Last updated: 15 July 2025

Privacy Policy

This Privacy Policy explains how Blow ("we", "us", or "our") collects, uses, stores, and shares personal data when you use the Blow platform at getblow.app and login.getblow.app. We handle personal data in line with the Nigeria Data Protection Act (NDPA) and the Nigeria Data Protection Regulation (NDPR).

1. What We Collect and Why

We only collect data that is necessary to operate the platform and fulfil our obligations to users.

DataWhy we collect it
Email addressAccount creation, login, and transactional notifications
Phone numberAccount verification and security
National Identification Number (NIN) and government-issued IDIdentity verification for Blowers and Inspectors, as required by our compliance obligations
Bank account detailsProcessing payouts via Paystack
Business registration / CAC documentsVerifying Business accounts on the platform
Social media handles and platform linksMatching Blowers to relevant Drops based on niche and audience
Basic usage data (pages visited, actions taken, device/browser info)Platform analytics, debugging, and improving the product

2. Google Sign-In Disclosure

Blow offers "Sign in with Google" as an authentication option. When you use this feature, Google provides us with your basic profile information (name and profile picture) and your email address solely for the purpose of identifying your account. We do not use this data for advertising, profiling, or any purpose beyond authenticating your session. We do not share Google account data with third parties.

3. Where Your Data Is Stored

Your account data and platform activity are stored on Supabase, our infrastructure provider. Identity documents (NIN, government ID, CAC documents) are stored in private, non-public storage buckets that are not accessible via public URLs. Access to these documents is restricted to authorised personnel only.

4. Who We Share Data With

We share personal data only where necessary:

We do not sell, rent, or trade your personal data to any third party.

5. Your Rights

Under the NDPA/NDPR, you have the right to:

To exercise any of these rights, email us at privacy@getblow.app. We will respond within 30 days.

6. Data Retention

We retain your data for as long as your account is active or as required to fulfil the purposes described in this policy. If you request deletion of your account, we will delete or anonymise your personal data within 30 days, except where we are required by law to retain it (for example, financial records related to payouts).

7. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Identity documents are stored in private, access-controlled storage. However, no system is completely secure, and we cannot guarantee absolute security.

8. Nigerian Data Protection

Blow is operated from Nigeria and primarily serves Nigerian users. We handle personal data in accordance with the Nigeria Data Protection Act (NDPA) 2023 and the Nigeria Data Protection Regulation (NDPR). If you have concerns about how we handle your data, you may contact the Nigeria Data Protection Commission (NDPC).

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the platform after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at privacy@getblow.app.