DRAFT for lawyer review. Replace [COMPANY NAME] and [CONTACT EMAIL] and everything else in [square brackets], check every statement is true for your live setup (especially lines marked [confirm]), have a Nigerian data-protection lawyer review it, then delete this box.
Privacy Policy
Last updated: 16 October 2026 · Effective from: [launch date]
This policy explains what information 9jaLive collects, why, who can see it and how long we keep it. We have written it in plain English. We only collect what we need to run a safe chat service for adults.
1. Who we are
9jaLive (9ja.live) is run by [COMPANY NAME], [RC number], [registered address], Nigeria ("we", "us"). We are the "data controller" for the information described here under the Nigeria Data Protection Act 2023 (the "NDPA").
Privacy questions and requests: [CONTACT EMAIL]. Data Protection Officer: [name and email, if appointed].
2. What we collect, why, and for how long
| Information | Why we need it | How long we keep it |
|---|---|---|
| Device code | A random code kept in your browser (and in a cookie called nc_did). It is sent to our server when you connect. We immediately turn it into a scrambled key (a one-way keyed hash) and use that to enforce bans, to stop one person flooding the site, and so reports from brand-new browsers do not count towards an automatic ban. We do not use it for advertising. |
The code stays in your browser until you clear your data. A scrambled ban key is stored only if you are banned (see "Bans"). |
| IP address | Used while you are connected to limit how many connections one address can make and to block abuse. In normal use our app keeps your IP address in memory only. If you are reported, we store a scrambled key made from your IP address (not the address itself) with the report, so a moderator can block that network for a short time if needed. | Memory only while you are connected. Scrambled key: with the report (see "Reports"). Our hosting and network providers keep their own technical logs [confirm with each provider]. |
| The state you choose, and optional topics | To match you with a random stranger. Topics (up to 5 short words) help pair you with someone who shares one. Your chat partner sees your state and only the topics you both picked. There are no names or nicknames on 9jaLive. | Only while you are online. Not saved on our servers. Your browser remembers your last choices on your own device. |
| Chat messages | Passed between you and your chat partner in real time through our server. Software checks them: phone numbers, emails, links and handles are removed, and some messages are blocked. If you write that you are under 18, that message is blocked and an automatic report is filed. | Not stored, except up to the last 20 messages when a chat is reported, or when you write that you are under 18. |
| Video and microphone | In a video chat your camera and microphone go directly to your chat partner, or through a relay server (we use Cloudflare and our own relay) if your network needs one. Video and audio are encrypted in transit. We do not record or store them. Only if the other person presses Report, their browser sends us one still picture taken from your video at that moment, for review. | Live video and audio: not stored. Report snapshot: up to [90] days, then deleted automatically. |
| Reports | When someone reports a chat we save: the date, the reason, the scrambled device and IP keys of the reported person, both states, whether the reporter's device was established, up to the last 20 messages, and for video one still picture. A person reviews it and may ban the device. | Up to [90] days, then deleted automatically. |
| Bans | If you are banned we store the scrambled key of your device (and sometimes of your network), when the ban ends, the reason and how many times it has happened. | While the ban is active, then 12 months after a temporary ban ends so repeat offences can be dealt with. Permanent bans are kept until reviewed. |
| Premium waitlist email (optional) | Only if you type your email into the Premium waitlist. We use it to tell you when Premium opens. You give it by choice and can ask us to delete it at any time. | Until Premium launches or you ask us to delete it, whichever is first. |
| Visit statistics | We count things like visits, chats started, skips, reports and bans so we can run and improve the service. The counts are totals per day and do not identify you. We use Cloudflare Web Analytics, which does not use cookies and does not track you across websites [confirm in your Cloudflare settings]. | Daily totals are kept for up to 13 months. |
What we do not collect
- No name, phone number, photos, contact list or GPS location. There is no account or sign-up.
- No ID documents. We do not verify your age (see "Children").
- No advertising or tracking cookies. If we ever show adverts on the home page we will update this policy first, and there will never be adverts inside chats or video.
3. Our legal reasons for using your information
- To provide the service you asked for (matching you and passing messages).
- Legitimate interests in keeping people safe: stopping abuse, scams, bots and harm to children, and enforcing bans. We have weighed this against your privacy and keep what we collect to a minimum.
- Your consent, for the optional waitlist email. You can withdraw it at any time.
- Legal obligations, for example when the law requires us to respond to authorities.
4. Who we share information with
- Service providers who run 9jaLive for us: Cloudflare (website delivery, video relay and visit statistics), [hosting provider, e.g. Oracle Cloud] (our servers) and [email provider, if any]. They process data only on our instructions.
- Authorities: we may share relevant information with law enforcement or regulators where the law requires it, or where we believe it is needed to protect someone from serious harm, including harm to a child.
- Your chat partner sees your state, your messages, and in video chat your camera and microphone. They never see a phone number or name, because we do not collect them.
We do not sell your information.
5. Transfers outside Nigeria
Our providers may process data outside Nigeria [confirm the regions you use]. Where that happens we make sure the transfer meets the safeguards the NDPA requires.
6. Bans and automated decisions
Some actions are automatic: messages are filtered by software, and when several different people report the same user, that user is blocked automatically (24 hours, then 7 days, then permanently). A message saying you are under 18 also causes an automatic block. A moderator can also ban a device, and sometimes a network (IP address) for a short time. You can ask for a person to review any ban (see section 8).
7. Children
9jaLive is for adults (18 and over) only. We ask you to confirm your age but we do not check ID, so we rely on honesty, automatic checks and reports. We do not knowingly collect information from anyone under 18. If we learn that someone under 18 is using the service we will block them and delete what we can. If you are a parent or guardian and are worried, write to [CONTACT EMAIL].
8. Your rights
Under the NDPA you have rights, in the circumstances the law sets out, to: be informed about how we use your information; access it; have mistakes corrected; have it erased; restrict or object to how we use it; receive it in a portable form; withdraw consent; and ask for a person to review an automated decision. You can also complain to the Nigeria Data Protection Commission (NDPC).
To use these rights, email [CONTACT EMAIL]. Because we do not know who you are, we may not be able to find records that belong to you; we will explain if so. We will reply within [30] days. We may keep some information (for example a ban record) where we need it to keep others safe or to meet a legal duty, and we will tell you if so.
9. Security
We serve 9jaLive over an encrypted connection (HTTPS). Reports and the admin page are protected by a password and are available only to [named people / roles]. No system is perfectly secure. If a data breach is likely to put people at risk, we will notify the NDPC within 72 hours of becoming aware of it and tell affected people where the law requires.
10. Changes to this policy
If we change this policy in a way that matters, we will update the date at the top and tell users in the app before the change takes effect.
11. Contact
[COMPANY NAME] · [registered address] · [CONTACT EMAIL] · [phone]