Privacy Policy

Zend Technology Company Limited (“Weig”, “we”), No. 1 Akin Adeola Street, Victoria Island, is the data controller for personal data processed through Weig. This policy explains what we collect, why, who we share it with and your rights under the Nigeria Data Protection Act 2023. Contact our data protection team at privacy@weig.app.

1. What we collect

• Account: name, email, password (stored only as a secure hash), age, body weight, health goal and daily targets, city and time zone.
• What you consume: products you scan, stock in your Pantry, servings you log and when, alarms you set, and your messages to the AI coach. This is health-related information and we treat it as sensitive.
• Scans: barcodes and pack codes, and an approximate location at the time of a pack-code scan, used to detect counterfeits and fraud.
• Points and payments: your points history, cash-outs, and saved bank accounts (we keep only the bank name, account name and last four digits; the full number is held by Paystack).
• Identity checks (cash-outs of US$30 or more): your legal name, the last four digits of your BVN, and a photo of your ID. Your full BVN is sent directly to Paystack for matching and is not stored by Weig.
• Receipts you upload when points are held for review, and technical data such as device and browser type, IP address and error logs.

2. Why we use it, and our legal basis

• To run your account, the Pantry, points and cash-outs (performance of our contract with you).
• To process your consumption and health-related data and give you nutrition information and coaching (your explicit consent, given at sign-up; you can withdraw it by deleting your account).
• To verify identity, prevent fraud and counterfeits, and meet anti-money-laundering, tax and other legal duties (legal obligation and legitimate interests).
• To give brands anonymous, aggregated insights and to improve Weig (legitimate interests). Brands never receive your name, contact details or individual logs; every figure they see covers at least 50 people.

3. Who we share it with

• Paystack (payments, bank account checks and BVN matching).
• Supabase (database, login and file storage) and Vercel (hosting).
• OpenAI (the AI coach): your coach messages and a summary of your last 30 days of logs are sent to generate replies. OpenAI does not use API data to train its models by default.
• Open Food Facts receives only the barcode you scan, to look up the product.
• Partner brands receive only aggregated statistics as described above. Authorities receive data only where the law requires.

Some of these providers process data outside Nigeria. Where they do, we rely on contractual and technical safeguards required by the Act.

4. How long we keep it

We keep your data while your account is open. When you delete your account we delete your profile, logs, Pantry, coach history, saved accounts, receipts and ID photo. Records of completed cash-outs are kept, without your name or email, for as long as financial and tax law requires, and security logs are kept for a limited period.

5. Your rights

• Access and download your data: Profile > Download my data.
• Correct your details on your Profile, or ask us to.
• Delete your account and data: Profile > Delete my account.
• Withdraw consent, object to processing, or ask us to restrict it, by writing to privacy@weig.app.
• Complain to the Nigeria Data Protection Commission if you are unhappy with how we handle your data.

6. Security

Data is encrypted in transit, access is limited by role, Weig staff use two-step verification, sensitive files are stored privately, and every staff action is recorded in an audit log. No system is perfectly secure; we will notify you and the regulator of a breach where the law requires.

7. Children

Weig is for adults 18 and over. We do not knowingly collect data from children; contact us if you believe a child has an account.

8. Changes

We will tell you in the app or by email before making material changes to this policy.