role-limited administration, payment-signature verification, rate limits and operational monitoring. No internet service can guarantee absolute security.

You should protect your Google account, use trusted devices, install official app releases and promptly report suspected unauthorised access to support@nadbooks.com.

12. Your privacy rights

Subject to the Nigeria Data Protection Act 2023 and other applicable law, you may request information about our processing and exercise rights of access, correction, deletion, restriction, objection, data portability, withdrawal of consent and human review of a solely automated decision where applicable. Withdrawing consent does not affect processing already lawfully completed and may prevent an optional feature from working.

To make a request, email support@nadbooks.com from the address associated with your account and describe the request. We may verify your identity and may refuse or limit a request where the law permits. You may also complain to the Nigeria Data Protection Commission.

13. Children and mature content

NadBooks is not directed to children below 13. Users who cannot independently consent or contract under applicable law must use NadBooks only with parent or guardian involvement. We do not knowingly seek personal data from children below 13. Contact us if you believe such an account exists.

Mature-content and age-rating controls help users make choices but are not a substitute for parental supervision or legal age requirements.

14. Changes and contact

We may update this Policy when NadBooks, our providers or applicable law changes. Material changes will be communicated through the service or another reasonable channel and will identify a new effective date.

For privacy questions, data-rights requests or suspected data-security incidents, contact support@nadbooks.com. General enquiries may be sent to hello@nadbooks.com.