Privacy Policy

We collect different types of information to provide and improve Kriwheel, keep the community safe.

• Account information: name, phone number, email (if provided), encrypted password
• Location data: state, LGA, locations you report, GPS coordinates when enabled
• Report content: descriptions, photos, videos, timestamps, selected categories

We only use your information for purposes that are necessary to run Kriwheel, improve safety, and comply with the law.

• Provide services: create and manage your account, process and verify reports
• Verify identity: prevent fake accounts, duplicate accounts, and fraud
• Improve safety: show verified incident information to other users in real time
• Communicate with you: send report updates, earnings alerts, and safety notifications
• Improve the product: analyse anonymous usage data to fix bugs and build features
• Enforce our terms: detect abuse, suspicious behaviour, and violations of our policies
• Legal compliance: respond to lawful requests and protect our rights and users

We do not sell your personal data. We only share information in limited, necessary situations.

• Public reports: verified incident details (location, time, category, description) are visible to all users; your identity is hidden when you choose to report anonymously.
• Moderation: our internal team can see your identity and report details to verify submissions and investigate abuse.
• Service providers: trusted partners that host our infrastructure, send emails, or provide analytics.
• Legal and safety: we may share information when required by law, court order, or to prevent harm, fraud, or illegal activity.

We apply multiple technical and organisational measures to protect your data from unauthorised access, loss, or misuse.

• Encryption in transit using industry-standard SSL/TLS
• Hashed and salted passwords, never stored in plain text
• Restricted access to production systems and databases
• Security monitoring and periodic audits of our systems
• Use of reputable cloud providers with strong security practices

Depending on your location, you may have rights over your personal information.

• Access: request a copy of the personal data we hold about you
• Correction: update or correct inaccurate profile information
• Deletion: request deletion of your account and certain associated data
• Portability: request export of key account and report data in a readable format
• Preferences: control notifications and some privacy settings in the app

To exercise any of these rights, contact us at privacy@kriwheel.com. We may need to verify your identity before responding.

Kriwheel uses cookies and similar technologies to keep the app secure and to understand how people use it.

• Essential cookies: required for login, security, and core functionality.
• Analytics cookies: help us understand usage patterns in an aggregated, anonymous way.
• Preference cookies: remember your settings and in-app choices.

You can control some cookie behaviour in your device or browser settings, but disabling essential cookies may cause parts of the app to stop working correctly.

We rely on carefully selected third parties to provide parts of the Kriwheel experience.

• Maps and location providers (for showing incidents on a map).
• Cloud hosting and storage providers (for secure, reliable infrastructure).
• Analytics and crash reporting tools (to improve stability and performance).

These providers process data only on our instructions and under their own privacy and security commitments.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.

• We will update the “Last Updated” date at the top of the policy.
• For significant changes, we may notify you via in-app message, email, or a notice on our site.

If you continue to use Kriwheel after changes take effect, you agree to the updated policy.

If you have questions, concerns, or requests related to this Privacy Policy or your personal data, you can reach us at:

• Email: hello@kriwheel.com

We aim to respond to privacy-related requests within 7 business days.