Privacy Policy
Last updated: June 28, 2026
Acefre is committed to protecting your privacy. This policy explains what personal data we collect, how we use it, and the rights you have over your information when you use our campus service marketplace in Nigeria.
Information We Collect
To provide a safe and reliable marketplace, we collect the following categories of personal data:
Account Information
Your full name, email address, phone number, date of birth, and profile photo provided when you register on Acefre.
Identity Verification Documents
National Identification Number (NIN), student ID card, and a face photo or liveness check used to verify your identity before you can operate as a runner or access certain features.
Location Data
Pickup and delivery locations you provide when creating or accepting tasks. If you enable live tracking, we may collect your device's GPS coordinates during an active task.
Device Information
IP address, browser type, operating system, device identifiers, and mobile network information collected automatically when you access our platform.
Cookies and Analytics
Session cookies for authentication, preference cookies, and analytics data about how you navigate and use Acefre. See our Cookie Preferences page for full details.
Usage Information
Task history (tasks created and completed), search queries, ratings and reviews given or received, and in-app activity logs.
Payment and Wallet Data
Wallet balance, transaction history, payment method metadata (no raw card numbers — see Section 5 on Paystack), and escrow records associated with your account.
Communications
Messages exchanged with runners or customers through our in-app chat, and correspondence with our support team via tickets or email.
How We Use Your Data
We use your personal data only for lawful purposes directly related to operating the Acefre platform:
- Provide and improve services: To operate the marketplace, match customers with runners, process tasks, and continuously improve platform performance and features.
- Identity verification and fraud prevention: To verify the identity of runners and customers, detect fraudulent accounts, and maintain the safety and integrity of the platform.
- Payment processing and escrow management: To facilitate secure payments, hold funds in escrow during active tasks, process wallet top-ups and withdrawals, and generate transaction records.
- Dispute resolution: To investigate and mediate disputes between customers and runners, using task history, communications, and transaction data as evidence.
- Customer support: To respond to your enquiries, troubleshoot issues, and process complaints or refund requests.
- Marketing and communications: To send you relevant product updates, promotional offers, and platform announcements — only with your explicit consent, which you can withdraw at any time.
- Legal compliance: To comply with applicable Nigerian laws and regulations, respond to lawful requests from government authorities, and enforce our Terms of Use.
How We Store Your Data
Your data is stored on secure servers operated by Acefre and our trusted cloud infrastructure partners. Our storage practices include:
- —Encrypted databases (AES-256) at rest for all personal data and documents.
- —TLS 1.2+ encryption for all data transmitted between your device and our servers.
- —Role-based access controls that restrict which staff members can access sensitive data.
- —Cloud infrastructure providers operating in data centres that meet international security certifications, with data primarily processed within Nigeria and sub-Saharan Africa where feasible.
- —Routine access logging and anomaly detection to identify and respond to unauthorised access attempts.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes outlined in this policy or as required by law.
Third-Party Services
Acefre integrates with carefully selected third-party providers to deliver its services. Each provider has its own privacy policy and data handling practices:
Paystack (Payment Processing)
We use Paystack to process card payments, bank transfers, and wallet operations. Paystack is PCI-DSS compliant. Your payment details are handled directly by Paystack under their Privacy Policy.
Cloud Infrastructure Providers
We use cloud hosting providers to run our servers and store data securely. These providers process data on our behalf under data processing agreements and are contractually bound to protect your information.
Analytics Tools
We use privacy-focused analytics to understand how users interact with our platform and to improve the user experience. Analytics data is aggregated and does not identify you personally. You can opt out via our Cookie Preferences.
Important: Acefre is not responsible for the privacy practices of third-party services. We encourage you to review their policies before using features that rely on them.
Security
Protecting your data is a core responsibility at Acefre. Our security measures include:
- —End-to-end encryption for sensitive data in transit (TLS 1.2+) and AES-256 encryption at rest.
- —Strict access controls: only authorised personnel can access personal data, and access is logged.
- —Regular internal security reviews and vulnerability assessments of our platform and infrastructure.
- —Incident response procedures to contain and disclose data breaches within the timelines required by the NDPC.
No system is completely immune to breaches. If you suspect your account has been compromised, please change your password immediately and contact us at privacy@acefre.com.
Children's Privacy
Acefre does not provide services to individuals under the age of 18.
Our platform is intended exclusively for university students and adults. We do not knowingly collect personal data from anyone under 18 years old. If we become aware that a minor has created an account, we will promptly delete their data and close their account. If you believe a minor is using Acefre, please contact us at privacy@acefre.com.
Your Rights
Under the Nigerian Data Protection Regulation (NDPR) and the Nigeria Data Protection Act (NDPA), you have the following rights regarding your personal data:
Right of Access
You may request a copy of all personal data we hold about you, including what it is, how it is used, and who it has been shared with.
Right to Correction
You may request that we correct inaccurate or incomplete personal data. You can update most account information directly in your profile settings.
Right to Deletion
You may request that we delete your personal data, subject to our legal obligations to retain certain records (e.g., transaction history).
Right to Data Portability
You may request an export of your personal data in a structured, machine-readable format, allowing you to transfer it to another service.
Right to Withdraw Consent
Where we process your data based on consent (e.g., marketing emails), you may withdraw that consent at any time without affecting the lawfulness of prior processing.
Right to Object
You may object to processing of your data for specific purposes, such as direct marketing or profiling. We will stop unless we have compelling legitimate grounds.
To exercise any of these rights, email privacy@acefre.com with the subject line "Data Rights Request". We will respond within 30 days.
Deletion Requests
You can request full deletion of your Acefre account and associated data in two ways:
We will process deletion requests within 30 days. Note that data required for legal compliance — such as transaction records — will be retained for the periods specified in Section 4, even after account deletion. Any pending escrow balances must be resolved before an account can be closed.
Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law.
30-day advance notice: For any material changes to this policy — such as changes to the types of data we collect or how we share it — we will notify you by email and/or prominent in-app notice at least 30 days before the changes take effect.
Continued use of Acefre after the effective date of an updated policy constitutes your acceptance of the changes. The "Last updated" date at the top of this page always reflects the most recent revision.
Applicable Law
This Privacy Policy is governed by Nigerian law. Our data practices are designed to comply with:
- —Nigeria Data Protection Act (NDPA) 2023 and its implementing regulations.
- —Nigerian Data Protection Regulation (NDPR) 2019 issued by NITDA.
- —Relevant guidelines from the Nigeria Data Protection Commission (NDPC).
- —CBN regulations applicable to fintech and payment services.
Any disputes relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of the Federal Republic of Nigeria.
Contact Us
If you have questions about this Privacy Policy, want to exercise your data rights, or need to report a privacy concern, please reach out:
Frequently Asked Questions
Quick answers to the most common questions about your privacy on Acefre.
Questions or Data Requests?
Our privacy team is here to help. Contact us for data access, correction, deletion requests, or any privacy concern.
Also see our Terms of Use and Cookie Preferences.