Privacy Policy
Last updated 2026-07-03
Cizrep (“we”, “us”) is a citizen-reporting platform for Nigeria. This policy explains what data we collect when you use the app, why we collect it, and what control you have over it.
What we collect
- Account data — name, email, and optional phone number when you register, or your name/email from Google if you sign in with Google.
- Reports you submit — the description, category, location (latitude/longitude and address), and any photo, video, or voice note you attach.
- Location — only when you grant permission, to attach to a report, show nearby alerts, or center the map on you. We do not track your location in the background.
- Device/usage data — IP address and a device identifier are used to rate-limit abuse (e.g. spamming report confirmations) and secure login attempts.
- Live broadcasts — if you start a live stream, the video is processed by Cloudflare Stream and a recording is kept as a permanent report once the broadcast ends.
Anonymous reporting
When you submit a report with “Report anonymously” turned on, your identity is hidden from everyone else using the app — other users and the public never see who filed it. Your account is still attached to the report internally, because we need that to handle abuse reports, moderate content, and respond to legitimate legal requests. Anonymity is a public-display setting, not a promise that the platform itself has no record of who reported something.
How we use your data
- To publish and distribute civic reports to other users in your area.
- To classify report category and severity using an AI provider (Groq or Gemini) — the report text is sent to that provider for classification.
- To screen report text for defamatory, doxxing, or inciting content before publishing.
- To send you push notifications and emails you've opted into (verification, password reset, location alerts).
- To compute aggregate, non-identifying statistics (state safety scores, trend charts).
Who we share data with
We don't sell your data. We do use third-party services to run the app:
- ImageKit — stores photos and videos you upload.
- Cloudflare Stream — processes live video broadcasts.
- Groq / Google Gemini — classify and moderate report text.
- Resend — sends transactional email (verification, password reset).
- Google — if you choose to sign in with Google.
- Analytics providers (Vercel Analytics, PostHog) — aggregate, non-identifying usage patterns to help us improve the app.
Published reports (including anonymous ones, without your name attached) are public by design — that's the point of a civic reporting platform. Report detail pages can be shared publicly via a link.
How long we keep data
Reports are kept indefinitely as part of the civic record unless removed by you, or taken down under our moderation policy. Live broadcast recordings are retained for a limited period after the stream ends and then deleted automatically. Failed login records and other rate-limiting data are kept only as long as needed to detect abuse.
Your controls
- You can delete your own reports and your account from the Profile page.
- You can flag a report as false or abusive; enough flags automatically hide it pending review.
- You can request a copy or deletion of your data by contacting us (see below).
Children
Cizrep is not directed at children under 13, and we don't knowingly collect data from them.
Contact
Questions about this policy, or requests to access/delete your data, can be sent to privacy@cizrep.com. See also our content takedown process.