Bluukit Privacy Policy
All users • Version 1.0 • Effective 3 November 2026 Data controller: Bluukit Tech Limited (RC 9977186), 32 Ihuntayi Road, off Palace Road, Oniru, Victoria Island, Lagos, Nigeria Privacy and data-rights requests: [email protected]
This policy covers customers, artisans, vendor representatives and people whose information is needed for a booking or supplier application. It describes account, onboarding, job, payment and support processing.
1 Information covered
Account information includes your name, telephone number, email, login or verification records and an optional profile photo. Booking information includes the requested service, problem description, selected address, preferred time, quotes, approvals, uploaded job photos, completion records and ratings.
We process job and store addresses, optional location coordinates, job evidence, conversations, reports and case decisions. Artisan applications include trade and price information, references, assessment responses, photos and introductory media supplied during onboarding. Vendor applications include business and CAC details, store information and registration documents. Bluukit does not currently verify NIN or BVN; if this is introduced, it will be disclosed before use.
Payment records include amounts, provider references, verified statuses, commissions, refunds, payout allocations, transfer fees and reconciliation records. Payout account numbers are submitted securely to the payment provider for account-name resolution and recipient setup. The payout service keeps the resolved name, bank name, last four digits and provider recipient identifier; it does not need card PINs or banking passwords. Do not send those credentials in chat. Transaction records are kept as described in section 7.
2 Where information comes from
We receive information from you, from your device when a feature is enabled, and from assigned professionals, relevant suppliers, payment providers and support interactions. For example, a professional may submit a quote or completion report, and a payment provider may confirm transaction status. Someone booking on another person’s behalf should explain this policy and provide only the details needed for the visit.
3 Why we use information
We use information to create and secure accounts, arrange requested services, communicate about bookings, obtain quote approvals, record payments, resolve complaints and maintain required business records. Optional features, marketing and any analytics must have an appropriate basis and be explained before use. We do not treat acceptance of the Terms, or acknowledgment of this policy, as consent for every type of processing.
4 Legal bases and choices
Contract: account administration, booking, customer messages, approved payments and service delivery use information necessary to provide the service you request. Legal obligation: we keep or disclose records where applicable law requires it. Legitimate interests: proportionate security, fraud prevention and dispute handling may rely on our documented interests after considering your rights. Consent: optional precise-location access, optional marketing and any non-essential tracking that requires consent are handled separately.
You may withdraw consent for future optional processing through settings or the privacy contact. Withdrawal does not invalidate earlier lawful processing. Refusing optional access does not prevent you from entering an address manually. Information needed to fulfil a booking may still be processed under the applicable contractual or legal basis.
5 Location and saved addresses
When you choose Use my current location, Bluukit asks for the device permission needed to obtain your location and suggest an address. The customer app does not continuously track your movements in the background. A saved address stays selected until you change it, even if you travel elsewhere. You can edit or delete saved addresses and manage location permission in phone settings.
Revoking location permission stops future permission-based access; it does not automatically erase addresses or booking records already saved. Existing jobs retain their confirmed address for fulfilment, payment and dispute records. Google Maps and Places receive the search text or coordinates needed to suggest and locate an address.
6 Sharing and service providers
An assigned professional receives the job details, relevant photos, necessary contact or messaging information and the confirmed service address needed for the visit. Matching uses only the location and task details needed; the full address is shared with the professional handling your job. A materials supplier receives relevant order or delivery details, not the customer’s entire job or message history.
Configured service providers include Supabase for authentication, application data and storage; Brevo for verification and transactional email when configured; Paystack for payment and payout checks; Google Maps/Places for address lookup; and Expo for push delivery. Each receives the information needed for its function. Some of these providers process data outside Nigeria, as described in section 7. Authorised support can access relevant job evidence, conversations and cases. Messages are not represented as end-to-end encrypted.
New reports are retained in the app and queued for email to [email protected]. Email contains the case reference, linked job or order and report narrative; it must not include bank authentication details. Push alerts use a general message or job-update notice and opaque identifiers, without copying private message text or job addresses into the push body. Optional marketing remains separate from operational notifications.
7 Storage security and retention
We use proportionate technical and organisational safeguards, including restricted staff access, secure authentication and protected transmission and storage appropriate to the data. No system can promise absolute security. Required breach notifications will be made under applicable law.
Account closure requires email confirmation and settlement checks. Closing blocks existing sessions, suspends marketplace participation and removes profile contact details after authentication deletion is confirmed. Necessary booking, payment, refund, payout, complaint and audit records may be retained for legal, accounting, fraud-prevention and claims purposes. This is not a promise that every record disappears immediately. Payment, refund, payout, invoice and tax records are kept for six years after the transaction, in line with Nigerian accounting requirements. Complaint and dispute records are kept for six years after the case closes. Job photos, videos and messages are kept for two years after the job ends, unless needed for an open claim. Account profile details are removed when a confirmed account closure completes. Backup copies are deleted on our providers’ normal backup cycle. Records needed for an active claim or legal requirement are kept until it is resolved.
Your app data is stored by Supabase in its West EU region in London, United Kingdom. Other providers may process data outside Nigeria, including in the European Union and the United States, to perform their functions: Google for address lookup, Brevo for email and Expo for push notifications. Paystack processes payment data. We use providers that apply contractual and security safeguards to these transfers.
8 Your rights and requests
Subject to the applicable conditions, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent by emailing [email protected]. We verify identity proportionately and explain any lawful retention or refusal. You may complain to the Nigeria Data Protection Commission. We respond to requests within the time limits set by applicable data protection law.
You may complain directly to the Nigeria Data Protection Commission at https://ndpc.gov.ng. You do not have to complete our internal complaints process before exercising that right. Automated matching is intended to consider the requested service, location and professional availability. Bluukit does not make significant decisions about you by automated means alone; approvals, disputes and account actions are reviewed by a person.
9 Communications children and updates
Essential booking and account messages are used to operate the service. Optional promotional messages require the applicable choice and an easy opt-out. Notification preferences do not remove the ability to view job updates or unread messages in the app. The app does not currently use advertising trackers or third-party analytics.
Bluukit customer accounts are intended for adults aged 18 or over. We do not invite children to open accounts. If you believe a child’s information has been supplied improperly, contact us so we can assess and take appropriate action. Avoid including children or unrelated people in job photographs.
Material changes to this policy will be explained through appropriate app or contact notices. New consent will be requested where required; a policy update cannot itself authorise incompatible new processing.
Bluukit Privacy Policy
All users • Version 1.0 • Effective 3 November 2026 Data controller: Bluukit Tech Limited (RC 9977186), 32 Ihuntayi Road, off Palace Road, Oniru, Victoria Island, Lagos, Nigeria Privacy and data-rights requests: [email protected]
This policy covers customers, artisans, vendor representatives and people whose information is needed for a booking or supplier application. It describes account, onboarding, job, payment and support processing.
1 Information covered
Account information includes your name, telephone number, email, login or verification records and an optional profile photo. Booking information includes the requested service, problem description, selected address, preferred time, quotes, approvals, uploaded job photos, completion records and ratings.
We process job and store addresses, optional location coordinates, job evidence, conversations, reports and case decisions. Artisan applications include trade and price information, references, assessment responses, photos and introductory media supplied during onboarding. Vendor applications include business and CAC details, store information and registration documents. Bluukit does not currently verify NIN or BVN; if this is introduced, it will be disclosed before use.
Payment records include amounts, provider references, verified statuses, commissions, refunds, payout allocations, transfer fees and reconciliation records. Payout account numbers are submitted securely to the payment provider for account-name resolution and recipient setup. The payout service keeps the resolved name, bank name, last four digits and provider recipient identifier; it does not need card PINs or banking passwords. Do not send those credentials in chat. Transaction records are kept as described in section 7.
2 Where information comes from
We receive information from you, from your device when a feature is enabled, and from assigned professionals, relevant suppliers, payment providers and support interactions. For example, a professional may submit a quote or completion report, and a payment provider may confirm transaction status. Someone booking on another person’s behalf should explain this policy and provide only the details needed for the visit.
3 Why we use information
We use information to create and secure accounts, arrange requested services, communicate about bookings, obtain quote approvals, record payments, resolve complaints and maintain required business records. Optional features, marketing and any analytics must have an appropriate basis and be explained before use. We do not treat acceptance of the Terms, or acknowledgment of this policy, as consent for every type of processing.
4 Legal bases and choices
Contract: account administration, booking, customer messages, approved payments and service delivery use information necessary to provide the service you request. Legal obligation: we keep or disclose records where applicable law requires it. Legitimate interests: proportionate security, fraud prevention and dispute handling may rely on our documented interests after considering your rights. Consent: optional precise-location access, optional marketing and any non-essential tracking that requires consent are handled separately.
You may withdraw consent for future optional processing through settings or the privacy contact. Withdrawal does not invalidate earlier lawful processing. Refusing optional access does not prevent you from entering an address manually. Information needed to fulfil a booking may still be processed under the applicable contractual or legal basis.
5 Location and saved addresses
When you choose Use my current location, Bluukit asks for the device permission needed to obtain your location and suggest an address. The customer app does not continuously track your movements in the background. A saved address stays selected until you change it, even if you travel elsewhere. You can edit or delete saved addresses and manage location permission in phone settings.
Revoking location permission stops future permission-based access; it does not automatically erase addresses or booking records already saved. Existing jobs retain their confirmed address for fulfilment, payment and dispute records. Google Maps and Places receive the search text or coordinates needed to suggest and locate an address.
6 Sharing and service providers
An assigned professional receives the job details, relevant photos, necessary contact or messaging information and the confirmed service address needed for the visit. Matching uses only the location and task details needed; the full address is shared with the professional handling your job. A materials supplier receives relevant order or delivery details, not the customer’s entire job or message history.
Configured service providers include Supabase for authentication, application data and storage; Brevo for verification and transactional email when configured; Paystack for payment and payout checks; Google Maps/Places for address lookup; and Expo for push delivery. Each receives the information needed for its function. Some of these providers process data outside Nigeria, as described in section 7. Authorised support can access relevant job evidence, conversations and cases. Messages are not represented as end-to-end encrypted.
New reports are retained in the app and queued for email to [email protected]. Email contains the case reference, linked job or order and report narrative; it must not include bank authentication details. Push alerts use a general message or job-update notice and opaque identifiers, without copying private message text or job addresses into the push body. Optional marketing remains separate from operational notifications.
7 Storage security and retention
We use proportionate technical and organisational safeguards, including restricted staff access, secure authentication and protected transmission and storage appropriate to the data. No system can promise absolute security. Required breach notifications will be made under applicable law.
Account closure requires email confirmation and settlement checks. Closing blocks existing sessions, suspends marketplace participation and removes profile contact details after authentication deletion is confirmed. Necessary booking, payment, refund, payout, complaint and audit records may be retained for legal, accounting, fraud-prevention and claims purposes. This is not a promise that every record disappears immediately. Payment, refund, payout, invoice and tax records are kept for six years after the transaction, in line with Nigerian accounting requirements. Complaint and dispute records are kept for six years after the case closes. Job photos, videos and messages are kept for two years after the job ends, unless needed for an open claim. Account profile details are removed when a confirmed account closure completes. Backup copies are deleted on our providers’ normal backup cycle. Records needed for an active claim or legal requirement are kept until it is resolved.
Your app data is stored by Supabase in its West EU region in London, United Kingdom. Other providers may process data outside Nigeria, including in the European Union and the United States, to perform their functions: Google for address lookup, Brevo for email and Expo for push notifications. Paystack processes payment data. We use providers that apply contractual and security safeguards to these transfers.
8 Your rights and requests
Subject to the applicable conditions, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent by emailing [email protected]. We verify identity proportionately and explain any lawful retention or refusal. You may complain to the Nigeria Data Protection Commission. We respond to requests within the time limits set by applicable data protection law.
You may complain directly to the Nigeria Data Protection Commission at https://ndpc.gov.ng. You do not have to complete our internal complaints process before exercising that right. Automated matching is intended to consider the requested service, location and professional availability. Bluukit does not make significant decisions about you by automated means alone; approvals, disputes and account actions are reviewed by a person.
9 Communications children and updates
Essential booking and account messages are used to operate the service. Optional promotional messages require the applicable choice and an easy opt-out. Notification preferences do not remove the ability to view job updates or unread messages in the app. The app does not currently use advertising trackers or third-party analytics.
Bluukit customer accounts are intended for adults aged 18 or over. We do not invite children to open accounts. If you believe a child’s information has been supplied improperly, contact us so we can assess and take appropriate action. Avoid including children or unrelated people in job photographs.
Material changes to this policy will be explained through appropriate app or contact notices. New consent will be requested where required; a policy update cannot itself authorise incompatible new processing.
Bluukit Privacy Policy
All users • Version 1.0 • Effective 3 November 2026 Data controller: Bluukit Tech Limited (RC 9977186), 32 Ihuntayi Road, off Palace Road, Oniru, Victoria Island, Lagos, Nigeria Privacy and data-rights requests: [email protected]
This policy covers customers, artisans, vendor representatives and people whose information is needed for a booking or supplier application. It describes account, onboarding, job, payment and support processing.
1 Information covered
Account information includes your name, telephone number, email, login or verification records and an optional profile photo. Booking information includes the requested service, problem description, selected address, preferred time, quotes, approvals, uploaded job photos, completion records and ratings.
We process job and store addresses, optional location coordinates, job evidence, conversations, reports and case decisions. Artisan applications include trade and price information, references, assessment responses, photos and introductory media supplied during onboarding. Vendor applications include business and CAC details, store information and registration documents. Bluukit does not currently verify NIN or BVN; if this is introduced, it will be disclosed before use.
Payment records include amounts, provider references, verified statuses, commissions, refunds, payout allocations, transfer fees and reconciliation records. Payout account numbers are submitted securely to the payment provider for account-name resolution and recipient setup. The payout service keeps the resolved name, bank name, last four digits and provider recipient identifier; it does not need card PINs or banking passwords. Do not send those credentials in chat. Transaction records are kept as described in section 7.
2 Where information comes from
We receive information from you, from your device when a feature is enabled, and from assigned professionals, relevant suppliers, payment providers and support interactions. For example, a professional may submit a quote or completion report, and a payment provider may confirm transaction status. Someone booking on another person’s behalf should explain this policy and provide only the details needed for the visit.
3 Why we use information
We use information to create and secure accounts, arrange requested services, communicate about bookings, obtain quote approvals, record payments, resolve complaints and maintain required business records. Optional features, marketing and any analytics must have an appropriate basis and be explained before use. We do not treat acceptance of the Terms, or acknowledgment of this policy, as consent for every type of processing.
4 Legal bases and choices
Contract: account administration, booking, customer messages, approved payments and service delivery use information necessary to provide the service you request. Legal obligation: we keep or disclose records where applicable law requires it. Legitimate interests: proportionate security, fraud prevention and dispute handling may rely on our documented interests after considering your rights. Consent: optional precise-location access, optional marketing and any non-essential tracking that requires consent are handled separately.
You may withdraw consent for future optional processing through settings or the privacy contact. Withdrawal does not invalidate earlier lawful processing. Refusing optional access does not prevent you from entering an address manually. Information needed to fulfil a booking may still be processed under the applicable contractual or legal basis.
5 Location and saved addresses
When you choose Use my current location, Bluukit asks for the device permission needed to obtain your location and suggest an address. The customer app does not continuously track your movements in the background. A saved address stays selected until you change it, even if you travel elsewhere. You can edit or delete saved addresses and manage location permission in phone settings.
Revoking location permission stops future permission-based access; it does not automatically erase addresses or booking records already saved. Existing jobs retain their confirmed address for fulfilment, payment and dispute records. Google Maps and Places receive the search text or coordinates needed to suggest and locate an address.
6 Sharing and service providers
An assigned professional receives the job details, relevant photos, necessary contact or messaging information and the confirmed service address needed for the visit. Matching uses only the location and task details needed; the full address is shared with the professional handling your job. A materials supplier receives relevant order or delivery details, not the customer’s entire job or message history.
Configured service providers include Supabase for authentication, application data and storage; Brevo for verification and transactional email when configured; Paystack for payment and payout checks; Google Maps/Places for address lookup; and Expo for push delivery. Each receives the information needed for its function. Some of these providers process data outside Nigeria, as described in section 7. Authorised support can access relevant job evidence, conversations and cases. Messages are not represented as end-to-end encrypted.
New reports are retained in the app and queued for email to [email protected]. Email contains the case reference, linked job or order and report narrative; it must not include bank authentication details. Push alerts use a general message or job-update notice and opaque identifiers, without copying private message text or job addresses into the push body. Optional marketing remains separate from operational notifications.
7 Storage security and retention
We use proportionate technical and organisational safeguards, including restricted staff access, secure authentication and protected transmission and storage appropriate to the data. No system can promise absolute security. Required breach notifications will be made under applicable law.
Account closure requires email confirmation and settlement checks. Closing blocks existing sessions, suspends marketplace participation and removes profile contact details after authentication deletion is confirmed. Necessary booking, payment, refund, payout, complaint and audit records may be retained for legal, accounting, fraud-prevention and claims purposes. This is not a promise that every record disappears immediately. Payment, refund, payout, invoice and tax records are kept for six years after the transaction, in line with Nigerian accounting requirements. Complaint and dispute records are kept for six years after the case closes. Job photos, videos and messages are kept for two years after the job ends, unless needed for an open claim. Account profile details are removed when a confirmed account closure completes. Backup copies are deleted on our providers’ normal backup cycle. Records needed for an active claim or legal requirement are kept until it is resolved.
Your app data is stored by Supabase in its West EU region in London, United Kingdom. Other providers may process data outside Nigeria, including in the European Union and the United States, to perform their functions: Google for address lookup, Brevo for email and Expo for push notifications. Paystack processes payment data. We use providers that apply contractual and security safeguards to these transfers.
8 Your rights and requests
Subject to the applicable conditions, you may request access, correction, deletion, restriction, objection, portability or withdrawal of consent by emailing [email protected]. We verify identity proportionately and explain any lawful retention or refusal. You may complain to the Nigeria Data Protection Commission. We respond to requests within the time limits set by applicable data protection law.
You may complain directly to the Nigeria Data Protection Commission at https://ndpc.gov.ng. You do not have to complete our internal complaints process before exercising that right. Automated matching is intended to consider the requested service, location and professional availability. Bluukit does not make significant decisions about you by automated means alone; approvals, disputes and account actions are reviewed by a person.
9 Communications children and updates
Essential booking and account messages are used to operate the service. Optional promotional messages require the applicable choice and an easy opt-out. Notification preferences do not remove the ability to view job updates or unread messages in the app. The app does not currently use advertising trackers or third-party analytics.
Bluukit customer accounts are intended for adults aged 18 or over. We do not invite children to open accounts. If you believe a child’s information has been supplied improperly, contact us so we can assess and take appropriate action. Avoid including children or unrelated people in job photographs.
Material changes to this policy will be explained through appropriate app or contact notices. New consent will be requested where required; a policy update cannot itself authorise incompatible new processing.