1. Data we collect
- Account & profile: name, email, phone number, password (hashed), profile photo.
- Vehicle information: make, model, year, VIN/plate, service history, uploaded photos and videos.
- Location: approximate or precise location when you request roadside assistance or book a service (only with your permission).
- Payment metadata: the last few digits of your card, card brand, and transaction references. Full card details are handled directly by Paystack and never stored on our servers.
- Communications: support messages, contact form submissions, in-app notifications.
- Device & usage: IP address, browser, operating system, pages viewed, and diagnostic logs.
2. How we use your data
- Deliver, maintain, and improve our services (booking, dispatch, diagnostics, invoicing).
- Process payments and manage subscriptions.
- Send service reminders, appointment updates, roadside status, and account notifications.
- Provide customer support and respond to your requests.
- Detect, investigate, and prevent fraud, abuse, or security incidents.
- Comply with legal obligations (e.g. tax, consumer-protection, court orders).
3. Legal basis
We rely on: performance of a contract (to deliver services you request), your consent (for optional features such as precise location or marketing emails), our legitimate interests (to secure and improve the service), and legal obligation (for regulated record-keeping).
4. Sharing your data
We share information only with parties who help us run the service:
- Paystack — payment processing.
- Supabase — database, authentication, and file storage.
- Google — maps, authentication (Google sign-in).
- Email & messaging providers — transactional notifications from
notify.care24mobilemech.com. - Contracted technicians and workshops — only the details required to deliver your service (name, contact, location, vehicle, and issue).
- Authorities — when required by law or to protect our rights or the safety of others.
We do not sell your personal information.
5. Data retention
We keep your account and service records for as long as your account is active and for up to 7 years after closure to meet tax, warranty, and legal-record obligations. Media attachments (damage photos/videos) are kept for the life of the related service ticket plus 12 months, unless you delete them earlier. Diagnostic logs are retained for up to 90 days.
6. Security
We use industry-standard measures including encryption in transit (HTTPS), role-based access control, row-level security on all customer data, two-factor authentication for administrative accounts, and audit logging of administrative actions. No system is perfectly secure; please protect your password and enable two-factor authentication in your account.
7. Your rights
Subject to the Nigeria Data Protection Act, 2023 and other applicable laws, you may:
- Access, correct, or export the personal data we hold about you.
- Request deletion of your account and associated data.
- Object to or restrict certain processing.
- Withdraw consent for optional processing at any time.
- Lodge a complaint with the Nigeria Data Protection Commission.
To exercise these rights, email privacy@care24mobilemech.com. We respond within 30 days.
8. Cookies
We use essential cookies to keep you signed in and to remember your preferences. We use minimal analytics to understand how the service is used. You can control cookies through your browser settings.
9. Children
Our services are not intended for children under 18. We do not knowingly collect personal information from children.
10. International transfers
Some of our service providers host data outside Nigeria. Where this happens we rely on contractual protections and provider certifications to keep your data secure.
11. Changes to this policy
We will notify you of material changes by email or in-app notice at least 14 days before they take effect.
12. Contact
24 Mobile Mech Services Limited, Lekki, Lagos, Nigeria. Data queries: privacy@care24mobilemech.com. General: hello@care24mobilemech.com.