Privacy Policy

This Privacy Policy explains how ELLA ("we", "us") collects, uses, and protects your information when you use our service. We are committed to protecting your privacy in accordance with the Nigeria Data Protection Act 2023 (NDPA).

1. Information We Collect

Information you provide

• Business information: Business name, business ID, phone number, business email
• Account credentials: Email and password (encrypted)
• Business data: Inventory items, sales records, expenses, product images, and other data you enter into ELLA

Information collected automatically

• Usage data: Which features you use, when you log in, how often you use the app
• Technical data: Device type, browser, IP address, general location (country/city level)

2. How We Use Your Information

We use your information to:

• Provide and operate the ELLA service
• Maintain your account and business data
• Improve and develop new features
• Communicate important updates or security alerts
• Comply with legal obligations

We do not sell your personal or business data to any third party.

3. How We Store Your Data

Your data is stored securely on Google Firebase (Google Cloud Platform). Google maintains industry-standard security certifications including ISO 27001, SOC 2, and compliance with the NDPA's cross-border transfer requirements.

We use encryption in transit (HTTPS/TLS) and at rest. Access to production data is restricted to authorized personnel only.

4. Who We Share Data With

We share your data only with:

• Google Firebase: As our infrastructure and database provider (data processor)
• Law enforcement or regulators: When legally required

We do not share your data with advertisers, marketers, or any other third parties.

5. Your Rights Under NDPA

You have the right to:

• Access: Request a copy of all data we hold about you
• Correct: Request corrections to inaccurate data
• Delete: Request deletion of your account and data
• Port: Receive your data in a portable format (CSV export available in the app)
• Withdraw consent: Revoke consent for optional data processing at any time
• Object: Object to certain types of processing

To exercise these rights, contact us at privacy@ella.app.

6. Data Retention

We keep your data while your account is active. If you delete your account:

• Your business and personal data are deleted within 30 days
• Anonymized usage statistics may be retained for analytics
• We may retain limited records where required by law

7. Cookies and Local Storage

ELLA uses browser local storage to remember your preferences (like dark mode) and keep you logged in. We do not use third-party tracking cookies.

8. Children's Privacy

ELLA is not intended for users under 18. We do not knowingly collect data from minors.

9. Changes to This Policy

We may update this Privacy Policy occasionally. Significant changes will be communicated via email or in-app notice.

10. Contact Us

For privacy questions or to exercise your rights:

ELLA Retail Management
Email: privacy@ella.app

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).