Privacy Policy

Last updated: 12 October 2026

This policy explains what personal data Wisepadi (“we”) collects, why, who we share it with, and the choices you have. It describes how we handle personal data under the Nigeria Data Protection Act 2023 (“NDPA”). The data controller is Joeul LLC, 10685-B Hazelhurst Dr #38951, Houston, TX 77043, United States.

1. What we collect

• Account details: your email address and a password. Passwords are stored only as a salted hash by our authentication provider; we cannot read them.
• Google sign-in: if you choose “Continue with Google”, Google shares your email address and basic profile (such as your name and profile picture) with us. We do not receive your Google password.
• Your watchlist: the products and personal items you save, any notes and target prices you enter, and when you saved them.
• Age confirmation: the age group you tell us (13 to 17, or 18 and over) and, if you are under 18, the date and time your parent or guardian’s agreement was recorded.
• Technical data: IP address, browser type, and timestamps, recorded in security and server logs to keep the service working and to prevent abuse.

We do not currently show advertising, run advertising or analytics trackers, or sell your data. Our cookies are limited to those needed to keep you signed in. If we add advertising or analytics in future we will update this policy and ask for your consent where the law requires it. We do not make automated decisions that have legal or similarly significant effects on you.

Your watchlist notes are free text. Please do not put sensitive information, such as health details, ID numbers or financial account numbers, in them.

2. Why we use it (lawful basis)

• To create and secure your account, provide your watchlist and let you sign in with Google (using your email, name and picture) - contract: it is necessary to provide the service you asked for.
• To protect the service from fraud and abuse and keep it reliable - legitimate interests.
• To meet legal duties, for example keeping records the law requires - legal obligation.
• For anything optional we introduce later (for example marketing messages) - your consent, which you can withdraw at any time.

We rely on legitimate interests only after balancing them against your rights, and you can object to that processing (see Your rights).

3. Who we share it with

We use trusted service providers (“processors”) who handle data only on our instructions:

• Supabase - database and authentication (our project is hosted in London, United Kingdom).
• Our web hosting provider - to serve the website.
• Google - only if you choose Google sign-in.
• Have I Been Pwned (Pwned Passwords) - when you choose a password we check it against a list of passwords exposed in data breaches. Only the first five characters of a one-way hash are sent, never your password or your email, so the service cannot tell who you are or what your password is.
• An email delivery provider - to send confirmation and account emails.

Your watchlist is private to you. We do not show it to other users. We may disclose data if required by law or a valid order from a competent authority.

4. Transfers outside Nigeria

Joeul LLC is based in the United States, so your data is handled outside Nigeria by us as well as by our providers. Our providers store and process data in the United Kingdom, and some of them may process it in other countries. We transfer personal data only to providers that are bound by law or by contract to protect it to a standard substantially equivalent to the NDPA.

5. How long we keep it

We keep your account and watchlist while your account is open. When you delete your account, we delete your account and watchlist from our live database straight away. Copies held in backups and in security or server logs are removed on a rolling basis as those backups and logs expire, and are kept only as long as needed for security, fraud prevention and our legal obligations.

6. Your rights

You have the right to:

• access your data and receive a copy - use Account → Export my data;
• correct inaccurate data;
• delete your data - use Account → Delete my account;
• object to or ask us to restrict certain processing, and withdraw consent you gave;
• data portability, where it applies.

The in-app export covers your account email and your watchlist. For any other data we hold about you, or to use a right we cannot offer in the app, email info@joeul.com and we will respond without undue delay and within the time the law allows. You may also complain to the Nigeria Data Protection Commission (NDPC), www.ndpc.gov.ng.

7. Security

We use encryption in transit, per-user access controls enforced in the database so that one user cannot read another’s data, and restricted staff access. No system is perfectly secure. If a personal data breach occurs, we will notify the NDPC within 72 hours of becoming aware of it, and tell you without undue delay where it is likely to put your rights at high risk.

8. Children

Wisepadi is for people aged 13 and over. We do not offer accounts to anyone under 13, and we delete any account we learn belongs to a child under 13.

Under Nigerian law, anyone under 18 is a child. If you are 13 to 17, you may use Wisepadi only with the agreement of your parent or guardian, which we ask you to confirm when you first sign in and which we record. We collect only the data described above from teen users. We do not show them advertising based on their personal data or use their data for marketing. A parent or guardian can ask us to access or delete a child’s data at any time by emailing info@joeul.com. If you think a child has joined without the required agreement, contact us and we will act promptly.

9. Changes to this policy

We will post updates here with a new “last updated” date and, for important changes, tell you in the app or by email.

10. Contact

Joeul LLC
Email: info@joeul.com
Address: 10685-B Hazelhurst Dr #38951, Houston, TX 77043, United States