Privacy Policy
Last updated: 29 June 2026
Amrili Digital Services Limited · Federal Republic of Nigeria
01Who we are
Amril is a multi-service app operated by Amrili Digital Services Limited, a company registered in the Federal Republic of Nigeria (“Amril”, “we”, “us”, “our”). We are the data controller responsible for your personal information under the Nigeria Data Protection Act 2023 (the “NDPA”) and other applicable laws.
This policy covers the Amril mobile apps, the Amril website at amril.app, and related services (together, the “Services”). It applies whether you use Amril inside Nigeria or from abroad.
02Information we collect
We collect the following categories of information.
Information you give us
- Account details — your name, email address, phone number, and a password. Sign-in and account security are handled through Google Firebase Authentication.
- Profile details — your username (handle), display name, profile photo, bio, and home country, plus any other details you choose to add.
- Identity verification (KYC) — if you choose to verify your identity to sell, cash out, or access higher limits, you provide your Bank Verification Number (BVN) or National Identification Number (NIN). These are checked through our verification partner. This is sensitive information and we treat it with extra care (see Sharing).
- Content you create — posts, comments, images, surveys, reviews, store and product listings, and messages you send.
- Transactions — orders you place, items you buy or sell, wallet top-ups and withdrawals, bill payments, and coin purchases, gifts, and conversions.
- Support communications — messages you send us and information you provide when you contact support or report a problem.
Information we collect automatically
- Device and technical data — device model, operating system, app version, language, IP address, and crash and performance diagnostics.
- Usage data — how you interact with the Services, such as screens viewed, features used, and content you engage with, used to operate and improve the app.
- Identifiers — a push-notification token (via Firebase Cloud Messaging) and similar identifiers needed to deliver notifications and keep your session secure.
Information you choose to share
- Delivery details — when you order for delivery, the state, LGA, area, and street you provide so a vendor can reach you. We do not continuously track your GPS location.
- Contacts (optional) — if you turn on contact sync to find people you know on Amril, we process the phone numbers from your address book to match existing Amril users. This is optional, you control it from your device, and you can decline it.
03How we use your information
We use your information to:
- create and secure your account, and sign you in;
- operate the Services — show your feed, run the marketplace and dine-in ordering, deliver messages and notifications, and process orders and payments;
- verify identity where you ask us to, and meet legal, regulatory, anti-fraud, and anti-money-laundering obligations;
- process wallet top-ups, withdrawals, bill payments, coin purchases and conversions, and keep accurate transaction records;
- help people find and connect with each other (for example, contact-based discovery you enable);
- provide support, investigate issues, and respond to your requests;
- keep the Services safe — detect, prevent, and address fraud, abuse, and security incidents;
- understand how the Services are used so we can fix problems and improve them;
- send you service messages (for example, order updates and security alerts), and, where allowed, optional updates you can opt out of.
04Our legal bases
Under the NDPA, we rely on the following legal bases to process your information:
- Performance of a contract — to provide the Services you ask for, such as completing an order or a withdrawal.
- Consent — for optional features such as contact sync and optional marketing. You can withdraw consent at any time.
- Legal obligation — to comply with financial, tax, KYC/AML, and other laws.
- Legitimate interests — to keep the Services secure, prevent fraud and abuse, and improve the product, balanced against your rights.
05Payments, wallet, and coins
Amril is not a bank and does not itself hold customer funds as a deposit-taking institution. Wallet top-ups, transfers, withdrawals, and card or bank payments are processed by licensed payment partners. We pass the information needed to complete a payment (such as amount and reference details) to the relevant partner, and we receive confirmation of the result.
Coins are a digital feature inside the app. Coins you buy are used to send gifts and to promote content; they have no monetary value and are not redeemable for cash. Where the law and our policies allow eligible users to convert certain coins to wallet value, that conversion and any withdrawal are subject to identity verification and limits. Coin purchases made through the Apple App Store or Google Play are processed by Apple or Google under their terms.
We keep records of your transactions for as long as the law requires (for example, for tax and anti-money-laundering purposes).
06Messaging and content
Amril includes messaging so you can chat with other people, in one-to-one chats and groups. You should understand how it works:
- Messages are delivered through Google Firebase (Cloud Firestore). Messages are protected in transit and at rest by Google’s infrastructure, but they are not end-to-end encrypted. Do not use Amril messaging to share information you need to keep secret from us or our processors.
- To keep costs and storage low, messages are removed from our live message store after a limited period (currently about five days) by an automatic deletion process. A copy of your recent chats is also stored on your own device so your history loads instantly and works offline; you can clear that by signing out or clearing the app’s data.
- Public content you post (such as feed posts, reviews, and public profile details) can be seen by others and may appear on the web. Use your privacy settings to control who can see your posts.
07When we share information
We share personal information only as described here. We do not sell your personal information.
Service providers (processors)
We use trusted providers to run Amril. They may only process your information on our instructions and for the purposes below:
| Provider | Purpose |
|---|---|
| Google Firebase / Google Cloud | Sign-in, app security, messaging transport, push notifications |
| Cloudflare | Website hosting, content delivery, and media storage |
| Render | Backend application hosting and database |
| Paystack | Wallet accounts, card/bank payments, and withdrawals |
| OPay | Checkout and payment processing |
| VTPass | Airtime, data, electricity, cable, and exam-pin bill payments |
| Dojah | Identity verification (BVN/NIN) where you choose to verify |
| Apple, Google | In-app coin purchases on iOS and Android |
Other recipients
- Vendors and delivery — when you place an order, we share the details a vendor needs to fulfil it (such as your name, the items, and your delivery address).
- Other users — information you choose to make public, and the details needed to interact (for example, your handle when you message someone or gift a post).
- Legal and safety — where we reasonably believe disclosure is required by law, regulation, or legal process, or is necessary to protect the rights, safety, or property of Amril, our users, or the public.
- Business transfers — if Amril is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, subject to this policy.
08International users and data transfers
Amril is built in Nigeria and your information is primarily processed in Nigeria. Some of our providers (such as Google, Cloudflare, Apple, and Google Play) operate globally, so your information may be processed in other countries. Where information is transferred outside Nigeria, we take steps required by the NDPA to ensure it remains protected.
If you use Amril from outside Nigeria (for example, as part of the diaspora), you understand and agree that your information is processed in Nigeria and by the providers listed above.
09How long we keep your information
We keep personal information for as long as your account is active and as needed to provide the Services. We keep some information for longer where the law requires it (for example, transaction and tax records) or where we need it to resolve disputes, prevent fraud, or enforce our agreements. Messages in our live store are deleted automatically after a short period as described above. When information is no longer needed, we delete or anonymise it.
10How we protect your information
We use technical and organisational measures to protect your information, including encryption in transit, access controls, app-integrity checks, and secure infrastructure from established providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your password and device secure, and tell us promptly if you think your account has been compromised.
11Your rights
Subject to the NDPA, you have the right to:
- access the personal information we hold about you;
- correct information that is wrong or out of date;
- delete your information, where we are not required to keep it;
- restrict or object to certain processing;
- port certain information to another service;
- withdraw consent at any time for processing based on consent (this does not affect processing already carried out);
- complain to the Nigeria Data Protection Commission (NDPC) if you believe your rights have been breached.
You can edit much of your information directly in the app (Settings → Edit Profile and Privacy Settings). For other requests, contact us using the details below. We may need to verify your identity before acting on a request.
12Children
Amril is intended for people aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with information, contact us and we will take appropriate steps to remove it.
13Third-party links and services
The Services may link to or rely on third-party sites and services (for example, payment partners or the app stores). Their privacy practices are governed by their own policies, not this one. We encourage you to read them.
14Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date at the top and, where appropriate, notify you in the app. Your continued use of the Services after an update means you accept the revised policy.
15Contact us
Privacy questions
For privacy questions, requests, or to reach our data protection contact:
Amrili Digital Services Limited
Email: [email protected]
General support: [email protected]
You also have the right to lodge a complaint with the Nigeria Data Protection Commission (NDPC).