Privacy Policy

Last Updated: 28 May, 2026

Introduction

Welcome to Amaka Jobs ("Amaka Jobs," "we," "us," or "our"). We are committed to protecting the privacy and personal data of every user ("you," "your," or "User") who accesses our mobile application, website, and related services (collectively, the "Platform"). This Privacy Policy explains how we collect, use, store, share, disclose, and protect your personal data when you use the Platform. It is prepared in accordance with the Nigeria Data Protection Act, 2023 ("NDPA"), the Nigeria Data Protection Regulation, 2019 ("NDPR"), the implementation framework issued by the Nigeria Data Protection Commission ("NDPC"), and all other applicable Nigerian laws and regulations. By downloading, registering on, accessing, or using the Platform, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please discontinue use of the Platform.

Who We Are (Data Controller)

Amaka Jobs is the Data Controller responsible for your personal data under this Policy.

Scope of This Policy

This Privacy Policy applies to all users of the Platform, including:

  • Job seekers who create profiles, upload CVs, and apply for positions
  • Employers, recruiters, and organisations posting vacancies or sourcing candidates
  • Visitors browsing the Platform without registering an account

Note

  • The Policy covers personal data collected through the Amaka Jobs mobile application, our website, in-app communications, customer support channels, and any related digital services.

Information We Collect

We collect personal data that you provide directly, data we collect automatically, and data we receive from third parties.

Information You Provide Directly

  • Account Registration Data: full name, email address, phone number, password, date of birth, gender, and profile picture.
  • Profile Data: educational background, work experience, professional skills, certifications, languages spoken, career preferences, expected salary, and availability.
  • Resume/CV Uploads: documents you upload, including CVs, cover letters, portfolios, references, and supporting credentials. These documents may contain additional personal data such as home address, next of kin, marital status, nationality, and prior employer information.
  • Employer Data: for recruiters and businesses, this includes company name, RC number, industry, company size, contact persons, billing details, and job posting content.
  • Payment Information: subscription details, billing address, transaction history, and limited payment card information. Full card details are processed by our licensed payment partners and are never stored on our servers.
  • In-App Messages: the content of messages exchanged between job seekers, employers, recruiters, and our support team through the Platform.
  • Customer Support Communications: information you provide when contacting us by email, phone, chat, or social media, including any attachments.
  • Survey and Feedback Responses: information you voluntarily share when participating in surveys, polls, or product feedback.

Information Collected Automatically

  • Device Information: device model, operating system, unique device identifiers, mobile network information, browser type, and language settings.
  • Usage Data: pages viewed, features used, search queries, jobs viewed or saved, applications submitted, click patterns, session duration, and crash reports.
  • Location Data: with your permission, we collect precise or approximate location data via GPS, Wi-Fi, IP address, or mobile network triangulation to show nearby jobs, recommend relevant opportunities, and verify location for certain employers. You may disable location access at any time through your device settings.
  • Cookies and Similar Technologies: cookies, web beacons, SDKs, and pixel tags that help us authenticate users, remember preferences, analyse traffic, and improve the Platform.
  • Log Data: IP address, access times, referring URLs, and error logs.
  • Push Notification Tokens: identifiers used to deliver push notifications to your device for job alerts, message updates, application status changes, and Platform announcements.

Information From Third Parties

  • Social and Third-Party Logins: if you choose to register or sign in using Google or LinkedIn, we receive basic profile information from those providers, including your name, email address, profile picture, and (for LinkedIn) work history and connections, subject to the permissions you grant.
  • Background and Verification Checks: where you consent or where required by an employer, we may receive results of identity verification, employment history, or qualification checks from licensed verification partners.
  • Payment Processors: confirmation of successful or failed transactions, fraud risk scores, and chargeback notifications from licensed Nigerian payment service providers.
  • Public Sources and Referrals: information voluntarily made public by you or shared by referrers, partners, and affiliates.

How We Use Your Information

We process your personal data only for lawful, specific, and clearly stated purposes, including:

  • Creating and managing your Amaka Jobs account
  • Matching job seekers with relevant vacancies based on profile data, preferences, and location
  • Enabling employers and recruiters to search candidate databases, receive applications, and contact suitable candidates
  • Facilitating in-app messaging between users, with appropriate moderation to detect fraud, harassment, or abuse
  • Processing payments, subscriptions, refunds, and managing billing records
  • Sending transactional communications, such as application confirmations, password resets, payment receipts, and security alerts
  • Delivering push notifications for job alerts, new messages, recommended jobs, application updates, and important Platform changes (you may turn these off in your device settings)
  • Personalising your experience, including tailored job recommendations, learning content, and career insights
  • Conducting analytics, research, and product development to improve the Platform
  • Preventing fraud, securing accounts, investigating suspicious activity, and enforcing our Terms of Service
  • Complying with legal, regulatory, tax, and law enforcement obligations in Nigeria
  • Sending marketing and promotional communications, where you have given consent. You may withdraw consent at any time

Lawful Basis for Processing

In line with Section 25 of the NDPA and Regulation 2.2 of the NDPR, we process your personal data only when at least one of the following lawful bases applies:

  • Consent: where you have given clear, informed, and specific consent (for example, marketing emails or precise location tracking)
  • Contract: where processing is necessary to deliver the services you have requested, such as creating an account or processing a subscription
  • Legal Obligation: where we must process data to comply with Nigerian law, court orders, or regulatory directives
  • Legitimate Interest: where processing is necessary for our legitimate business interests (such as fraud prevention, network security, and Platform improvement), provided your rights and freedoms do not override those interests
  • Vital Interest: where processing is necessary to protect your life or that of another individual
  • Public Interest: where processing is carried out in the public interest or under official authority

How We Share Your Information

We do not sell your personal data. We share personal data only as described below and only to the extent necessary.

With Employers and Recruiters

  • When you apply for a job or make your profile searchable, your profile information, CV, cover letter, and application messages are shared with the relevant employer or recruiter. You can control profile visibility through your privacy settings.

With Service Providers

  • We share data with vetted third-party service providers acting on our instructions and bound by confidentiality and data protection obligations, including:
  • Cloud hosting and storage providers
  • Payment processors and financial institutions licensed by the Central Bank of Nigeria
  • Identity verification and background-check providers
  • Analytics, crash reporting, and product-improvement tools
  • Customer support, email delivery, and SMS gateway providers
  • Push notification delivery services

With Authentication Providers

  • If you sign in with Google or LinkedIn, limited information is exchanged with those providers as needed to authenticate you. Their handling of your data is governed by their own privacy policies.

With Legal and Regulatory Authorities

  • We may disclose personal data to law enforcement agencies, courts, regulators, or other authorised bodies where required by Nigerian law or where necessary to protect our rights, your safety, or the safety of others.

In Business Transactions

  • If Amaka Jobs is involved in a merger, acquisition, restructuring, financing, or sale of assets, personal data may be transferred as part of that transaction. We will notify you of any such change and your options where required by law.

With Your Consent

  • We may share personal data in other circumstances where you have given clear, specific consent.

International Data Transfers

Some of our service providers may store or process your personal data outside Nigeria. Where this occurs, we ensure that such transfers comply with Sections 41 to 43 of the NDPA, by relying on one or more of the following safeguards:

  • Transfer to a jurisdiction recognised by the NDPC as providing an adequate level of protection
  • Standard contractual clauses or binding corporate rules approved by the NDPC
  • Your explicit consent after being informed of the possible risks
  • Other lawful grounds permitted under the NDPA

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy or as required by law.

  • Active account data is retained while your account is active
  • Inactive accounts may be deleted or anonymised after 24 months of inactivity, following prior notice
  • Application records and messaging history are retained for a reasonable period for dispute resolution and audit purposes
  • Payment and tax records are retained for a minimum of six (6) years in line with Nigerian tax and financial reporting laws
  • Records required for ongoing legal proceedings or regulatory investigations are retained until those matters are concluded

Note

  • Once retention periods expire, we securely delete, anonymise, or aggregate the data so that it can no longer identify you.

Your Rights as a Data Subject

Under the NDPA, NDPR, and related guidelines, you have the following rights regarding your personal data:

  • Right to Information: to be informed about how your data is collected and used
  • Right of Access: to request a copy of the personal data we hold about you
  • Right to Rectification: to correct inaccurate or incomplete data
  • Right to Erasure (Deletion): to request deletion of your data where there is no overriding lawful reason to retain it
  • Right to Restrict Processing: to limit how we process your data in specific situations
  • Right to Data Portability: to receive your data in a structured, commonly used, and machine-readable format
  • Right to Object: to object to processing based on legitimate interests or for direct marketing
  • Right to Withdraw Consent: to withdraw any consent previously given, without affecting the lawfulness of prior processing
  • Right Not to Be Subject to Automated Decisions: to request human review of significant decisions made solely by automated processing
  • Right to Lodge a Complaint: to file a complaint with the Nigeria Data Protection Commission (NDPC) if you believe your rights have been violated

Note

  • To exercise any of these rights, contact our Data Protection Officer using the details in the Contact Us section. We will respond within the timeframe prescribed by the NDPA (generally within one month).

Data Security

We implement appropriate technical, organisational, and administrative measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These include:

  • Encryption of data in transit using TLS/SSL protocols
  • Encryption of sensitive data at rest
  • Secure password hashing and multi-factor authentication options
  • Role-based access controls and the principle of least privilege
  • Regular vulnerability assessments and penetration testing
  • Secure software development practices
  • Staff training on data protection and confidentiality
  • Incident response and breach notification procedures

Note

  • Despite these measures, no system can guarantee absolute security. You also play a role in protecting your data by keeping your password confidential and notifying us immediately of any suspected unauthorised access.

Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will:

  • Notify the Nigeria Data Protection Commission within 72 hours of becoming aware of the breach, as required by the NDPA
  • Notify affected users without undue delay, describing the nature of the breach, the data involved, possible consequences, and the steps being taken
  • Provide guidance on actions you can take to protect yourself

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate, secure, and improve the Platform. Categories include:

  • Strictly Necessary: required for core functionality such as authentication and security
  • Performance and Analytics: help us understand how the Platform is used and identify areas to improve
  • Functional: remember your preferences and settings
  • Marketing: deliver relevant advertisements and measure their effectiveness, where you consent

Note

  • You can manage your cookie preferences through your browser settings or in-app controls. Disabling certain cookies may affect the functionality of the Platform.

Children's Privacy

The Platform is intended for users who are at least eighteen (18) years old, the age of majority in Nigeria for employment-related services. We do not knowingly collect personal data from children. If we learn that we have collected personal data from a person under 18 without verified parental consent, we will delete that data promptly. Parents or guardians who believe their child has provided personal data should contact us immediately.

Third-Party Links and Services

The Platform may contain links to third-party websites, employer career pages, or external services that are not operated by us. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before sharing personal data with them.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or business operations. The updated version will be posted on the Platform with a revised "Last Updated" date. Where the changes are material, we will notify you through the Platform, by email, or by other reasonable means. Continued use of the Platform after the changes take effect constitutes your acceptance of the revised Policy.

Contact Us and Complaints

If you have questions, concerns, or complaints about this Privacy Policy or how we handle your personal data, please contact us:

Regulator

  • If you are not satisfied with our response, you have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).
  • Website: www.ndpc.gov.ng
  • Email: info@ndpc.gov.ng