Privacy Policy

1. Information we collect

A. Account and profile information

Depending on how you use Fundu, this may include your name, email address, display name, profile photo, country, bio and account settings.

If you sign in with an authentication provider such as Google, Fundu may receive information made available through that sign-in, such as your name, email address and profile image.

B. Campaign information

This may include the campaign title, category, fundraising goal, campaign dates, story, images, videos, updates, beneficiary information you provide, organizer-reported fundraising totals, and the campaign’s privacy and discovery settings.

C. Receiving and payment information

Fundu may collect the information needed to set up supported receiving methods. Depending on the method, this may include the country, provider or bank name, account holder name, account number, registered mobile number, wallet or payment identifier, payment link, or other information the method requires.

Receiving information you select for a campaign may be displayed to people who can view that campaign, so they can support you directly. Fundu does not need your banking password, mobile-money PIN, wallet password, card PIN or one-time code to display receiving information.

D. Comments and activity

This may include comments, campaign updates, publishing activity, changes to organizer-reported amounts, and other account and campaign activity that Fundu records.

E. Technical and security information

When you use Fundu, our systems and service providers may record technical information needed to run and secure the service, such as sign-in and security events, login times, and information about your browser or device.

F. Support communications

If you contact Fundu, we process your message, contact details, anything you choose to include, and relevant support history, so we can respond to and manage your request.

2. How we use personal information

Where applicable, Fundu uses personal information to:

• create and manage accounts, and authenticate users
• create, host, publish and display campaigns
• display the receiving information organizers select
• let campaigns be shared
• provide comments and updates, and keep a record of account and campaign activity
• provide customer support
• maintain security, and prevent and investigate fraud and abuse
• enforce Fundu’s rules
• troubleshoot, operate and improve Fundu
• comply with applicable legal obligations

3. Lawful basis for processing

Fundu processes personal information only where there is an appropriate lawful basis under applicable data-protection law, including the Nigeria Data Protection Act 2023.

Contractual necessity

Where processing is necessary to create and manage your account, authenticate you, create, host and publish campaigns, manage receiving methods, and provide the Fundu services you ask for.

Legitimate interests

For platform security, fraud and abuse prevention, protecting users, troubleshooting and improving Fundu, where our interests are not overridden by your rights and freedoms.

Legal obligation

Where Fundu must process information to comply with applicable law or lawful requirements.

Consent

Where Fundu specifically asks for your consent for optional processing for which consent is appropriate, such as certain marketing or non-essential tracking. Consent is not the basis for all processing.

4. What other people can see

For a published campaign, viewers may see the information intentionally displayed on it, which may include the title, story, images and videos, goal, organizer-reported amount raised, organizer identity and profile information, updates, comments, and the receiving information selected for that campaign.

Public campaigns may appear in Explore or other public discovery surfaces. Private (unlisted) campaigns don’t appear in public discovery, but may be accessed by anyone with the link. Private or unlisted does not mean confidential.

Email addresses, passwords, unpublished drafts and private account settings are not intentionally displayed on campaign pages, unless you choose to include particular information in your campaign content.

5. Receiving information and privacy

To let supporters send money directly to organizers, Fundu may display the receiving information an organizer selects for a campaign. The exact information displayed depends on the receiving method.

Only add or select receiving information you are comfortable sharing with the campaign’s intended audience. Fundu will show which receiving information will become visible before you select or publish it.

Receiving information that is intentionally displayed on a campaign is not confidential.

6. Service providers and data sharing

Fundu uses third-party service providers to operate the platform, including Supabase for authentication, database and file storage, Vercel for website hosting, Formspree for Help form messages, and Google where you choose Google Sign-In. Where reasonably necessary to operate Fundu, personal information may be processed by these providers on our behalf.

Fundu may also disclose information where reasonably necessary and legally permitted to comply with applicable law, respond to lawful legal processes, protect Fundu and its users, investigate fraud or security incidents, and enforce our Terms of Service.

Fundu does not sell your personal information.

7. International data transfers

Fundu may use service providers that process personal information outside Nigeria. Where personal information is transferred across borders, Fundu will take the steps required by applicable data-protection law to ensure the transfer has a lawful basis and appropriate safeguards.

8. Cookies and similar technologies

Fundu uses essential cookies and similar browser storage to keep you signed in and to keep your session secure. These are needed for Fundu to work.

Fundu does not currently set its own analytics or advertising cookies. If that changes, this policy will be updated and, where required, we will ask for your consent.

Embedded content. Campaigns may contain content embedded from third-party services, such as video providers. When you load or interact with embedded content, the third-party provider may receive technical information about your device or interaction and may use cookies or similar technologies under its own privacy policy. These technologies are controlled by the relevant third party rather than Fundu.

9. Data retention

Fundu retains personal information only for as long as reasonably necessary for the purposes described in this Policy, including providing the service, maintaining security, resolving disputes, enforcing agreements and meeting legal obligations.

Retention periods may vary according to the type of information and the reason it is processed. When personal information is no longer reasonably required, Fundu will delete, anonymize or securely dispose of it, subject to any lawful retention requirement.

10. Account closure and deletion

• Ending a campaign stops it asking for support. Its story and updates remain viewable.
• Deleting a campaign removes it from Fundu and makes its link unavailable.
• Closing your account can be requested at funduhelp@gmail.com, or done from Settings where that option is available.

When an account or campaign is deleted, Fundu may retain some information where reasonably necessary for legal obligations, security, fraud prevention, dispute resolution, enforcing agreements or other lawful purposes. Other personal information will be deleted or anonymized in line with section 9.

11. Your privacy rights

Subject to applicable law and the circumstances, you may have rights over your personal information, including the right to:

• be informed about how it is used
• access it
• correct inaccurate information
• request deletion (erasure)
• restrict certain processing
• object to certain processing
• withdraw consent where processing relies on consent
• data portability, where applicable
• protections relating to qualifying automated decision-making
• lodge a complaint with the Nigeria Data Protection Commission

Not every request requires Fundu to delete every record, for example where the law requires us to keep it. Fundu may need to verify your identity before acting on a request, where reasonably necessary.

12. Security

Fundu uses reasonable technical and organizational measures intended to protect personal information. No system can be completely secure, and you are responsible for protecting your own sign-in details.

Fundu will never ask you to provide your bank password, mobile-money PIN, wallet password, card PIN or one-time verification code merely to display a receiving method.

13. Children

Fundu accounts and organizer features are intended for people aged 18 and over. People under 18 may be beneficiaries of campaigns created and managed by eligible adults. Fundu does not knowingly allow a person under 18 to create an organizer account.

If Fundu becomes aware that personal information about a child has been collected or processed contrary to applicable requirements, Fundu will take appropriate steps consistent with applicable law.

14. Changes to this Privacy Policy

Fundu may update this Policy as its services, data practices, legal requirements or operational requirements change. This page always shows the current “Last updated” date. Where a change materially affects you, Fundu may give additional notice where appropriate or required.

15. Contact and privacy complaints

Contact us with privacy questions, requests to access, correct or delete your information, or other privacy concerns.

• Privacy contact: funduhelp@gmail.com
• Operator and data controller: Fundu

You may also have the right to lodge a complaint with the Nigeria Data Protection Commission.