Privacy Policy

Remse Ltd ("Remse," "we," "us," or "our") operates the Remse User App, Remse Agent App, and associated web services (collectively, the "Platform"). We are the data controller responsible for the personal information collected through our platform.

Our principal place of business is in Lagos, Nigeria. If you have any questions about how we handle your personal data, please contact us at privacy@remse.app.

We collect the following categories of personal information when you use Remse:

We do not collect precise real-time GPS location without your explicit consent. Location data is limited to what you provide in your user profile (city/country of residence).

We use your personal information for the following purposes:

• Creating and managing your Remse account
• Facilitating connections between Users and Agents
• Processing escrow payments, milestones, and withdrawals securely via Paystack
• Conducting KYC identity verification for agent accounts
• Sending transactional notifications (milestone updates, payment confirmations, messages)
• Resolving disputes between users and agents
• Detecting, investigating, and preventing fraud and abuse
• Improving the platform through usage analytics and crash reporting
• Complying with legal obligations and regulatory requirements
• Responding to your customer support requests

Under applicable data protection law (including NDPR and GDPR), we process your personal data on the following legal bases:

• Contract Performance: Processing necessary to create and manage your account, process payments, and facilitate services between Users and Agents.
• Legal Obligation: Processing required to comply with KYC/AML regulations, tax reporting, and other legal requirements.
• Legitimate Interests: Fraud prevention, platform security, service improvement, and communications about your active transactions.
• Consent: Push notifications and optional data collection where you have provided explicit consent.

We share personal information only in the following limited circumstances:

5.1 With Other Users

When you hire an agent or accept a service request, certain profile information (name, profile photo, rating) is visible to the other party to facilitate the transaction. Direct message content is only visible to the conversation participants.

5.2 With Service Providers

We share data with trusted third-party service providers who assist in platform operations, subject to strict data processing agreements:

• Paystack: Payment processing and financial transactions
• Google Firebase: Database, authentication, cloud storage, and push notifications
• Google Cloud: Cloud functions and server infrastructure

5.3 For Legal Compliance

We may disclose personal data to law enforcement authorities, regulatory bodies, or courts if required by law, or if we have a good-faith belief that such disclosure is necessary to prevent fraud, protect our rights, or ensure user safety.

5.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of Remse's assets, user data may be transferred to the acquiring entity, subject to the same privacy protections described in this policy.

We retain your personal data only for as long as necessary to fulfil the purposes described in this policy:

• Account data: Retained for the duration of your active account plus 2 years after closure.
• KYC documents: Retained for 5 years following agent account closure, as required by anti-money laundering regulations.
• Transaction records: Retained for 7 years for financial compliance and tax purposes.
• Messages and communications: Retained for 2 years to support dispute resolution.
• Usage and device data: Retained for 12 months in aggregated, anonymised form.

Depending on your location, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at privacy@remse.app. We will respond within 30 days. We may need to verify your identity before processing your request.

The Remse website uses the following types of cookies:

• Strictly Necessary Cookies: Required for the website to function. These cannot be disabled.
• Performance Cookies: Anonymised analytics to help us understand how visitors use the site.
• Functional Cookies: Remember your preferences (e.g., language settings).

The Remse mobile apps use device storage (secure local storage and Firebase's local persistence) to maintain your authentication session. We do not use third-party advertising cookies or tracking pixels.

You can manage cookie preferences through your browser settings. Please note that disabling certain cookies may affect website functionality.

We implement industry-standard security measures to protect your personal data:

• All data transmitted between the app and our servers is encrypted using TLS/HTTPS
• KYC documents and sensitive files are stored in encrypted Google Cloud Storage buckets with restricted access
• Payment processing is handled by Paystack, a PCI DSS compliant payment provider
• Database access is secured through Firebase Security Rules with role-based access control
• Admin operations require additional authentication with custom claims-based authorization
• Regular security audits and penetration testing of our Cloud Functions infrastructure

The Remse platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have inadvertently collected data from a person under 18, we will take immediate steps to delete that information from our systems.

If you believe your child has registered for a Remse account without your knowledge, please contact us at privacy@remse.app and we will remove the account promptly.

Remse's primary infrastructure is hosted on Google Cloud Platform, with data centres located in Europe (eur3 region). Some data may be processed in other regions as part of our global service provider relationships.

When we transfer personal data internationally, we ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by relevant data protection authorities
• Data processing agreements with all international processors
• Adequacy decisions where applicable

If you are located in the European Economic Area (EEA) or United Kingdom, your data is transferred in compliance with GDPR requirements.

Remse integrates with the following third-party services. Please review their respective privacy policies for information on how they handle your data:

• Paystack (paystack.com) — Payment processing and financial data
• Google Firebase (firebase.google.com) — Authentication, database, cloud storage, and messaging
• Google Fonts (fonts.google.com) — Font loading (may log IP addresses)

Remse is not responsible for the privacy practices of these third-party services. We encourage you to review their privacy policies before using the platform.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you via:

• An in-app notification at least 14 days before the changes take effect
• An email to the address registered on your account
• A prominent notice on this page with the updated "Effective Date"

Your continued use of the Remse platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms.

For all privacy-related enquiries, data subject access requests, or to exercise any of your rights under this policy, please contact our Data Protection Team: