Privacy Policy

Evidence Group Cross River State is a youth-led political movement in support of the All Progressives Congress (APC), with its head office at Marian Road, Calabar. We decide how the information described here is used, which makes us its “data controller” under the Nigeria Data Protection Act 2023 (NDPA).

When you join as a member: your full name, phone number, password (stored only in scrambled, hashed form that nobody can read), LGA, ward and polling unit, the role you choose, your school if you are a student, and a passport-style photo of your face. If you choose to, you can also give the number on your Permanent Voter’s Card (PVC) and a photo of the card, so an administrator can verify it (see our PVC Data Policy). We also record who invited you, the people you invite, your points and badges, the daily tasks you complete, whether you made a membership banner, and the date you agreed to these policies.

If a coordinator added you from a paper form: the details on that form, entered by a Super Admin or Data Admin who confirms you agreed to join. The record is marked as added by an admin until you claim it by joining with the same phone number.

When you volunteer: your name, phone number, LGA, ward, community and polling unit, and your answers about experience, skills, interests, availability and how you heard of us. You may also choose to upload a photo of your voter’s card.

When you register a group (a church, union or association): the group’s name, type, LGA, estimated size and description, and the contact person’s name, position, phone number and, if given, email address.

When you donate: your name, email address, phone number (optional), the amount and the payment reference. Card and bank details are entered on Paystack’s secure payment page. We never see or store them.

If you are a coordinator or polling unit agent: your login details and assignment; on election days, the times you check in at a polling unit, the location your phone reports when you check in, the photos of result sheets you upload with the figures you enter, and any incident reports you send (which can include a location).

When you reset a password: the phone number you enter, so we can send a one-time code. Codes are stored only in scrambled form and expire.

Technical information: a session cookie that keeps you logged in (it expires after 10 minutes without activity), and your IP address, which we use briefly to block repeated failed logins and other abuse. Your browser also keeps a few settings on your own device: light or dark theme, English or Pidgin, an unfinished volunteer form, and for agents, reports waiting to be sent when there is no network. We do not use advertising or tracking cookies.

• To register you and organise the movement by LGA, ward and polling unit.
• To verify members, issue membership IDs and let anyone check an ID is genuine.
• To count referrals, points, tasks and badges, and show the members-only leaderboard.
• To send you updates, event notices and messages about your account.
• To coordinate volunteers, groups, and our agents’ work on election days.
• To keep the platform secure and stop fake or duplicate accounts.
• To record and acknowledge donations.

We use your information on the basis of your consent, which you give when you join or submit a form. We also rely on our legitimate interest in keeping the platform secure and on any legal duty that applies to us.

• Anyone who scans your ID card sees your name, photo, LGA, ward, role and member status on its verification page. They do not see your phone number or PVC details.
• Other logged-in members can see your first name, last initial, LGA and score on the leaderboard.
• The public sees only overall totals and whether each LGA is active. No names or per-LGA member counts are published.

Only authorised Evidence Group administrators, through a password-protected dashboard, and only for their role. An administrator tied to one LGA sees records for that LGA only. Downloads of member lists need a stated reason and are logged.

We do not sell, rent or trade your personal information. We use a small number of service providers who process it only on our instructions:

• Vercel, which hosts the website;
• Neon, which hosts our database;
• Paystack, which processes donations;
• Termii, which delivers text messages such as password reset codes, once that service is switched on.

We may also share information when the law requires it, for example under a valid court order.

Our website and database run on servers in Frankfurt, Germany, in the European Union, which has data protection laws recognised as strong. Information travels between you and our servers encrypted (HTTPS).

• Member, volunteer and group records: while you remain involved, and for a reasonable period afterwards for record keeping, unless you ask us to delete them sooner.
• A rejected PVC submission: the number and photo are deleted when it is rejected.
• Password reset codes: 15 minutes if sent by text message, 24 hours if given by an administrator.
• Donation records: as long as needed for our financial records.

Encrypted connections, hashed passwords, limits on repeated login attempts, access by role, automatic logout after 10 minutes without activity, and logs of who downloads member data. No system is perfectly secure. If a breach affects your information, we will act promptly to contain it and notify the Nigeria Data Protection Commission and you as the law requires.

Under the NDPA you can:

• ask for a copy of the personal information we hold about you;
• ask us to correct it;
• ask us to delete it, or withdraw your consent, at any time;
• object to how we use it, or ask us to limit its use;
• ask for your information in a format you can take elsewhere;
• complain to the Nigeria Data Protection Commission (ndpc.gov.ng).

You can update your photo and PVC details yourself from your profile. For anything else, contact us (section 12).

Membership is for people aged 18 and over. We do not knowingly collect information from anyone younger. If you believe a person under 18 has registered, tell us and we will remove the record.

If we change this policy we will update the date at the top, and tell members about important changes on their dashboard.

• By post or in person: Evidence Group Head Office, Marian Road, Calabar, Cross River State.
• Or through your ward or LGA coordinator.