Privacy Policy

Last updated: 9 November 2026

1. Who we are

99 Crib Technologies Ltd. ("99 Crib", "we", "us") runs the 99 Crib website and mobile app, a student accommodation platform in Nigeria. For the personal data described in this policy, we are the data controller under the Nigeria Data Protection Act 2023 (the "NDPA").

This policy covers our website at 99crib.com, our iOS and Android apps, our in-app messaging, our AI assistant and any support channels we run. It applies to students, landlords and agents, and visitors.

2. Information we collect

Information you give us

• Account details: your name, email address, phone number, password (stored in protected form), role (student or landlord/agent), university, campus, and for students, department and level.
• Verification details: identity and academic checks, for example a National Identification Number (NIN) check carried out through an authorised identity verification provider, and for landlords and agents, business name and the documents needed to confirm that you may list a property.
• Listing content: property address, rent, room type, description, photos and videos (including reels), and amenities.
• Roommate profile: the preferences and profile fields you choose to add so that other students at your university can find you.
• Requests and messages: accommodation requests, inspection bookings, in-app messages, reviews, support tickets and messages you send through our contact form.

Information created when you use 99 Crib

• Booking and payment records: what you booked, amounts, dates, payment and escrow status, wallet balance and wallet history, refunds and payouts.
• Device and usage data: IP address, device model, operating system, app version, language, crash reports and how you move through the app.
• Location: only if you allow it, for example to show distance to campus. You can turn this off in your device settings.

Information from others

• Results from identity verification providers.
• Confirmation of payments, wallet activity and refunds from Rubies Payment.
• Information about a property from the landlord or agent, and the findings of our verification team after an inspection.

3. How we use your information

We use personal data only when we have a lawful basis under the NDPA. The table shows what we do and why.

4. Sensitive information and roommate matching

The NDPA treats some information as sensitive, including details about religious belief and ethnic origin. Roommate matching may let you add or filter by details such as religion or ethnicity.

• These fields are optional. You can use roommate matching without filling them in.
• We ask for your explicit consent before you add them, and you can remove them at any time in your profile.
• We never use them to decide whether you can list, book or pay, and we never show them to landlords or agents.
• We do not ask you to type this kind of information into our AI assistant or contact form.

5. Who we share it with

We do not sell your personal data. We share it only as follows:

• Landlords and agents: your name, university and booking details once you request an inspection or book, so they can complete the tenancy.
• Other students: only the roommate profile fields you choose to make visible, and only to students at your own university.
• Our verification team: the information needed to inspect a property and confirm move-in.
• Rubies Payment: the details needed to process payments, wallet savings, refunds and payouts.
• Identity verification providers: the details needed to carry out the checks you start.
• Service providers: hosting, messaging and SMS, email, customer support and analytics tools that work under our instructions and under written data protection terms.
• Authorities and advisers: where the law requires it, to protect people from harm or fraud, or to get legal or professional advice.
• A buyer or investor: if 99 Crib is involved in a merger, acquisition or similar deal. We will tell you and the same protections will continue to apply.

6. Payments and your wallet

All rent payments and wallet savings are processed by our licensed payment partner, Rubies Payment. Card numbers, bank account details and similar payment credentials are entered into and held by the payment partner. 99 Crib sees the transaction records we need to run your booking, such as the amount, date, status and reference. Rubies Payment handles your information under its own privacy notice, which we encourage you to read.

7. Transfers outside Nigeria

Some of our service providers store or process data outside Nigeria. When your data leaves the country, we make sure it is protected to the standard the NDPA requires, for example by using providers in countries with adequate protection or by putting approved contractual safeguards in place.

8. How long we keep it

• Account data: for as long as your account is open, and for a short period afterwards so we can handle disputes and complaints.
• Payment and booking records: for as long as tax, accounting and financial record-keeping laws require.
• Listings that fail verification: removed from the platform. We keep a limited record to prevent repeat fraud.
• Support messages and contact form enquiries: for as long as needed to resolve your request and handle follow-up questions.

When we no longer need data, we delete it or make it anonymous.

9. Your rights

Under the NDPA you have the right to:

• be told how your data is used (this policy does that);
• access the personal data we hold about you and get a copy;
• correct data that is wrong or incomplete;
• ask us to delete your data, where we no longer have a reason to keep it;
• restrict or object to certain uses, including direct marketing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting what we did before you withdrew it;
• not be subject to a decision based only on automated processing that has a significant effect on you.

To use any of these rights, email support@99crib.com. We may need to confirm your identity first. We aim to respond within one month. There is no charge unless a request is clearly unfounded or excessive.

10. Security

We protect personal data with encryption in transit, access controls limited to staff who need the data, secure storage and regular reviews. Payments are handled by a licensed payment partner. No system is completely secure, so please use a strong password, never share your one-time passcodes, and tell us at once if you think your account has been misused. If a breach is likely to put you at risk, we will notify the Nigeria Data Protection Commission and affected users within the time the NDPA requires.

11. Cookies and similar technologies

Our website uses a small number of cookies and similar technologies:

• Essential: a session cookie that protects our contact form against forged submissions. It is deleted when you close your browser.
• Chat assistant: on pages where the AI assistant appears, the chat widget may store a session identifier so your conversation continues as you browse.

We do not currently use advertising cookies. If we add analytics or marketing cookies in future, we will ask for your consent first and update this section. You can block or delete cookies in your browser settings, but the contact form may then not work.

12. Our AI assistant

Our assistant answers questions about using 99 Crib. Conversations are processed by an AI system and may be reviewed, with personal details masked where possible, to improve answers and to help our support team. Please do not share passwords, one-time passcodes, card numbers or your NIN in the chat. The assistant cannot move money or change your account. For anything involving a payment, refund or complaint it will pass you to a member of our team.

13. Age requirement

99 Crib is for people aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us personal data, contact us and we will delete it.

14. Changes to this policy

We may update this policy as our service or the law changes. We will change the "last updated" date above, and for important changes we will tell you in the app or by email before they take effect.

15. Contact and complaints

If you are not happy with how we handled your data, please tell us first so we can put it right. You also have the right to complain to the Nigeria Data Protection Commission (NDPC) at ndpc.gov.ng.

Read our Terms of Use for the rules that apply when you use 99 Crib.