Privacy Policy

The information we collect falls into two broad categories: information you provide to us and information collected automatically when you use the Service.

1.1 Information You Provide

We may collect information you knowingly provide when you:

• create or update an account;
• verify your phone number or email address;
• participate in a Wave, quiz, reveal, survey, personality test, story unlock, vote, share, or invite;
• submit posts, replies, explanations, reports, appeals, or other user content;
• request or receive rewards or redemptions;
• contact us for support, complaints, privacy requests, partner enquiries, or other matters; or
• use staff, admin, partner, vehicle, or operational features linked to the Service.

This may include your username, display name, phone number, email address, profile details, account role, verification status, user content, participation records, Reward Points, Wave Score, redemption details, support messages, and partner or operational contact details.

1.2 Information Collected Automatically

When you use Joy in Transit, we may automatically collect standard technical, usage, and operational information. This may include IP address, browser type, device information, session identifiers, pages or features used, referral source, QR or vehicle link activity, timestamps, error logs, security signals, fraud-prevention signals, and general activity records.

Where Joy in Transit uses vehicle or GPS-related systems to support vehicle-linked experiences, route delivery, safety, quality control, or operational reporting, we may process vehicle, device, route, or movement information. Where that information can reasonably be linked to a person, we treat it as personal information.

User-generated content includes posts, replies, explanations, votes, reports, appeals, profile information, uploaded media, and other materials you voluntarily submit to Joy in Transit.

Some user-generated content may be public or visible to other users, partners, staff, admins, or public visitors depending on the feature. Public content may remain visible or may have been copied, shared, screenshotted, or indexed by others even if it is later edited, hidden, or deleted.

Do not submit private phone numbers, home addresses, financial details, passwords, one-time passwords, government identifiers, or other sensitive information in public areas of the Service.

We collect, hold, use, and disclose personal information for purposes reasonably connected to Joy in Transit, including to:

• provide, operate, maintain, and improve the Service;
• create, verify, authenticate, secure, and manage accounts;
• run Waves, QR experiences, The Base, content features, invites, shares, quizzes, reveals, surveys, personality tests, story unlocks, and related features;
• calculate participation, progress, Reward Points, Wave Score, tiers, leaderboards, eligibility, and redemptions;
• process rewards, redemptions, support requests, complaints, reports, and appeals;
• publish, display, moderate, hide, remove, restore, or preserve user content where appropriate;
• prevent fraud, duplicate activity, reward farming, scan farming, vote manipulation, abuse, security risks, and unauthorised access;
• operate partner-supported experiences, vehicle-linked experiences, staff/admin tools, and operational reporting;
• prepare analytics, reports, and insights, including aggregated or anonymised partner-facing reports;
• send service messages, verification messages, security notices, reward updates, and support communications;
• comply with law, enforce our Terms of Service, resolve disputes, and protect Diliq, users, partners, staff, and the public.

We only collect and use personal information when we have a lawful or legitimate reason to do so. Depending on the context, we may rely on:

• contract or steps before contract, to provide accounts, Waves, rewards, redemptions, and requested features;
• consent, for non-essential cookies or tracking, optional marketing, and other uses where consent is required;
• legitimate interests, to secure the Service, prevent fraud and abuse, moderate content, support users, improve features, measure Wave delivery, and protect platform integrity; and
• legal obligation, to keep required records, respond to lawful requests, handle disputes, comply with regulators, and meet tax, accounting, audit, safety, or legal requirements.

Where we rely on consent, you may withdraw that consent. Withdrawal does not affect processing that already occurred before withdrawal.

A cookie is a small piece of data stored on your device when you visit a website. Similar technologies include local storage, session identifiers, device identifiers, and other tools that help a service remember users, keep accounts secure, preserve preferences, measure usage, or improve performance.

We use essential cookies and similar technologies to enable core functions such as login, account security, onboarding, password recovery, anonymous progress, fraud prevention, and consent storage.

We may also use non-essential cookies or similar technologies for analytics, performance, functionality, or marketing where enabled and accepted. These may help us understand how the Service is used, improve user experience, remember preferences, or measure promotional activity.

If you reject non-essential cookies, we may still use essential cookies needed to provide and protect the Service. If you block essential cookies through your browser, some parts of Joy in Transit may not work properly.

If Joy in Transit later uses third-party analytics, advertising, or similar non-essential tracking tools, we will disclose this and, where required, ask for consent before they load.

We may disclose personal information to:

• service providers that help us provide hosting, storage, database, SMS, email, analytics, security, support, GPS/device, reward, airtime, bill-payment, and operational services;
• partners, but mainly through aggregated, anonymised, or limited reports relating to their own Wave, content, or partner-supported experience;
• employees, contractors, admins, moderators, and authorised representatives who need access to operate, support, protect, or improve the Service;
• courts, regulators, law enforcement, professional advisers, or other recipients where required by law, legal process, safety need, fraud prevention, dispute resolution, or rights enforcement; and
• a buyer, successor, or transferee if Joy in Transit, Diliq, or relevant assets are involved in a merger, acquisition, financing, restructuring, sale, or similar transaction.

We do not sell personal information.

Joy in Transit may store or process information in Nigeria and in other countries where our service providers, partners, affiliates, or infrastructure providers operate.

Where personal information is transferred internationally, we take steps designed to protect it in line with this Privacy Policy and applicable law.

We use commercially reasonable technical and organisational measures designed to protect personal information against loss, theft, misuse, unauthorised access, disclosure, copying, alteration, and destruction.

No method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account, password, device, and one-time passwords confidential.

We keep personal information only for as long as reasonably needed for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Retention may depend on account status, the type of information, reward and redemption records, fraud-prevention needs, legal requirements, audit needs, accounting needs, dispute risks, public-content status, and operational requirements.

Where information is no longer needed in identifiable form, we may delete it, anonymise it, aggregate it, or retain it in a form that does not directly identify you.

Joy in Transit may use automated or semi-automated rules to calculate progress, Reward Points, Wave Score, leaderboards, eligibility, duplicate activity, and fraud or abuse signals.

These systems help us operate the Service, protect rewards, prevent manipulation, and enforce our Terms of Service. Moderation decisions, redemptions, suspicious activity reviews, leaderboard adjustments, appeals, and reward reviews may involve human review.

You may contact us if you believe a decision affecting your account, content, Reward Points, Wave Score, leaderboard position, or redemption is wrong.

Depending on where you live and which laws apply, you may have rights to:

• be informed about how your information is used;
• access personal information we hold about you;
• correct inaccurate or incomplete information;
• request deletion or erasure;
• object to or restrict certain processing;
• request portability of certain information;
• withdraw consent where processing is based on consent;
• request review of certain automated or fraud-related decisions; and
• complain to a data protection authority.

To make a request, contact us at hello@joyintransit.com. We may need to verify your identity before responding. Some requests may be limited by legal, security, fraud-prevention, audit, accounting, public-content, operational, or dispute-related obligations.

You can reject non-essential cookies through the cookie notice and can block or delete cookies through your browser settings.

We may send service communications such as one-time passwords, verification messages, password reset messages, security notices, account notices, moderation updates, appeal updates, redemption updates, support messages, and important Wave or Service messages.

We will only send optional marketing or promotional messages where permitted by law and, where required, with consent or an available opt-out.

Joy in Transit is not aimed at children under 13, and we do not knowingly collect personal information from children under 13.

If you are under 18, you should use Joy in Transit only with permission from a parent or legal guardian. If a parent or legal guardian believes a child has provided personal information without proper permission, they should contact us.

Our Service may link to third-party websites, partner pages, social platforms, payment providers, billers, telecom providers, or other external services. We are not responsible for the privacy practices, content, failures, or actions of third-party services except to the extent required by law.

We may update this Privacy Policy to reflect changes to Joy in Transit, our data practices, providers, legal requirements, or product features.

Where changes are material, we may notify users through the Service, website, email, SMS, or another reasonable channel. The updated policy will show the effective date.

For privacy questions, account support, complaints, access requests, correction requests, deletion requests, reward issues, redemption issues, reports, appeals, intellectual property complaints, or partner enquiries, contact:

hello@joyintransit.com