Effective date: 20 July 2026
Snacc is operated by Issorite Technology ("Issorite", "we", "us" or "our"), a company registered in the Federal Republic of Nigeria.
This Privacy Policy explains what personal data we collect through the Snacc mobile app and the snacc.fyi website, how we use it, who we share it with, and the rights you have. We process personal data in line with the Nigeria Data Protection Act 2023 (the "NDPA") and other applicable laws.
If you have any questions, contact us at privacy@snacc.fyi.
1. Who we are
Issorite Technology is the data controller responsible for your personal data on Snacc. Snacc is a social app that connects students within their university and campus communities in Nigeria.
2. The information we collect
Information you give us
- Account details: the email address you sign up with. We verify it with a one-time code — we do not use or store passwords.
- Profile details: your username, display name and the campus or university you select. Optionally, you may add a profile photo, a short bio, your graduation year, your course of study, your gender and your date of birth.
- Content you create: the posts ("snaccs"), comments, replies, resnaccs, reactions, images and GIFs you share, and the hashtags and mentions they contain.
- Reports and appeals: information you submit when you report content or an account, or when you contact support.
- Payout details: if you withdraw earnings, the bank account information (such as account number, account name and bank) that you provide, which is processed through our payments partner.
Information we collect automatically
- Usage and interaction data: the snaccs you view, react to, bookmark or resnacc, and the accounts you follow, block or hide. Some of this is used to count views and calculate earnings.
- Device and push data: a push notification token for the device you install the app on, so we can deliver notifications.
- Technical and diagnostic data: your IP address, device type, operating system, app version and crash or error reports, which help us keep the service secure and working.
What we do not collect
We do not collect passwords, we do not track your precise location, we do not access your contacts, and we do not use advertising identifiers to track you across other apps or websites.
3. How we use your information
- To create and operate your account and sign you in using one-time email codes.
- To show you your campus feed and the content and people you follow.
- To send notifications you have not turned off (in-app, push and email).
- To calculate, track and pay out earnings, and to process withdrawals.
- To keep Snacc safe: to review reports, moderate content, and detect fraud, abuse and violations of our rules.
- To provide customer support and respond to your requests.
- To improve the app, fix bugs and understand how features are used.
- To comply with our legal obligations and enforce our Terms.
4. Legal bases for processing
Depending on the activity, we rely on: your consent (for example, optional profile fields and push notifications); the performance of our contract with you (to run your account and pay earnings); our legitimate interests (to secure, improve and moderate the service); and compliance with legal obligations (such as financial and safety record-keeping). You may withdraw consent at any time where processing is based on consent.
5. How we share information
We do not sell your personal data. Public content — such as your username, display name, profile photo, campus and the snaccs you post — is visible to other users of Snacc. We share personal data with the service providers who help us run Snacc, who act as our processors and may only use the data on our instructions:
- Resend — to deliver transactional email, including your login codes and notifications.
- Cloudflare — to store uploaded images and profile photos (Cloudflare R2) and to help deliver and secure the service.
- Expo — to deliver push notifications to your device.
- Paystack — to verify bank accounts and process withdrawals when you cash out earnings.
- Giphy — when you search for a GIF, your search query is sent to Giphy to return results.
- Sentry — to receive crash and error reports that help us diagnose problems.
- Avatar generation — default profile pictures are generated by a third-party avatar service from a random identifier, not from your personal data.
- Hosting — our servers are operated by a reputable cloud infrastructure provider.
We may also disclose information where required by law, to comply with a lawful request from an authority, to enforce our Terms, or to protect the rights, safety and property of our users, the public or Issorite — including reporting child sexual abuse and exploitation to the relevant authorities.
6. International transfers
Some of our service providers store or process data outside Nigeria, including in the European Union and the United States. Where we transfer personal data across borders, we take steps to ensure it remains protected in line with the NDPA, including relying on adequacy, appropriate contractual safeguards or your consent.
7. How long we keep your data
We keep your personal data for as long as your account is active. When you delete your account, we delete your profile and the content associated with it. We may retain limited information for longer where we are required to — for example, records of financial transactions for tax and anti-fraud purposes, and safety records — after which it is deleted. Residual copies may persist in backups for a limited period before they are overwritten.
See our Data & Account Deletion page for how to delete or export your data.
8. Your rights
Subject to the NDPA, you have the right to:
- Access the personal data we hold about you and receive a copy.
- Correct information that is inaccurate or incomplete.
- Delete your account and personal data.
- Object to or restrict certain processing.
- Withdraw consent where processing is based on consent.
- Receive your data in a portable format.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC).
You can export and delete your data directly in the app (Settings), or contact us at privacy@snacc.fyi to exercise any of these rights. We will respond within the timeframe required by law.
9. Children
Snacc is intended for people aged 16 and over. We do not knowingly collect personal data from anyone under 16. If we learn that we have, we will delete the account and its data. Read our Child Safety Standards for how we protect minors.
10. Security
We protect your data with measures including hashing login codes and access tokens, encrypting data in transit (TLS), and restricting internal access. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly to any incident.
11. Cookies and tracking
The Snacc mobile app does not use cookies; it stores a secure sign-in token on your device. The snacc.fyi website uses a single strictly-necessary cookie for administrator sign-in only. We do not use advertising cookies or third-party trackers, and we do not track you across other apps or sites.
12. Changes to this policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, notify you in the app. Your continued use of Snacc after an update means you accept the revised policy.
13. Contact us
For privacy questions or to exercise your rights, email privacy@snacc.fyi. For general support, email support@snacc.fyi.