What we keep, and why.
This covers the Nana & Bello app, nanabellocf.org and the Desk the family works from. We ask for as little as we can, we never sell it, and there are no ads or trackers anywhere.
The short version
- You can look around and give without an account. The app gives your phone a private guest number, not a name.
- Gifts are quiet by default. If you choose to show your name, it’s your first name and city, never next to the amount.
- Paystack takes your card. We never see or store the card number.
- Delete your account in the app any time: You → Delete my account. Your details go; the gift stays in the books without your name.
- Questions: info@nanabellocf.org.
Who we are
Nana and Bello Charitable Foundation is a family foundation registered with the Corporate Affairs Commission of Nigeria in 2024. We decide what happens to the information described here. We follow the Nigeria Data Protection Act 2023, and the UK GDPR for givers in the United Kingdom.
What we collect
If you only look around
The app signs your phone in as a guest, with a random number and no name. Your interests, the roofs you follow and your settings stay on your phone. The website sets no cookies. It keeps a copy of the public figures in your browser so pages open quickly, and loads its fonts from Google, which sees your IP address.
When you give
- The gift: the amount, what it’s for, the date, how you paid, a receipt number, and whether you gave quietly or with your first name.
- Card and bank details are typed into Paystack’s page, not ours. For a monthly gift or Ramadan nights, Paystack gives us a token to charge on the day you chose, with the card’s brand, last four digits, expiry and bank so you can tell which card it is. We delete these when your last plan stops.
- An email for Paystack: Paystack needs one for every payment. We send yours if you’ve signed in with one. If you’re a guest, we send a stand-in address we make up, which reaches no one.
- In someone’s name: the name, how they’re related to you, and whether and when they passed, so we can remember them on the day each year if you ask us to. These names are never public.
- Clothes for the cloth bank: how you’ll hand them over, the area, and a phone number if you give one, so we can arrange it.
- On the website the transfer form sends us nothing. It writes a WhatsApp message that you choose to send.
If you sign in
Signing in only keeps your receipts together across phones. You sign in with Apple or Google, and we get the name and email they share with us (Apple can hide your real email). We keep these on your giver record.
Notifications
If you turn them on, we keep your phone’s notification token, whether it’s an iPhone or Android, and your language. If you follow the last bundle of a roof on your Lock Screen, we keep that Live Activity’s token until it ends. Apple and Google deliver the notifications, so they see what they say, including a name you asked us to remember.
Crash reports
If the app crashes or hits an error, it sends a report to Sentry: what went wrong, the app version, the phone model and system version. It carries no name, phone number, email or anything you typed.
Partners, applicants and caretakers
If you apply to bring a cause under our roof, or sign a partner agreement, we keep what you send: your organisation, CAC number, contact details, referees, the project and its plan, bank details for payouts, photos, voice notes, receipts and your signature. Caretakers and helpers who hold a key to one place send photos and receipts through the Desk. Photos of our roofs have faces blurred on the phone before they leave it. Photos from schools never go public.
The people we help
Children and widows appear in public as codes, never names or faces. Their names, guardians and addresses are kept private, only a few of the family can open them, and every look is recorded.
The app never asks for your location or contacts. The camera, photos and microphone are only used by the family, partners and caretakers inside the Desk. Face ID only opens the Desk.
What’s public
- Hands on a roof: the first name and city of givers who chose to show them, with the time. Never the amount.
- Receipts: every gift’s receipt number, date, roof, amount and method. Never a name.
- The books on the 1st of every month: what came in, where it went, and what the tenth paid for.
- Partner updates once the family approves them: photos, voice notes and the seller and amount on a proof of purchase, with no phone or account numbers.
Who else handles it
These services store or carry information for us, only to do their part. None of them may use it for anything else.
| Supabase | Our database, logins and files. Stored in London. |
|---|---|
| Vercel | Runs the website and the Desk. London region. |
| Paystack | Takes card, bank and USSD payments, and pays partners their share. |
| Expo, Apple and Google | App updates, notifications, and Sign in with Apple or Google. |
| Sentry | Crash reports. |
| Google Fonts | The website’s typefaces. |
We don’t sell information, show ads, or track you across other apps and websites. We share information with the authorities only when the law requires it.
How long we keep it
- Gifts stay in the books for good, because a charity’s accounts must add up and be checked. If you delete your account, the gift stays without your name, email, phone or city.
- Saved card tokens go when your last monthly or Ramadan plan stops.
- Notification records go 30 days after delivery is checked. Tokens go with your account.
- Applications and partner agreements are kept while we work together and for as long as the law asks us to keep financial records.
Your choices
- See or correct what we hold about you: email us and we’ll send it or fix it.
- Delete your account in the app: You → Delete my account. We remove your names, email, phone and city from your gifts and plans, cancel your plans, delete your saved card, the names you gave in, and your notification tokens, and take your details out of our change log too. Guests, website givers and anyone who can’t open the app can ask by email. How to delete your data.
- Stop notifications in the app under You, or in your phone’s settings.
- Give quietly: it’s on unless you turn it off.
- Complain: tell us first. You can also complain to the Nigeria Data Protection Commission, or in the UK to the Information Commissioner’s Office.
Keeping it safe
Rules in the database decide who can read each record, so a giver sees only their own gifts. The family’s Desk accounts need a password and a second code, and Face ID on the phone. What partners and caretakers send stays private until the family has checked it, and school photos and bank details never go public.
Children
The app is made for adults who give. We don’t knowingly collect information from children through it.
Changes
If we change how we use your information, we’ll update this page and the date at the top. For a big change, we’ll tell you in the app first.