← All policies

Your data

Privacy policy

Last updated 17 September 2026

What we collect, why we hold it, how long we keep it and the choices you have.

This policy explains how CribCheck handles personal information, in line with the Nigeria Data Protection Act. It covers accounts, walkthroughs, photographs, bookings and payments.

What we collect

  • Account details: name, email address, phone number where you give it, and your sign-in method.
  • Walkthrough content: property addresses you enter, your answers, measurements, notes and photographs.
  • Booking details: property location, access contact, preferred date and arrival window.
  • Payment records: amount, reference, status and receipt. Card details are handled by our payment provider and never stored by CribCheck.
  • Technical records: sign-in times, device and browser information, and error logs used to keep the service working.

Why we hold it

  • To create your CribReports and let you resume a walkthrough on another device.
  • To carry out and support inspections you have paid for.
  • To review submissions before anything is published.
  • To send service messages such as booking confirmations, reminders and moderation decisions.
  • To detect abuse, fraud and misuse of the platform.

Who can see your reports

Your walkthroughs and CribReports are private by default. Only you can see them, plus CribCheck reviewers where you submit for publication or where you have booked an inspection. Photographs are stored privately and are never included in a public record unless the submission was approved for publication.

Sharing

  • Our hosting, database, email and payment providers, acting on our instructions.
  • The CribCheck professional assigned to your inspection, limited to the details needed to attend.
  • Law enforcement or regulators where we are legally required to respond.

How long we keep it

  • Account and consent records: while your account is open, then up to 12 months.
  • CribReports and photographs: while your account is open, or until you delete them.
  • Payment and receipt records: 6 years, as financial records normally must be kept.
  • Published property records: kept while published, then archived in anonymised form.

Your choices

  • Ask for a copy of your personal data and your reports.
  • Correct information that is wrong.
  • Delete a report, withdraw a submission, or close your account entirely.
  • Withdraw publication consent for anything not yet published, and ask us to unpublish a record you submitted.

Requests can be made from your account settings, or by contacting CribCheck support through the app. We respond within 30 days.

Other policies

You're offline — we'll sync your check when you're back online.