Legal
Privacy Policy
Last updated: 1 January 2025
This Privacy Policy explains how Softnergy Limited ("IgboCrush", "we", "us", or "our") collects, uses, stores, and shares your personal data when you use the IgboCrush mobile application and website.
1. Who we are and how to contact us
IgboCrush is operated by Softnergy Limited, a company registered in Scotland under company number SC619146.
Colliers Row
Wallyford
EH21 8GX
Scotland, United Kingdom
Softnergy Limited is the data controller responsible for your personal data under the UK GDPR and, where applicable, the EU GDPR.
Contact our data protection team at privacy@igbocrush.com. We aim to respond within 30 days.
2. What personal data we collect
We collect different categories of personal data depending on how you interact with IgboCrush.
| Category | Data collected | Purpose |
|---|---|---|
| Account data | Full name, email address, date of birth, gender, password (hashed) | To create and manage your account |
| Profile data | Profile photos, bio, Igbo state, occupation, relationship goals, hobbies, languages, religion, ethnicity, marital status, qualification | To show your profile to potential matches |
| Location data | Country, state, city | To surface local matches and apply location filters |
| Usage data | Swipe activity, likes, dislikes, messages sent, features used, profile views, login timestamps | To operate the matching service and improve the app |
| Device data | Device type, operating system, OS version, app version, IP address, push notification token | To send notifications and diagnose technical issues |
| Payment data | Subscription type, transaction ID, purchase date, expiry date | To manage premium subscriptions (card details handled by app stores) |
| Communications | Messages exchanged with other users, support tickets, feedback submissions | To facilitate in-app messaging and handle support requests |
| Verification data | Photo verification images, verification status | To verify user identity and maintain community trust |
Special category data
Some data we collect may constitute special category data under UK/EU GDPR, including information about your religion and ethnicity. We collect this solely to provide core app functionality and only with your explicit consent.
Children
IgboCrush is not intended for users under 18. If you believe a minor has registered, contact privacy@igbocrush.com.
3. How we use your data and our legal basis
Under UK/EU GDPR, we must have a lawful basis for processing your personal data.
| Purpose | Legal basis |
|---|---|
| Creating and managing your account | Performance of a contract |
| Showing your profile to potential matches | Performance of a contract |
| Facilitating in-app messaging | Performance of a contract |
| Processing premium subscription payments | Performance of a contract |
| Sending account and security notifications | Performance of a contract |
| Processing special category data (religion, ethnicity) | Explicit consent |
| Sending marketing emails and push notifications | Consent (you can withdraw at any time) |
| Preventing fraud, abuse, and safety violations | Legitimate interests |
| Improving the app using anonymised analytics | Legitimate interests |
| Complying with legal obligations | Legal obligation |
| Responding to support requests | Legitimate interests / contract |
4. Who we share your data with
We do not sell your personal data to third parties.
Service providers
RevenueCat — Subscription billing and purchase verification. revenuecat.com/privacy
OneSignal — Push notification delivery. onesignal.com/privacy-policy
Amazon Web Services (AWS S3) — Secure cloud storage for profile photos and media. aws.amazon.com/privacy
Cloudinary — Image processing, optimisation, and delivery. cloudinary.com/privacy
MongoDB Atlas — Secure cloud database hosting. mongodb.com/legal/privacy-policy
Hostinger — Email delivery via SMTP. hostinger.com/privacy-policy
Anthropic (Claude API) — Powers the Nnamdi AI dating coach feature. anthropic.com/privacy
Legal disclosure
We may disclose your data to law enforcement agencies, courts, or regulatory authorities where legally required or where necessary to protect user safety.
Business transfers
In the event of a merger or acquisition, your data may be transferred to the acquiring entity. We will notify you before your data becomes subject to a different privacy policy.
5. International data transfers
Where we transfer personal data outside the UK and EEA, we ensure appropriate safeguards are in place such as Standard Contractual Clauses approved by the UK ICO or equivalent mechanisms.
6. How long we keep your data
| Data type | Retention period |
|---|---|
| Account and profile data | For the lifetime of your account, deleted within 30 days of account deletion |
| Messages | For the lifetime of your account, deleted within 30 days of account deletion |
| Profile photos | Deleted from Cloudinary/AWS within 30 days of account deletion |
| Usage and swipe data | For the lifetime of your account |
| Payment records | Up to 7 years for tax and accounting purposes |
| Support tickets | Up to 2 years after resolution |
| Safety and abuse reports | Up to 5 years for legal and safety purposes |
| Server logs and IP addresses | Up to 90 days |
7. Your rights under UK and EU GDPR
To exercise any of these rights, contact privacy@igbocrush.com. We respond within 30 days.
Right of access — You can request a copy of the personal data we hold about you (a Subject Access Request).
Right to rectification — You can ask us to correct inaccurate or incomplete personal data.
Right to erasure — You can request deletion of your personal data where there is no legitimate reason for us to continue processing it.
Right to restriction — You can ask us to suspend processing of your personal data in certain circumstances.
Right to data portability — You can request a machine-readable copy of the data you provided to us.
Right to object — You can object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent — Where we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint — You have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk or your local supervisory authority in the EEA.
8. Security
We implement appropriate technical and organisational measures to protect your data.
Passwords are hashed using bcrypt — we never store plain-text passwords
All data in transit is encrypted using HTTPS/TLS
Profile photos are stored in private cloud buckets (AWS S3, Cloudinary)
Access to production systems is restricted to authorised personnel only
JWT tokens are used for authenticated API requests with expiry controls
IP-based fraud detection to identify suspicious login patterns
If you believe your account has been compromised, contact support@igbocrush.com immediately.
9. Cookies and tracking
Mobile app
The app does not use browser cookies. We use device identifiers and push notification tokens. You can manage notifications through your device settings.
Website
We use essential cookies (required to function) and analytics cookies (anonymised where possible). We do not use advertising or tracking cookies.
10. Automated decision-making and profiling
IgboCrush uses automated processes to calculate compatibility scores between users. This constitutes automated profiling under GDPR. No solely automated decisions are made that produce significant legal effects — all matching is advisory and you retain full control.
You may object to this profiling by contacting privacy@igbocrush.com.
11. The Nnamdi AI feature
The optional Nnamdi AI dating coach sends conversation content and selected profile data to Anthropic's Claude API. This is subject to Anthropic's privacy policy. We do not store AI conversation history beyond your current session. Use is entirely optional.
12. Account deletion
Delete your account at any time from Settings → Delete Account. Upon deletion:
Your profile will be immediately removed from the discovery feed
Your personal data will be deleted from our systems within 30 days
Your profile photos will be removed from Cloudinary and AWS S3 within 30 days
Your messages will be deleted from our database within 30 days
Payment records may be retained for up to 7 years for legal and accounting purposes
Safety-related records may be retained for up to 5 years
13. Changes to this policy
When we make material changes we will notify you by email and/or by a prominent notice in the app before the changes take effect.
14. Contact us and complaints
Email: privacy@igbocrush.com
Support: support@igbocrush.com
If unsatisfied with our response, you may lodge a complaint with the ICO:
Website: ico.org.uk
Phone: 0303 123 1113
Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, SK9 5AF