Effective date: 2026-09-12
Privacy policy
This policy explains what personal data UrGadget collects, why we collect it, and the choices you have. We wrote it in plain language. This policy follows Nigeria’s NDPA 2023 and the GAID issued under it.
In short: we collect what we need to value your gadget and send your receipt, we never sell your personal data, and you can ask us to show, correct, or delete it at any time.
Who we are
UrGadget is a gadget valuation service operated from Lagos, Nigeria. When this policy says “we” or “us”, it means the UrGadget team. We decide what personal data is collected and why, which makes us the data controller under the NDPA 2023.
How to contact us
For any privacy question, request, or complaint, contact us at hello@urgadget.biz. We are based in Lagos, Nigeria. Write to us from the email address on your account so we can confirm it is you, and we will reply within a reasonable time.
Data we collect
We only collect data we need to run the service. IMEI numbers, serial numbers, and photos of your device count as personal data when they can be linked to you, and we treat them that way.
- Account data: your name, email address, and profile details you give us when you sign up or join the waitlist.
- Device identifiers you provide: IMEI and serial numbers you enter so we can identify and value your gadget.
- Photos you upload: pictures of your gadget, up to a 12-photo cap per assessment.
- Device and usage data: basic technical details such as device type, browser, pages visited, and actions in the app, which help us fix faults and improve the service.
- Offline queue data: assessments and photos you save while offline are stored on your own device in an offline Dexie queue and sent to us when you reconnect (see how offline sync works).
We do not collect payment card details on our pages.
Why we use your data and the lawful basis
Under the NDPA 2023, we must have a lawful basis for each use of your personal data. The table below lists what we do and why the law allows it.
| Purpose | Lawful basis |
|---|---|
| Create and manage your account, including Google sign-in | Performance of a contract with you |
| Value your gadget from the IMEI, serial, and photos you provide | Performance of a contract with you |
| Issue and store your receipt snapshots | Performance of a contract; legal obligation to keep transaction records |
| Send transactional emails such as receipts and sign-in messages | Performance of a contract; legitimate interests in confirming your transactions |
| Sync your offline queue when you reconnect | Performance of a contract with you |
| Keep the service secure, prevent fraud, and fix faults | Legitimate interests in running a safe service; legal obligation where the law requires it |
| Send marketing emails, where you asked for them | Consent, which you can withdraw at any time |
Where we rely on legitimate interests, we weigh our needs against your privacy and only proceed when the impact on you is low. You can object to uses based on legitimate interests (see your rights).
How offline sync works
UrGadget works offline. If you lose your connection, your assessments and photos wait in an offline queue stored on your own device using Dexie (a local on-device database). Nothing new leaves your device until you reconnect.
When you are back online, the queued items sync to our servers automatically so your valuation and receipt can be completed. You can delete queued items from the app before they sync. Once synced, the normal retention rules in this policy apply.
Signing in with Google
If you choose to sign in with Google, Google asks for your permission and shares basic profile details with us, normally your name, email address, and profile picture. We use these details only to create and log you into your account.
We do not read your Gmail, files, or contacts. You can disconnect Google sign-in at any time from your Google account settings; your UrGadget account stays unless you ask us to delete it.
Email receipts
After a valuation, we email your receipt to the address on your account. We send these transactional emails through Brevo, our email delivery provider, which processes your email address and receipt details only to deliver the message.
Receipt emails are not marketing. If you also receive marketing emails from us, every message includes an opt-out link, and you can unsubscribe at any time by clicking it or by writing to hello@urgadget.biz.
Photos and how long we keep them
You can upload up to 12 photos per gadget assessment (the 12-photo cap). We use them to assess your gadget’s condition and to support your receipt.
Once a receipt is issued, its receipt snapshot is immutable: we freeze it so the record of what you were told and what you paid cannot be quietly changed later. This protects both you and us if there is ever a dispute.
We keep account data, assessments, and photos only as long as needed for the purposes in this policy or as the law requires. You can ask us to delete your photos and other data at any time (see your rights). Where a deletion request touches an immutable receipt snapshot, we will delete what we lawfully can and explain in plain terms anything we must keep as a transaction record.
Data that leaves Nigeria
Some of our service providers store or process data outside Nigeria. When your data is transferred cross-border, we only use providers that protect it with appropriate safeguards, such as contractual protections, and we limit what is sent to what is needed.
How we keep your data safe
We protect your data with encryption in transit, access controls so only staff who need it can see it, and regular checks of our systems. No system is perfectly secure, so we also plan for incidents — see what happens if there is a breach.
Your rights
Under the NDPA 2023, you have the right to:
- Access: ask for a copy of the personal data we hold about you.
- Correction: ask us to fix data that is wrong or incomplete.
- Deletion: ask us to erase your personal data where the law allows it.
- Objection: object to uses based on our legitimate interests.
- Withdraw consent: take back consent for marketing at any time.
How to exercise your rights
Email hello@urgadget.biz from your account address and tell us what you want. We may ask for proof of identity so we do not hand your data to the wrong person. We will respond within the time the NDPA 2023 requires. If you feel we did not handle your request well, you can complain to the Nigeria Data Protection Commission (NDPC).
Children
UrGadget is intended for adults. If you are under 18, please use it only with a parent or guardian. If we learn that a child’s data was provided without proper consent, we will delete it.
What happens if there is a breach
If personal data is lost, stolen, or wrongly exposed, we will investigate, contain the problem, and keep records as the NDPA 2023 requires. Where the law requires it, we will notify the NDPC within 72 hours of becoming aware of the breach. If the breach creates a high risk to you, we will also tell affected users directly and explain what to do.
Changes to this policy
This policy’s effective date is 2026-09-12. If we change how we handle your data, we will post the new version on this page with a new effective date and, for important changes, tell you by email or in the app before the changes take effect.
Our update path is simple: the current version always lives at https://urgadget.biz/privacy-policy, and older versions are available on request from hello@urgadget.biz.