Privacy Policy
Effective date: 19 February 2026 · Last updated: 19 February 2026
1. Who we are
AfriTask AI Ltd. (“AfriTask”, “we”) is the controller of personal data processed via the AfriTask AI platform. We are based in Lagos, Nigeria, and we take your privacy seriously — both because Nigerian data-protection law (NDPR 2019 and the Data Protection Act 2023) require it, and because we believe you should be in control of your own data.
2. Data we collect
We collect the minimum data necessary to operate the Platform:
- Account identifier: an auto-generated anonymous user_id (UUID) and username (e.g. Warrior#4821). We do not require your real name, email, or phone number to use the Platform.
- Device fingerprint: a hash of browser/device attributes used for anti-fraud and referral-abuse detection.
- Bank account details: when you save a withdrawal destination — bank name, bank code, account number, account holder name. Verified against Paystack’s name-resolution service.
- Transaction records: top-ups, task entries, submissions, approvals, payouts, withdrawals, and every ledger entry that follows.
- Task submissions: text, image labels, audio recordings, translations, or ratings you submit to task rounds. See section 4.
- Referral data: who invited you (if applicable), who you have invited, and the status of each referral.
- Support communications: any messages you send us via the contact form.
3. How we use your data
Your personal data is used for:
- Providing the Platform: creating your account, tracking Work Points, processing top-ups, running task selection, paying out earnings, processing withdrawals.
- Preventing fraud: detecting multi-accounting, referral fraud, or bot submissions.
- Improving the Platform: aggregate analytics on which task types succeed, drop-off points, page-load performance.
- Communicating with you: in-app notifications about selection outcomes, badge unlocks, referral activations, and withdrawal statuses.
4. Task submissions & AI training
Important. By submitting an answer to a task round, you grant AfriTask AI a worldwide, royalty-free, perpetual, irrevocable licence to use, reproduce, modify, publish, distribute, and create derivative works from your submission for the purpose of training, fine-tuning, evaluating, or otherwise developing AI models — including for our own commercial use and for onward supply to third-party research or commercial customers.
You retain ownership of any pre-existing intellectual property you contribute, but you warrant that you have the right to submit the material and grant this licence. Do not submit content you do not own or which contains third-party personal data.
5. Third-party services
We share data with the following third parties strictly as needed:
- Paystack Payments Limited — for processing your Naira top-ups and disbursing withdrawals. Paystack receives your bank details, transaction amounts, and account holder name. Paystack’s own privacy policy applies to their processing.
- MongoDB Atlas / cloud hosting provider — for storing platform data. Data is encrypted at rest.
- Cloud storage — for uploaded task submission files (audio, images). Files are stored with strong access controls.
We do not sell your personal data to advertisers. We do not use third-party ad networks.
6. Your rights
Under the Nigeria Data Protection Act 2023, you have the right to:
- Request a copy of the personal data we hold about you.
- Ask us to correct inaccurate data.
- Ask us to delete your account and associated personal data (subject to overriding legal-record-keeping obligations).
- Withdraw consent for optional processing at any time.
- Object to processing you believe is unlawful or disproportionate.
To exercise these rights, email privacy@afritask.ai. We will respond within thirty (30) days.
7. Data retention
We retain financial records (top-ups, withdrawals, payouts) for seven (7) years to comply with tax and anti-money-laundering obligations. Task submissions are retained for the useful life of derived AI models. Account-identity data is retained as long as your account remains active; upon deletion, it is anonymised in our analytics and removed from operational systems within thirty (30) days.
8. Security
We use industry-standard controls: TLS encryption in transit, encryption at rest, strong password hashing (bcrypt for internal admin accounts), rate limiting on public endpoints, and access controls that limit personal data to a small set of authorised staff. No system is completely secure — please help by using a strong device passcode and reporting suspicious activity to us immediately.
9. Cookies & local storage
We do not set advertising cookies. We use browser localStorage to persist your anonymous user_id (so you don’t need to log in again) and your admin authentication token (only if you have admin access). No third-party trackers are set by the Platform.
10. Children
The Platform is not intended for users under 18. If we become aware of an account belonging to a minor, we will suspend it and delete the associated data.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be notified via an in-app banner. The “Last updated” date at the top of this page reflects the most recent revision.
12. Contact
For any privacy-related question or request, contact us at privacy@afritask.ai. You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).