Privacy Policy

TOHREE (tohree.com.ng) is operated by DexGlobal Digital Nigeria Ltd, which controls how your personal data is processed on the platform. This policy is written with reference to Nigeria's Data Protection Act 2023 (NDPA). Contact us at hello@tohree.com.ng for anything privacy-related.

We collect the information reasonably needed to run TOHREE:

• Account details — your name and email address.
• Authentication & security information — your hashed password, account status, and sign-in activity.
• Reading and library information — books in your library, reading progress, and completed chapters.
• Chapter entitlements — which chapters you've unlocked and how (coins, reward coins, subscription, or another entitlement).
• Wallet and transaction ledger information — your coin balances and the ledger of credits/debits behind them.
• Subscription information — which passes you've held and their status.
• Reward, check-in, share, and referral records — activity related to Reward Coins and TOHREE's referral program.
• Support and feedback — messages you send us.
• Device, browser, and security/log information — the kind of technical information a web application and its infrastructure ordinarily generate (such as request logs) as part of operating and securing the service.
• Payment references and status — the reference, amount, currency, and status TOHREE receives back from our payment provider for a transaction.

TOHREE does not collect or store your full card number, CVV, or other card details — payments are handled by our payment provider, Paystack, and TOHREE only ever receives a payment reference and its status.

We use the information above to:

• provide and operate the TOHREE service;
• authenticate you and keep your account secure;
• preserve your reading progress and chapter entitlements;
• process purchases and maintain your wallet and reward ledgers accurately;
• detect and prevent fraud, abuse, and manipulation;
• provide customer support;
• maintain the security of the service;
• meet legal, tax, and accounting obligations;
• send communications necessary to operate your account (e.g. email verification, purchase confirmations); and
• send optional marketing communications, but only where we have a lawful basis to do so, such as your consent where required.

Depending on the activity, we rely on one or more of the following legal bases:

• Performance of a contract — to provide the account and services you've signed up for.
• Compliance with a legal obligation — such as accounting and tax record-keeping.
• Legitimate interests — such as security, fraud prevention, and improving the service, balanced against your rights.
• Consent — only where we genuinely rely on your consent, such as optional marketing communications, which you can withdraw at any time.

We share payment information with our payment provider, Paystack, to the extent needed to process a transaction. We do not sell your personal data to anyone.

We may also share information with service providers who help us run TOHREE (for example, infrastructure and hosting providers), under obligations that limit their use of your data to providing that service to us, and where required by law, regulators, or to protect TOHREE's or others' legal rights and safety.

Some of the service providers we use to operate TOHREE may process data outside Nigeria. Where that happens, we take reasonable steps to ensure appropriate safeguards are in place, consistent with the requirements of the Nigeria Data Protection Act 2023.

We retain personal data for as long as reasonably necessary to provide the service, maintain accurate wallet/entitlement records, meet accounting and legal obligations, resolve disputes, and prevent fraud — not for a fixed, arbitrary period. When information is no longer needed for these purposes, we take reasonable steps to delete or anonymize it.

We use reasonable technical and organizational measures to protect your information, including password hashing and access controls. No system can be guaranteed 100% secure, but we work to keep your data safe and to respond quickly if something goes wrong.

Under applicable Nigerian data-protection law, you may have the right to:

• access the personal data we hold about you;
• correct inaccurate or incomplete data;
• request deletion of your data, where applicable;
• request restriction of, or object to, certain processing, where applicable;
• request a portable copy of your data, where applicable;
• withdraw consent where processing relies on your consent; and
• lodge a complaint with the Nigeria Data Protection Commission or another competent authority.

To exercise any of these rights, contact hello@tohree.com.ng.

TOHREE accounts are for people aged 18 and older. We do not knowingly collect personal data from children.

We may update this Privacy Policy from time to time. We'll post the updated policy here with a new effective date, and for material changes we may ask you to re-acknowledge it before you can continue using certain features.

Questions about this policy or your data? hello@tohree.com.ng.