Privacy Policy

Who this covers

You’re covered if you’re a tailor, designer, workshop owner, or staff member using OgaTailor on a device you control. If you enter details about your customers, you’re responsible for telling them you’re using a tool like ours and for handling any local privacy notices they’re owed. We’re the processor for some of that information on your instructions; you’re still the person in front of the measuring tape.

What we collect

Account & profile. If you create an account or upgrade a plan, we collect identifiers you provide (for example email or name), authentication details handled by our identity providers, and subscription state tied to your workspace.

Business records. Customer names, contact channels you choose to store, measurement histories, orders, invoices, exports, and similar operational data you enter or import.

Device & technical data. App version, device model, coarse locale, crash or diagnostics data if you opt into reporting, and standard server logs when you call our API (timestamps, IP address, routed path).

Optional sensors. With your OS permission, the app may access the camera, photo library, or microphone for specific features. Those flows are described in the dedicated pages on camera & photos and microphone & voice.

Push & messaging tokens. If you enable notifications, we receive a device token through our push provider so we can deliver alerts you asked for (reminders, account notices). We don’t use that channel for unrelated marketing unless you explicitly opt in.

How we use information

We use data to:

Provide core features: storing records locally, syncing when you choose cloud plans, generating PDFs or exports you request.
Maintain security and abuse resistance: session validation, rate limits, investigation of suspected breaking-and-entering.
Improve reliability: diagnosing crashes, understanding which screens fail under real-world use.
Communicate with you about billing, plan changes, incidents, or policy updates.

We don’t sell personal information. We share data only with service providers who help us run hosting, email, push delivery, error reporting, or authentication — under contracts that limit use to delivering our service. A current list lives in our Data practices page and will evolve as vendors change.

We may disclose information if the law demands it, or to protect the rights, safety, or integrity of users and the public, after a sober look at the request.

Security — in transit & at rest

We protect your information with layered controls appropriate to a business app for tailoring shops. We do not claim end-to-end encryption of every field you enter; instead we combine transport security, access controls, and platform safeguards as follows.

In transit. Traffic between the OgaTailor app, our website, and our API is sent over HTTPS (TLS) in production. That includes sync, login, password reset, and cloud backup. Third-party services we use (such as Google Sign-In, push delivery, and payment processors) also use encrypted connections under their own policies.

On your device. Your sign-in token is stored in the operating system’s secure storage (Android EncryptedSharedPreferences / iOS Keychain), not in ordinary app preferences. Customer, order, and measurement records you work with offline are kept in local app storage on your phone, protected when your device is locked by your PIN, biometrics, or the manufacturer’s full-disk encryption.

On our servers. Account passwords are stored as one-way hashes; API session tokens are stored as hashes on the server. Business records in our database are protected by server access controls, authentication, and hosting infrastructure — they are not individually encrypted at the application layer. Our hosting provider may encrypt disks or backups at the infrastructure level; those backups roll off over time as described under Retention.

You can reduce risk by using a strong device lock, keeping the app updated, signing out on shared phones, and deleting your account from Settings when you stop using the service.

Retention

Local data stays on your device until you delete it or uninstall the app. Cloud copies follow the lifecycle of your account: while active we retain what’s needed to operate; after closure we delete or anonymize within a reasonable window unless law requires longer storage. Infrastructure backups at our host may persist for a limited period before rolling off.

Your choices & rights

Under Nigeria’s Nigeria Data Protection Regulation (NDPR) and comparable laws elsewhere, you may have rights to access, correct, delete, export, or restrict certain processing of your personal data. Email us at the address below with the subject line “Privacy request” and we’ll verify ownership before acting. Registered tailors can also delete their account directly in the app (Settings → Delete account & data), as described below.

Delete your account & associated data

In the app (registered tailors): Open Settings → Delete account & data, confirm your identity with your password or Google sign-in, and type DELETE to proceed. Your account is locked immediately — you are signed out and cannot use the app until you restore or the grace period ends. You have 30 days to restore by signing in with your email and password and choosing to restore when prompted. After that grace period, we permanently remove your profile, customers, orders, measurements, invoices, and other business data from our live systems.

Financial retention: Where Nigerian law or legitimate accounting obligations require it, anonymized subscription payment records (amount, plan, date — with no names, emails, or customer details) may be retained after purge. These records are keyed by a one-way hash and cannot be used to identify you.

Guest mode: Guest records can be removed immediately from Settings → Delete guest data without a grace period.

Admin suspension is different: If support suspended or blocked your account for policy reasons, contact hello@ogatailor.app — that is separate from self-service deletion.

By email: You may still email us from your registered address for deletion or other privacy requests. We respond within a reasonable time. Infrastructure backups may roll off on their own schedule as described under Retention.

Email a privacy request

Children

OgaTailor isn’t aimed at children under 16. We don’t knowingly collect their personal data. If you believe we’ve received such data by mistake, contact us and we’ll remove it.

Changes

When we materially change this policy, we’ll update the date above and, where practical, surface a notice in the app or by email. Continued use after the effective date means you’ve seen the update.

Contact

Privacy questions and data requests: hello@ogatailor.app. Postal correspondence: Webspace Innovation Hub Limited, 19 Famurewa Street, Oluyole Sharp Corner, Ibadan, Nigeria.