Privacy policy.

1Who is responsible

MEMBERS.IO LIMITED operates members.io. This privacy policy covers Members.io (the customer and membership app), MDI - Business (also called Members.io Business), MDI - Driver and MDI - Marketing. It applies to our Android and iOS apps, the Members.io Business desktop app for macOS and Windows, and our websites and related account services. The information we process depends on the app and features you use. Our address is Plot 359, Flat 1, Cadastral Zone B02, Durumi, Abuja. Contact support@membersdotio.com about this notice or your personal data.

2Information we use

We use account information such as your name, email and optional phone number; the businesses you join; and the bookings, check-ins, points, orders and payment references associated with your activity. A dispute record can also include your description, messages, decision history and evidence files you choose to upload. Business accounts also provide business, team and onboarding information. A business may choose to show its Flutterwave-verified contact number to signed-in members after its payout account is connected. Payment providers handle payment credentials; do not send us full card details by email or chat.

Members.io community features process the posts and replies you publish, reports you submit and authors you block. Posts are visible to the relevant community; moderation and blocking records help us handle abuse and your preferences.

MDI - Business processes business profiles, team access, customer records, sales, bookings, orders and website content entered by you or your team. Business verification and payouts can require identity, registration and bank account information, which is processed with the relevant verification and payment providers.

MDI - Marketing processes your account and access-code information, business invitations and referrals, onboarding progress, follow-up and feedback records, rewards, commissions and payout requests. Bank details and account verification results are used to verify and pay the nominated payout account. When you choose to verify a storefront visit, the app requests camera and precise location access and submits a storefront photo, location, capture time, GPS accuracy and distance from the business as private verification evidence. These records are associated with the assigned marketer and reviewed to verify the business and programme eligibility. You can decline device permissions; the visit verification feature will then be unavailable.

MDI - Driver processes assigned deliveries, recipient contact and address details, delivery status and history, and delivery proof you choose to submit, such as a recipient name or photo. These records support delivery fulfilment and the linked business’s delivery management.

When you choose location-based discovery, your location is used to find nearby businesses. MDI - Driver collects location while you have active deliveries to share delivery progress with the linked business. With your permission, this includes background location when the app is minimized or the screen is locked. Tracking stops when your active delivery queue is empty. You can revoke location permission in device settings; location-dependent tracking will then be unavailable. Device, notification and technical information helps deliver requested notifications and protect accounts. Support messages include the information you choose to send us.

3Why we use it

We process information to provide the account, booking, membership, business-management, delivery and marketer onboarding and payout services you request (performance of a contract), to meet applicable legal obligations, and for legitimate interests such as account security and fraud prevention, balanced against your rights. Optional communications and device permissions depend on your choices and, where required, consent. You can withdraw consent without affecting earlier lawful processing.

4Businesses and service providers

A participating business receives information needed to manage your relationship with it, including your identity, visits, bookings, transactions and evidence shared in a dispute with that business. Private administrator notes and evidence restricted to you are not shown to the business. Your other memberships are not part of that business’s view. Businesses are independently responsible for their own services and use of customer information.

We use providers for hosting, databases, email, payment processing and support. These can include Supabase, our configured payment and messaging providers, and Zoho when you open support chat. Some providers process information outside Nigeria. You can contact us for information about recipients, processing locations and the safeguards applicable to a transfer.

5Retention and deletion

Account information is used while your account is active. You can request deletion through account settings or by email. For Members.io, MDI - Business, MDI - Driver and MDI - Marketing, follow the account deletion instructions. Eligible account data, including backup copies, is deleted within 30 days after identity verification. Deletion does not cancel a separate paid booking or membership with a business. Transaction, security and dispute records may need to be retained where a legal obligation or unresolved matter applies; participating businesses maintain their own records.

Ask us which retention period applies to your records, including backups and any exception to deletion. We will explain what can be removed and what must be retained when handling your request.

6Your rights in Nigeria

Under the Nigeria Data Protection Act 2023, you have rights including access, correction and, in applicable circumstances, deletion, restriction, objection and data portability. You may withdraw consent where processing relies on it and raise concerns about automated decisions. We may need to verify your identity before responding.

Use account settings for available controls or email a privacy request. You do not need to use support chat to exercise your rights.

7Cookies and support chat

Essential cookies and local storage support sign-in, security and preferences such as appearance. These are necessary for requested site functions and cannot be switched off through our cookie settings.

With your permission, we use Google Analytics 4 cookies to understand visits and improve the product, and Meta Pixel cookies to measure and improve advertising campaigns. Analytics and advertising are off by default and their scripts do not load until you choose the relevant category. You can accept, reject or change either category at any time using “Cookie settings”. Your choice is stored for up to six months.

On the website, support chat is optional: Zoho loads only after you choose “Open support chat” on the Contact page. In our mobile apps, the Zoho support SDK initializes when the app starts and may receive device identifiers and usage information; conversations and attachments are sent when you use support chat. Optional voice navigation uses your device’s speech-recognition service, which may process audio remotely depending on your device settings. Opening chat connects to Zoho, which may use cookies or device storage and receive technical information and the messages you send. You can email us instead. Your browser controls can also remove or block stored information, although blocking sign-in cookies may prevent account features from working.

8Contact and complaints

Email support@membersdotio.com with “Privacy request” in the subject. Do not include passwords, one-time login codes or full card numbers.

You have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC), including if you are dissatisfied with our response.