OjaCocoa

Privacy policy

Updated 2 October 2026

This policy explains what information the OjaCocoa app and website collect, why we collect it, who can see it, and what you can do about it.

OjaCocoa is operated by OjaCocoa Limited, a company registered in Nigeria (RC 9847615), of 136, Balogun Street, Ayobo, Alimosho, Lagos State, Nigeria ("we", "us"). We are responsible for your personal data under the Nigeria Data Protection Act 2023.

1. What we collect

  • Account details: your full name, phone number, whether you are a farmer or a buyer, and an email address if you choose to give one. Your password is held by our sign-in provider in a form we cannot read.
  • Location: when you sign up or create a listing, the app asks for your device's location. We store your coordinates and the region they fall in. Section 3 explains who sees what.
  • Listings: quantity, price, grade, description, region and the photos you upload.
  • Offers: offers you make or receive, the prices and quantities in them, and whether they were accepted.
  • Messages: the text, photos, voice notes, price quotes and locations you send in chat.
  • Ratings and reviews you give and receive.
  • A profile photo, if you add one.
  • A notification token for your phone, so we can send you notifications.
  • Safety records: when a phone number is shared through the app we record who asked for it, whose number it was and when. We also record actions taken by our support staff, such as resetting a password.
  • Usage records: when a listing is viewed or a chat is started from a listing, we record that it happened, so we can count views and see how long listings take to sell.
  • Deletion feedback: if you delete your account, the reason you give.

2. How we use it

We use your information to:

  • create and protect your account, including confirming your phone number;
  • show your listings and profile to other users, and help farmers and buyers find each other nearby;
  • deliver offers, messages and notifications;
  • calculate ratings;
  • prevent fraud, abuse and the bulk collection of users' details, and investigate reports;
  • understand how the marketplace is working, such as how many people view a listing and how long it takes to get an offer, so we can improve it;
  • meet our legal obligations.

We process your data because it is needed to provide the service you signed up for, because we have a legitimate interest in keeping the marketplace safe and improving it, because the law requires it, or because you gave consent. Location and notifications rely on permissions you grant on your phone, and you can turn them off in your phone's settings at any time.

We do not sell your personal data. We do not send you marketing text messages.

3. What other users can see

Other signed-in users can see your name, whether you are a farmer or a buyer, your region, a location rounded to about one kilometre, your rating and number of reviews, whether your phone number is verified, your profile photo and your listings.

They cannot see your phone number in any list, listing or profile. Your number is shared with one person at a time, when they tap Call. Someone you have an offer or conversation with can always get it. Anyone else is limited to a small number of new lookups each day, and every lookup is recorded.

Your exact location is shared only if you choose to send it in a chat. Messages can be seen only by the two people in the conversation.

4. Text messages

We send SMS only to deliver one-time verification codes: when you confirm your phone number, and when you reset your password. Codes expire after five minutes. We send these through Termii, a Nigerian messaging company, which receives your phone number and the code. We do not send promotional or marketing text messages.

5. Companies that help us run the service

These companies process data for us, on our instructions, only to provide their service:

  • Google Firebase (Google Cloud): sign-in, database and server functions.
  • Cloudinary: storing and delivering photos and voice notes.
  • Termii: sending SMS verification codes.
  • Expo: delivering push notifications to your phone.

We may also share information when the law requires it, or when it is necessary to protect users from fraud or harm.

6. Data stored outside Nigeria

Our database and servers are run by Google Cloud in Europe and the United States, and Cloudinary and Expo operate outside Nigeria. When your data is transferred abroad we rely on providers that give the level of protection the Nigeria Data Protection Act 2023 requires.

7. How long we keep it

  • Account information is kept while your account is open.
  • When your account deletion is complete, we delete your account and all associated personal data, including your sign-in details, profile, contact and location information, listings, uploaded media, offers, messages, ratings and reviews, notification tokens, and account-linked activity and safety records.
  • Support records and deletion feedback associated with your account are also removed. No account-associated personal data is retained after deletion is complete.

8. Your rights

Under the Nigeria Data Protection Act 2023 you can ask us to:

  • give you a copy of the personal data we hold about you;
  • correct data that is wrong;
  • delete your data;
  • restrict or stop certain uses of your data;
  • send your data to you in a format you can take elsewhere;
  • stop processing that relies on your consent.

You can change most of your details in the app under Profile, Edit profile, and delete your account under Profile, Delete account. For anything else, email ojacocoaapp@gmail.com. We will respond within the time the law requires.

You can also request account and data deletion through our website, without signing in or reinstalling the app. We verify account ownership before processing email requests and confirm when deletion is complete.

If you are unhappy with how we handle your data, you can complain to the Nigeria Data Protection Commission.

9. Security

Phone numbers and exact locations are held in a private record that only you and our authorised staff can open. Everything else is protected by access rules that decide exactly who can read or change each record. Data travels between your phone and our servers encrypted. No system is completely secure; if you find a problem, please tell us at ojacocoaapp@gmail.com.

10. Age limit

OjaCocoa is for people aged 18 and over. We do not knowingly collect data from anyone younger.

11. Changes to this policy

If we change this policy we will update this page and the date at the top. If a change affects how your data is used in a significant way, we will tell you in the app.

12. Contact us

OjaCocoa Limited (RC 9847615)
136, Balogun Street, Ayobo, Alimosho, Lagos State, Nigeria
ojacocoaapp@gmail.com