Privacy Policy
Last updated October 2026
This policy explains what information WhoHas (“we”), a product of SoftPath Tech, collects when you use the WhoHas app and website, how we use it, and the choices you have.
Information we collect
- Account details: your name, email address, phone number and profile photo.
- Identity verification: when you verify, your BVN or NIN is checked with our verification partner. We store a secure fingerprint and the last four digits, never the full number in plain text.
- Requests, offers, deals, reviews and messages you create, including photos and voice notes you send.
- Location you choose for requests and services (state, LGA and area).
- Payment and payout details needed to process Protected Payments and withdrawals, such as bank account details.
- Device information and notification tokens, used to keep your account secure and send you notifications.
How we use it
- To run the marketplace: showing your requests to people who can help, delivering offers, chats and calls.
- To hold and release Protected Payments, process refunds and pay providers.
- To keep WhoHas safe: verifying identities, reviewing reports and disputes, and detecting fraud.
- To send you service messages and, if you allow it, product updates and offers.
Sharing
We share information with the people you deal with on WhoHas (for example your name, rating and messages), and with service providers who help us operate, such as payment, identity verification, hosting and notification providers. We don't sell your personal information. Your phone number is not shown to other users unless you choose to share it.
Your choices
- Update your profile and notification preferences in the app.
- Request a copy of your data or delete your account from Settings in the app.
- Contact us at hello@whohasapp.com with any privacy question.
Retention and security
We keep information for as long as your account is active and as needed to meet legal, tax and dispute obligations. Records of payments and deals may be kept after account deletion where the law requires. We use encryption and access controls to protect your data.
